last executing test programs:

13m16.595259932s ago: executing program 0 (id=218):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

13m16.448987382s ago: executing program 0 (id=219):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff)
syz_io_uring_setup(0x6878, &(0x7f0000000180)={0x0, 0x4b1b, 0x2, 0x1, 0xca}, &(0x7f0000000100), 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x2, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
syz_genetlink_get_family_id$batadv(0x0, r5)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)

13m15.040321965s ago: executing program 0 (id=224):
socket(0x840000000002, 0x3, 0x100)
socket(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0xd, 0x81, 0x9, 0xffffffffffffffff, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x3}, 0x50)
prctl$PR_GET_TSC(0x43, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000160095210d"])

13m13.533774069s ago: executing program 0 (id=227):
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pipe2$9p(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e000000020000000a0000000500000000400000", @ANYBLOB="207d813d9dfee6e74d4852a0eb7fb111f5c2c9d8da0d48020b0388b81c9de6e05063c2a6597e54b29c8c9ed8d3f88fd30f4a3f7d4f4e78ef92475f91db7aa9ea4b54ce99a8994f188636b945506e8e77bce94ffc6984054d14cdff2bcd642f022c876ca01de3b04587e5c33c6d26e507f9fd28bd8994cdaaad4ac5e1dc89776627a9b52da9395adb773e0bc005a250b64bc0e122e92bccdce65b6391fb1e6bc90c64929396f85d904f21c608efbd9d094b8f43c509ce504bdbf1436d828226497c5cdc17f2e14b6b592bd63c3ea95f69ce9da01049bdd89b40f196828ddcb284ef63f8cfc73e2dc234a9862eba1e99", @ANYBLOB="1400"/20, @ANYRES16, @ANYRES32, @ANYRESOCT], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0, 0x0, 0x4}, 0x18)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)

13m12.625451473s ago: executing program 0 (id=231):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x4}}, 0x10)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110)
read(r5, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b02000/0x400000)=nil)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10)

13m10.640283307s ago: executing program 0 (id=241):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xa61, 0x0, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffe, 0x201, 0x8, 0xd, 0x6, 0x2, 0x7c, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x80000001, 0x7, 0x1b, 0x0, 0x0, 0x3})
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000})
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[], 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x400000000000001, 0x7, 0x200000000080], 0x84000000, 0x0, 0x0}, 0x108)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @private=0xa010102}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0xffffffffffffff9c, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYBLOB="010029bd7000fbdbdf250700000008000500ac1414aa08000400042c48b2", @ANYRES16=r7, @ANYRES8=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012abd7000fef4df25080000000500f6ff0100000008000500640101a7"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

13m8.596142288s ago: executing program 32 (id=241):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xa61, 0x0, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffe, 0x201, 0x8, 0xd, 0x6, 0x2, 0x7c, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x80000001, 0x7, 0x1b, 0x0, 0x0, 0x3})
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000})
semop(0x0, &(0x7f00000003c0)=[{}], 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[], 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x400000000000001, 0x7, 0x200000000080], 0x84000000, 0x0, 0x0}, 0x108)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @private=0xa010102}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0xffffffffffffff9c, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYBLOB="010029bd7000fbdbdf250700000008000500ac1414aa08000400042c48b2", @ANYRES16=r7, @ANYRES8=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012abd7000fef4df25080000000500f6ff0100000008000500640101a7"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

10m38.376995979s ago: executing program 5 (id=687):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x10000, 0x1008b}, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x68, @buffer={0xfb, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x4, 0x0})
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)

10m37.708272216s ago: executing program 5 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(&(0x7f0000000180), 0x80000000, 0x103001)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="cc0200001800200025bd7000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1e010600284c20801073fb650bcaf24bd85e4240c031e3edc935d4b3f0f6949839f4f23623a27b810853d3db4c9411a4685cc5b61229b3288ccd2b3e7bdc6287c0cc2c9176c6a5ea5e236c323980f3103a9476feb23941f51d95c47ea2fac5858877cec296443697d9fa59f9cb26b7b13253d51b9653d9b8ca6c83a0543bdd517e1e7c224e27f833fec2dbf065fd74ec003f451469d8b450449ef9336b4f9ff8f98d389b7d482212c5849ef697132a6a2c4d0a6b0bb40f8d6842c9c08d1b5bb1796c943cfbeaa4fb6e5064a160d8b2f0e3f059dd522c585fc93ffd61f740f7970ffb571cb3a19a6244fa4bda68c38d13a4dc858f9f2a440cdbb633c7f415d808c8a706becd70de0536015e5c462cb5a589de1a015463364e14ce18c1670300001e01060077467a04fc806186f93bc5ddcf4e6a65cec8c4ef9892680470be18694f5aa8a0cd1e19936c8571bf7617886e6227c9613ff0789cd49d754f783a44644d7cedb8bd7f3a798c4a3100c76780e2461aa4a928d12b7fb782921929a67798aa5289db8be84388c29a39f5615b354f59973d92732eba2a3b21207a1659bbb1e9ece93e47214c3350a84a20b4c1e95f21437af109cc06a870353547901e90dd9b394b84f249224a07b50de874c2036d0cb0a23ec5d5fbe2e962f3d4f61a4ce2aeefaa0522449a86303ab44acd62514825dc24e10c7d814c1348bf29c71a60b0242f69ece813f0f8389b4cd365513105e831d6ee7fa1a9d9ce3225e9282ac15b781ab2e1f4c43a71e6005db65de6f27e178b146824424a700276adbf6dda0000150001000200008006030000e389"], 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030300000700000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0)

10m37.003557875s ago: executing program 5 (id=690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000f200000000000000444df31f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x35}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3ff825ec284a", @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0x5, 0x11}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000000400000000000000c0080002dad5fade1a32e3f5814780000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r5=>0x0})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40201, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'veth0_macvtap\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
r10 = creat(&(0x7f0000000240)='./file1\x00', 0xd)
write$P9_RUNLINKAT(r10, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2)

10m35.414021105s ago: executing program 5 (id=695):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0}, 0x18)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)

10m35.09184485s ago: executing program 5 (id=700):
r0 = io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0x4fbd, 0x20000, 0x2, 0x321})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x8000, 0x0, 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "cd83052f1183a2f20edf4e09246080fba5418cb9"}, 0x15, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000140))
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x7fff, 0x1, 0x1, 0x0, 0x4})
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="ed318d5cc4f7bb0feb13884c47faf6ce416e38aabdca40afd898ea6302f7bbaffe099decd0046b39ac4a1543b450aedabaa022203f7929cc141e4dca8866fcf58dbde709c41f23a934620aa41bcfd052fc826f1a89155f4021b01caf99d5030ab77333a1a091bc9e5e98d3eb532d708cfb59c835ace1126af4cf212a7dc12f5f9b4550b176c92b130501b3033ae92be3525d28a8e5aae4a31ee7cd212cca352be73b922f441ac17d54cbcde72d73fca3fb817127e2b6145c172db44b6a", 0xbd}], 0x1)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x105001, 0x89)
statx(r3, &(0x7f0000000380)='./file0\x00', 0x1000, 0x400, &(0x7f00000003c0))
r4 = fanotify_init(0x40, 0x1000)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x8, 0x5, 0x4, 0x400, 0x5, <r5=>0x0})
fcntl$setown(r4, 0x8, r5)
r6 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000540)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r6, 0x8923e000)
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000580), 0x2, 0x0)
lseek(r0, 0x1, 0x2)
syz_io_uring_setup(0x65eb, &(0x7f00000005c0)={0x0, 0x8548, 0x1000, 0x3, 0x347, 0x0, r3}, &(0x7f0000000640)=<r7=>0x0, &(0x7f0000000680))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x62a5f4c30022883e, &(0x7f00000006c0)=0x3, 0x0, 0x4)
ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000)
socket$igmp6(0xa, 0x3, 0x2)
read$FUSE(r3, &(0x7f0000000700)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, r8, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002740)=[r6, r0], 0x2)
fsetxattr$security_ima(r6, &(0x7f0000002780), &(0x7f00000027c0)=@v1={0x2, "099054ddc53dc8eab1e46ff8"}, 0xd, 0x1)
mount(&(0x7f0000002800)=@sr0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880)='befs\x00', 0x11000, &(0x7f00000028c0)='net_prio.ifpriomap\x00')
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000002900)={0x9f, 0x0, 0x1})
execveat(r3, &(0x7f0000002980)='./file0\x00', &(0x7f0000002b40)={[&(0x7f00000029c0)='/dev/sr0\x00', &(0x7f0000002a00)='\x00', &(0x7f0000002a40)='{^,/\'\x89-\x00', &(0x7f0000002a80)='security.ima\x00', &(0x7f0000002ac0)='*\x00', &(0x7f0000002b00)='/sys/fs/smackfs/access\x00']}, &(0x7f0000002c00)={[&(0x7f0000002b80)='/dev/vim2m\x00', &(0x7f0000002bc0)='*#*\x00']}, 0x100)
io_uring_enter(r3, 0x5ea0, 0xcf81, 0x50, &(0x7f0000002c40), 0x8)

10m34.40303106s ago: executing program 5 (id=702):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
close(0x3)

10m33.783027256s ago: executing program 33 (id=702):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
close(0x3)

8m3.868561067s ago: executing program 3 (id=1177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x26c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x204, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "161e20d6f29a75b60a033426206251bd7a447aaa152597e11c93733cf4e261ae68d47f3d0ee108011952b1e66b9128ca295a27fac98d438f9317f176a5249da444f261d32a7306c71688bb1c978c0b38f5111ba374427743c12cbdbee0051dd71b73ff1c2681eea0c559fb30441366d6fcc616f2f223b1b5466d2c67c958db9637f6c53afdca4061701cf806d667d1df4c9e7dbfe2403f1467513655bf9469c0ac3df4a64a8ad3f878edbb9dad3b08"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x20, 0x3, "66d1248eff289402eda6e630234dc30a449481abf6e35b84d7e8b9c2"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cd3c3a9223957421b8de8587006a486a24173852"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xce, 0x3, "e93893b102680e081f04a3dab6d9354ab4837be3759888fa08ae4e3c206a799b9ade365139d188407b634eba6a8b6d478852a41b50352a6766a7efcddb8c001e1382608d5ca02df665cc1d9cfa400f03c0053d9dc0323a9d4da96f624b29edbc0538a2f6eeb56f1387daea7a8b4c401e241db8660f64003f58ea8349088c79f8b9b93065a8f8264d7898f2b01b7be0b681beca0ca93a4504647a3ab50bc818f2dc8523edbd89f66e039c6dcc8fe85178d02bd137c8b588b436e900ccc4ca561796244e0f157d495338cf"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x26c}}, 0x40000)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x4000)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0x8, 0x7, 0x1, 0x3, 0x1, 0x7, 0x80000001, 0x80, 0x4, 0xff, 0x1, 0x36dd, 0x8, 0xfffffffd, 0x2, 0x4, {0xddf, 0xfffffff8}, 0x0, 0x1}})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x40)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x882924}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)
connect$unix(r2, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x33}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x22281929}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40040)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r2)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040004)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000ac0)={0x3, 'macvlan0\x00', {0x89}, 0x991})
listen(r4, 0x3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd4, 0x3, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x76}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x6000001)
r8 = accept4$ax25(r2, 0x0, &(0x7f0000000cc0), 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000d00)=@bpq0, 0x10)
r9 = accept4$packet(r2, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14, 0x80000)
r10 = accept4$packet(r9, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r5, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000091)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r11, &(0x7f0000001440)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000000f80)={0x45c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x49, 0x56}}}}, [@NL80211_ATTR_TESTDATA={0x47, 0x45, "56883e344b33aa4defe47f2b43ad947b831fa59a9616b8b7c1529530bc841e1b6bb2a6ea37b339ed72c6af9a058061c1dd879388eb52c991b4e72fe88ec4643570a9a3"}, @NL80211_ATTR_TESTDATA={0x88, 0x45, "9e7dfc32bf89f5cd1f9e984e527c190c2aa1846ac6469c81f5a11a286005bf78cd76f2e85e4e37af14fccaeb32c84ca0c6ec75d056077e286169104861b8a2fe1a37a8fd7668a1cf189961856eaa104d96f3da8898a729cd44989a83f59c328e4d232a6c72ce5dce971c3d0ee856ff49161bad0ca6515ac5816e5a3f07debe8e2e21242f"}, @NL80211_ATTR_TESTDATA={0x4d, 0x45, "b0bcbb14baf8a8b355d0dd0168b1cb81762f3f273297186095fbf9e1950ccd708149d5ba9174e3cc41be5f1e09ccee5b3ab532fc3cfadcc583357c61787d76e5e0eb7336665149587a"}, @NL80211_ATTR_TESTDATA={0x74, 0x45, "a6797d98f5c67cc6b111190cc1a12ad8b90796677bc57c17ce280704da2a3ac4d7309bf48dbf1d9b04e7a06e92cb7bffcf23cae7c2ecbb26efffa69b6a72c1a907e6e55630a2a73879a3d74829550f06c4d5b88a3c22065163fbde9f30420d90305b5341a023025e8c41a0981c5621e4"}, @NL80211_ATTR_TESTDATA={0xd7, 0x45, "04bf4b104e198459434199faa7083930148dd1095677b6aa68b1c5de6da15423240542cd16b0b3029d89cef5b96840f4222b00b3168d9357c9c6ef0aed8dfbe4897681a40a9bab808cec63671d7a97e445faa44ec7cc547b206d66b6895adfeafaaf19a4c90f29790ac939c83467d8589936b09205a1c71ee78cdc49bee199137c14359666a9e4338aca93afc90e6f7a068e956cccf0a37a5e8f12aa818670e879d82874e2f6f206ed69d9fd4a2b13e20f4639f91f2c55b10c8fef4ac77770e97742060359a4b1e953b9331a577534b2d03b52"}, @NL80211_ATTR_TESTDATA={0x95, 0x45, "67439efc9d0df2f43c693627f6639508b5f0fc88f177aee8b6eb697c40600dcaa1191cad1cd3550b32461a0504ce8d00c470c1d2a5fa9e7281bc7ed0d80f5278e2dae74c2422455bb6113cd09c13389f0acbee3e7361cdf19af72a2b65e762179a53ba2782b5e0bb0fa0d0091e0bbcb833d6386ba62ffafec11f7e1b733d7a98264de9d5c88ae57b38d42ce76ef622bfb9"}, @NL80211_ATTR_TESTDATA={0x71, 0x45, "381ed98517986df811260648b08a66226eb5e4bc3856fb8ca056e71c509c9f27419d39652a8d95c6fdd47a506adec86823bae46549cd595546df0542e9a8b80701d96d246ec48cffd45deb22d305bd88c6dc87f8593d3621a067caa47cc3b46ac53cc63b7fbb1c2f5f38991f8e"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "607e1712dd5f38e0c037f1648ab9a64d8342e9988e6dc1bd876304b7f4c5b7dff26d566a9ad1a2d2b4103bdcf0f00f1ae68898cf4a8dcfe83aa89592b5c5618163193a4ad0fb80c8bf3d7dc6c97ed55ae984faf2223e64df84787b95681e5495d5ca5ba7f4f347f5a7fcc8a5b83f4750406926752da0d16c8f1a867a34ba4ad16d98a0cc80bc3120f5f20ff99e724d422aa39d195ed38598748b0048b2727aecf035cb9a0a81e01cbfb0f07e894d6e68fb49ccadc4"}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000001480)={0x48, 0x1, 0x0, 0x0, 0x1})
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001500)={<r12=>r8})
r13 = syz_genetlink_get_family_id$smc(&(0x7f0000001580), r2)
sendmsg$SMC_PNETID_FLUSH(r12, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r13, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x800)

8m3.744129557s ago: executing program 3 (id=1179):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000207000200000000000058fa00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c00028006000500810000000a000100aaaaaaaaaaaa0000"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f626f696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r9 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc00)
ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000500)={"b0453822", 0x400, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", '\x00', "ee8ccda7", "c77e072c", ["c3dad2b677ffffffffffec00", "51f3541a910080ffffcb3a10", "e100"]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0, @alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94)

8m1.471241414s ago: executing program 3 (id=1183):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

8m0.815493517s ago: executing program 3 (id=1185):
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e000000020000000a0000000500000000400000", @ANYBLOB="207d813d9dfee6e74d4852a0eb7fb111f5c2c9d8da0d48020b0388b81c9de6e05063c2a6597e54b29c8c9ed8d3f88fd30f4a3f7d4f4e78ef92475f91db7aa9ea4b54ce99a8994f188636b945506e8e77bce94ffc6984054d14cdff2bcd642f022c876ca01de3b04587e5c33c6d26e507f9fd28bd8994cdaaad4ac5e1dc89776627a9b52da9395adb773e0bc005a250b64bc0e122e92bccdce65b6391fb1e6bc90c64929396f85d904f21c608efbd9d094b8f43c509ce504bdbf1436d828226497c5cdc17f2e14b6b592bd63c3ea95f69ce9da01049bdd89b40f196828ddcb284ef63f8cfc73e2dc234a9862eba1e99", @ANYBLOB="1400"/20, @ANYRES16, @ANYRES32, @ANYRESOCT], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e6}, 0x94)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)

7m58.945291822s ago: executing program 3 (id=1188):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000040), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x7, 0x3, 0x2, "f6b7ead6c9b7c4b342ee419b9bc3de732a7256dfb8fbe8a1733521830e85cd08", 0x4745504d})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
syz_open_dev$sndctrl(0x0, 0x10001, 0x14c80)
ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000080)=0x3ff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001720000180070001007274"], 0xb4}}, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000100)=0x400)
sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x1}, 0x0)
bind$inet(r3, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x4, &(0x7f0000000180)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

7m57.932210307s ago: executing program 3 (id=1192):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4c2c00, 0x88)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16, @ANYBLOB="a092eec2970592d28ac7ba46441d91b2a7ebe2a82959db314bb56b69f20d13bbca7b448bde8ef774f86e55285bf8c887c47ca07eb1ffa39863a0bb3f5988937647562a78d343b4e181fed39716288616a39c89a50bf22ead1dc3a83b0321f81cb0614fd2a73aea9a0d7b79dc5bc60ed2ffab00eff75eda2098510d929778d3de9dd03bfee5301bbaca1e625d7169cab046c18a8bd8baba3e958995f296366c", @ANYRES16=r0], 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000240)=[{0x101, 0x5, 0x3, 0x8}, {0x1, 0x0, 0x2, 0x7}]})
r2 = getpgid(0xffffffffffffffff)
fcntl$setown(r1, 0x8, r2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x4000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
clock_getres(0x5d2d578ddb601e47, 0x0)
poll(0x0, 0x0, 0x9)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0})
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00dd0000000000000000000000000000000000000000004000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x45)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\x00')

7m56.697890361s ago: executing program 34 (id=1192):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4c2c00, 0x88)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16, @ANYBLOB="a092eec2970592d28ac7ba46441d91b2a7ebe2a82959db314bb56b69f20d13bbca7b448bde8ef774f86e55285bf8c887c47ca07eb1ffa39863a0bb3f5988937647562a78d343b4e181fed39716288616a39c89a50bf22ead1dc3a83b0321f81cb0614fd2a73aea9a0d7b79dc5bc60ed2ffab00eff75eda2098510d929778d3de9dd03bfee5301bbaca1e625d7169cab046c18a8bd8baba3e958995f296366c", @ANYRES16=r0], 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000240)=[{0x101, 0x5, 0x3, 0x8}, {0x1, 0x0, 0x2, 0x7}]})
r2 = getpgid(0xffffffffffffffff)
fcntl$setown(r1, 0x8, r2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x4000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
clock_getres(0x5d2d578ddb601e47, 0x0)
poll(0x0, 0x0, 0x9)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0})
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00dd0000000000000000000000000000000000000000004000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x45)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\x00')

7m24.182334734s ago: executing program 1 (id=1306):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x18}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x200, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) (async, rerun: 32)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x73, 0x0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r6, 0x0)
get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000001000/0x1000)=nil, 0x2) (async, rerun: 64)
write$binfmt_script(r5, &(0x7f0000000180), 0xfefc) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) (async, rerun: 64)
sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x1}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="ac545ddf211ec627d453f829a2ff55ce8081f99bca0e4aaae7af58b3fd5aae92c010708b74f772d3182072a899ae2c552dba6b822a3a78e6c8fd215671723629ac624584b653298f8577519644414ee806440f34b2665579c0618dbd0b60b019b90dcb22655b71e30befdc262c86f95575d9e701151fd40ad770837d495e06fece2bb3bfd5c1a51b93ce2fdda1664938f84c1c24957b8d967a9b2e990cfb9e8686483769c9310c80184e39529dff947abeebbb6bdc687eb9e7ed9409f87417d03232e0fb", 0xc4}, {&(0x7f0000000380)="0c1501b050c276f24889abff4e0d5e5cd022ae44a8abc801413663c8a63392ea28104dbc1fb5e6e334b6618bf257a985e3c86bcff80439f5070e64b2460293c0a7cb485ec542568974ecabb3c913c511a15ababe1bf234279f34", 0x5a}], 0x2, &(0x7f0000000500)="95e5fe029c1831e4adc4e56d621b1ab6cf811e22435b3cbe5c463ee7b5f0a297b61e94b0da907bcbd5e464a9af", 0x2d, 0x1}, 0x0) (async, rerun: 64)
r7 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x2, 0x33a}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0) (async, rerun: 64)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="38b07812bff8119b9a7f51cb37bdf465ed2c34a1a65af646e0ef49c128ecebe8fb7960ac51bee81b6805d6af03dd1a25f19f6c76fc24138ca0333c26ff3eff47b80f9208c4537c17e302a37c583fee862fe31113c6e3ddcf43d5a25707110917770d44ef"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008095) (async, rerun: 64)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r11, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private0, @in6=@private1}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8)

7m22.076985989s ago: executing program 1 (id=1310):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/26, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000000c0)="108ef734e529f466b0184d393e9264585f844ffc482755a3759580532ccb91e3e488102f38ef8b1fa924a7c588c7abb3f5305e78483d18b656fee78cdf481e3ad10c46e68c081b49971c4dbeb69590a8cde24cf93d77", 0x56})
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast, {[@rr={0x7, 0xb, 0x7, [@multicast1, @multicast2]}]}}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0)

7m21.833127581s ago: executing program 1 (id=1314):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="1cf800", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x10229, 0x7, 0x6}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="0f38f6a800100f0d642b0f01c8e300360f23082e6666660f79e60f9d8cf7ff2e0f080f7813f30f22dd"}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0)

7m19.633071854s ago: executing program 1 (id=1328):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 8)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000340)={0x13, 0x1, 0x1, "8eb8a83fe93b07f1dd06da7a41bfeac48048beb159fbba17425ced8f098c68d9"})

7m18.064614203s ago: executing program 1 (id=1334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000980)={0x2, 0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000740)=""/241, 0xf1}], 0x0}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
lseek(r2, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000340)={0x0, 0xea60}, 0x10)

7m15.899382624s ago: executing program 1 (id=1339):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100001c80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f00000007c0)=""/160, 0xa0)
writev(r0, &(0x7f0000000840), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0)
recvfrom$inet_nvme(r7, 0x0, 0x0, 0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000406e4010000000000000000020000021900000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x288}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0x6, 0x0, 0x4, 0x1})

7m0.592200417s ago: executing program 35 (id=1339):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100001c80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f00000007c0)=""/160, 0xa0)
writev(r0, &(0x7f0000000840), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0)
recvfrom$inet_nvme(r7, 0x0, 0x0, 0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000406e4010000000000000000020000021900000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x288}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0x6, 0x0, 0x4, 0x1})

6m41.582084516s ago: executing program 2 (id=1432):
socket(0x2b, 0xa, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_emit_ethernet(0x43, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x35, 0x6a, 0x0, 0xa, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x2c, 0x7fff, 0x65, 0x9, 0x9, 0x4, 0x1, @multicast2, @local}, "e8e3c2b17c"}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000000)=0xe, 0x4)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

6m39.836883444s ago: executing program 2 (id=1437):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = dup(r3)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7})

6m38.958638179s ago: executing program 2 (id=1440):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
userfaultfd(0x800)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

6m36.363885556s ago: executing program 2 (id=1445):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e000000020000000a0000000500000000400000", @ANYBLOB="207d813d9dfee6e74d4852a0eb7fb111f5c2c9d8da0d48020b0388b81c9de6e05063c2a6597e54b29c8c9ed8d3f88fd30f4a3f7d4f4e78ef92475f91db7aa9ea4b54ce99a8994f188636b945506e8e77bce94ffc6984054d14cdff2bcd642f022c876ca01de3b04587e5c33c6d26e507f9fd28bd8994cdaaad4ac5e1dc89776627a9b52da9395adb773e0bc005a250b64bc0e122e92bccdce65b6391fb1e6bc90c64929396f85d904f21c608efbd9d094b8f43c509ce504bdbf1436d828226497c5cdc17f2e14b6b592bd63c3ea95f69ce9da01049bdd89b40f196828ddcb284ef63f8cfc73e2dc234a9862eba1e99", @ANYBLOB="1400"/20, @ANYRES16, @ANYRES32, @ANYRESOCT], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e6}, 0x94)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)

6m34.040274172s ago: executing program 2 (id=1449):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = dup(r3)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7})

6m33.602037663s ago: executing program 2 (id=1451):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x2, 0x0})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7a7})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x300, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x94, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9a41202edf220fd4b30aec86fba275fca4f48569e0a3fd35"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8727f72f10ce9677bd79112d45ea6a2ddd4e4a4d62f06331"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "05779847844926ae0857fda74c15d24133ee7dacc85f53d6"}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x8004004)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r10 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000000))

6m33.026034954s ago: executing program 36 (id=1451):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x2, 0x0})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7a7})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x300, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x94, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9a41202edf220fd4b30aec86fba275fca4f48569e0a3fd35"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8727f72f10ce9677bd79112d45ea6a2ddd4e4a4d62f06331"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "05779847844926ae0857fda74c15d24133ee7dacc85f53d6"}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x8004004)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r10 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000000))

10.0621896s ago: executing program 7 (id=2590):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x400, 0x9, 0x20363159, 0x4, 0x0, [{0x6, 0x9}, {0x5, 0x4}, {0x6, 0xffffff80}, {0x4, 0x80000001}, {0x402ba6fa, 0xc52}, {0x3, 0x401}, {0xf, 0x3}, {0xed, 0xfffffff7}], 0x7, 0x0, 0x1, 0x2, 0x4}})

9.712435171s ago: executing program 7 (id=2592):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0xbbc, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000002c0)=0x1e)

8.736315625s ago: executing program 7 (id=2594):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0)

8.680084048s ago: executing program 9 (id=2596):
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14088eb406397b78089e5ad87f63f5c9241e", 0x12, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

7.588440036s ago: executing program 7 (id=2599):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)

7.320939206s ago: executing program 4 (id=2491):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000), 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_tcp(0x2, 0x1, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff, 0x100002}, 0x0, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd, 0x5, "fee8a2ab6447a4b4e00d9683dda1af1ea09de2b7fb0a010000000000000000030000000000000000000180000000000010000000001300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000007fff]}})
syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88501)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setrlimit(0xe, &(0x7f0000000040)={0xfc, 0x2})
connect$inet(r4, &(0x7f0000000000)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)

6.542043715s ago: executing program 8 (id=2603):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unshare(0x2000400)
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f0000003840)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x400}, 0x1c)

6.523261152s ago: executing program 4 (id=2604):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
fanotify_init(0x200, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0)

6.444357315s ago: executing program 9 (id=2605):
socket(0x200000100000011, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

6.432184362s ago: executing program 6 (id=2606):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff51fb, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x9, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]})

5.928637363s ago: executing program 8 (id=2607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000080a010400000000000000000a0000060900010073797a310000000009000200"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

5.884158122s ago: executing program 9 (id=2608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xda)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
getrlimit(0xd, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0)

5.564408145s ago: executing program 6 (id=2609):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)

5.547078806s ago: executing program 7 (id=2610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x4, 0x8, 0x1, 0x7, 0x3, 0x6, 0xb, 0x23f, 0x40, 0x3c0, 0x1, 0x9, 0x38, 0x1, 0x7f, 0x9f2, 0xe78}, [{0x70000000, 0x5, 0x1, 0x10000, 0x9984, 0x80000000, 0x8, 0x2}], "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", ['\x00']}, 0x7d6)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.752538671s ago: executing program 4 (id=2611):
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.752215545s ago: executing program 8 (id=2612):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

4.698535498s ago: executing program 9 (id=2613):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e80)={@fallback, 0xffffffffffffffff, 0x9, 0x8}, 0x20)

4.368012207s ago: executing program 9 (id=2614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x499, &(0x7f0000000140)={0x0, 0xa064, 0x3180, 0x2, 0x25c}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0)

4.312173777s ago: executing program 7 (id=2615):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', 0x0, 0x0, 0x0)
r2 = open(0x0, 0x0, 0x718bb647156ec3b7)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
chown(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.653759883s ago: executing program 4 (id=2616):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x6, 0x0, 0x1, 'queue0\x00', 0x1})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

3.652937924s ago: executing program 8 (id=2617):
socket$packet(0x11, 0x2, 0x300)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4810)

3.448304077s ago: executing program 6 (id=2618):
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, 0x0)

3.378103449s ago: executing program 4 (id=2619):
fsopen(0x0, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0)

2.563490248s ago: executing program 9 (id=2620):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)

2.496345683s ago: executing program 6 (id=2621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
close(r4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, 0x0, 0x0)

1.391162521s ago: executing program 6 (id=2622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='rpcb_register\x00'}, 0xf)
getegid()

1.081135762s ago: executing program 8 (id=2623):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r2 = syz_open_pts(r0, 0x101)
r3 = dup3(r2, r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x400, 0x200000400000000, 0x5, 0x344, 0x3}, 0x0, 0x0)
write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c)

104.719733ms ago: executing program 6 (id=2624):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = epoll_create1(0x0)
poll(&(0x7f00000000c0)=[{r2, 0x34}, {r3, 0x254d}], 0x2, 0x90f0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

298.783µs ago: executing program 4 (id=2625):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)='P', 0x1}], 0x1}}], 0x1, 0x0)

0s ago: executing program 8 (id=2626):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

ek_kbd 0003:04D9:A055.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1
[  687.067657][T13723] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  687.073724][T13723] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  687.115912][T13737] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  687.140726][T13737] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  687.688183][T13743] No such timeout policy "syz0"
[  687.701043][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  687.761007][T13723] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  687.761523][T13737] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  687.767054][T13723] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  687.784311][T13737] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  687.890440][T13737] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  687.951038][T13723] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  687.956968][T13723] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  688.070018][T12081] usb 8-1: USB disconnect, device number 11
[  688.171036][T13753] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  688.347771][T13753] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  688.370342][T13753] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  688.463190][T13757] syz.7.1829: attempt to access beyond end of device
[  688.463190][T13757] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  688.480830][T13757] (syz.7.1829,13757,0):ocfs2_get_sector:1714 ERROR: status = -5
[  688.488973][T13757] (syz.7.1829,13757,0):ocfs2_sb_probe:753 ERROR: status = -5
[  688.496570][T13757] (syz.7.1829,13757,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  688.505588][T13757] (syz.7.1829,13757,0):ocfs2_fill_super:1177 ERROR: status = -5
[  689.414162][T13765] hugetlbfs: Bad value for 'uid'
[  689.423520][T13765] hugetlbfs: Bad value for 'uid'
[  689.431137][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  689.539117][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'.
[  690.113541][T13769] netlink: 'syz.4.1836': attribute type 10 has an invalid length.
[  691.769866][    T9] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  691.992847][T13795] syz.8.1840: attempt to access beyond end of device
[  691.992847][T13795] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  692.008273][T13795] (syz.8.1840,13795,0):ocfs2_get_sector:1714 ERROR: status = -5
[  692.017827][T13795] (syz.8.1840,13795,0):ocfs2_sb_probe:753 ERROR: status = -5
[  692.028877][T13795] (syz.8.1840,13795,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  692.096758][T13795] (syz.8.1840,13795,1):ocfs2_fill_super:1177 ERROR: status = -5
[  692.102208][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  692.255855][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[  692.627913][    T9] usb 8-1: config 0 has an invalid interface number: 88 but max is 0
[  692.674506][    T9] usb 8-1: config 0 has no interface number 0
[  692.708024][    T9] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  692.752712][    T9] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  692.785010][    T9] usb 8-1: config 0 interface 88 has no altsetting 0
[  692.804608][    T9] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  692.832049][    T9] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  692.868510][    T9] usb 8-1: Product: syz
[  692.889803][    T9] usb 8-1: Manufacturer: 庇໓帤秶】꽰쒴뉲ὡ礃Ş뙾藴뺕촘β倳᮱䯮��೷藞�簺詑尧᯴뉙�▧�蓦筃�梣�輤穒�Ꜭ�鷴춘錙⤿�頳䟈녜ӱ딜B蕆ｵﯘᷡ�妯廠�部﨩쟎丱弹��黪녤袗
[  692.913011][    C0] vkms_vblank_simulate: vblank timer overrun
[  692.940430][    T9] usb 8-1: SerialNumber: syz
[  692.960634][    T9] usb 8-1: config 0 descriptor??
[  693.005403][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  693.251605][T13816] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  693.266441][T13816] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  693.275643][T13816] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  693.760252][    T9] input: 庇໓帤秶】꽰쒴뉲ὡ礃Ş뙾藴뺕촘β倳᮱䯮��೷藞�簺詑尧᯴뉙�▧�蓦筃�梣�輤穒�Ꜭ� as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.88/input/input25
[  693.868805][    T9] usb 8-1: USB disconnect, device number 12
[  694.680007][T10873] udevd[10873]: Error opening device "/dev/input/event4": No such file or directory
[  694.772084][T10873] udevd[10873]: Unable to EVIOCGABS device "/dev/input/event4"
[  694.802373][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  694.817634][T10873] udevd[10873]: Unable to EVIOCGABS device "/dev/input/event4"
[  695.119698][    T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  695.676165][T13828] netlink: 'syz.9.1851': attribute type 6 has an invalid length.
[  695.746730][T13828] netlink: 'syz.9.1851': attribute type 7 has an invalid length.
[  695.754561][T13828] netlink: 'syz.9.1851': attribute type 8 has an invalid length.
[  696.022809][    T9] usb 8-1: Using ep0 maxpacket: 8
[  696.055544][    T9] usb 8-1: config index 0 descriptor too short (expected 30482, got 18)
[  696.069188][    T9] usb 8-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  696.077928][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 101
[  696.128321][    T9] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  696.190640][    T9] usb 8-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  696.199021][    T9] usb 8-1: Product: syz
[  696.245885][    T9] usb 8-1: Manufacturer: syz
[  696.275380][    T9] usb 8-1: config 0 descriptor??
[  696.305089][    T9] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  696.344980][    T9] usb 8-1: Detected FT2232C/D
[  696.377979][ T5910] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  696.476427][T13853] netlink: 'syz.9.1859': attribute type 2 has an invalid length.
[  696.546501][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11
[  696.596237][    T9] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  696.614223][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25841, setting to 1024
[  696.663329][ T5910] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  696.698867][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.755554][ T5910] usb 9-1: config 0 descriptor??
[  696.774263][T13842] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  696.889016][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.899658][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.981309][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.981386][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.258952][ T5910] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0
[  698.444567][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  699.858310][ T5987] usb 8-1: USB disconnect, device number 13
[  699.915362][ T5910] lenovo 0003:17EF:6047.0015: Failed to switch F7/9/11 mode: -71
[  699.928854][ T5987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  699.977391][ T5910] lenovo 0003:17EF:6047.0015: Failed to switch middle button: -71
[  700.001477][ T5987] ftdi_sio 8-1:0.0: device disconnected
[  700.081356][ T5910] lenovo 0003:17EF:6047.0015: Fn-lock setting failed: -71
[  700.111704][ T5910] lenovo 0003:17EF:6047.0015: Sensitivity setting failed: -71
[  700.124292][T13880] loop1: detected capacity change from 0 to 7
[  700.243677][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  700.276974][ T5910] usb 9-1: USB disconnect, device number 2
[  700.278151][T13880] Dev loop1: unable to read RDB block 7
[  700.405778][T13880]  loop1: AHDI p4
[  700.409489][T13880] loop1: partition table partially beyond EOD, truncated
[  701.094135][T13888] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1866'.
[  701.140346][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1866'.
[  703.621942][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1877'.
[  703.711415][T13909] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1877'.
[  703.766850][T13909] vlan2: entered allmulticast mode
[  703.829263][T13921] 9pnet_fd: Insufficient options for proto=fd
[  703.870446][T13914] IPv6: addrconf: prefix option has invalid lifetime
[  704.094236][   T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  704.253127][   T24] usb 10-1: device descriptor read/64, error -71
[  704.504724][   T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  704.591944][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  704.739357][   T24] usb 10-1: device descriptor read/64, error -71
[  704.932076][   T24] usb usb10-port1: attempt power cycle
[  705.313158][ T6887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  705.884570][   T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  705.980534][   T24] usb 10-1: device descriptor read/8, error -71
[  706.294537][   T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  706.367119][   T24] usb 10-1: device descriptor read/8, error -71
[  706.536481][   T24] usb usb10-port1: unable to enumerate USB device
[  706.569036][T13956] gre1: entered promiscuous mode
[  706.583009][T13956] gre1: entered allmulticast mode
[  707.341150][ T5987] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  707.353025][ T5987] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  707.360809][ T5987] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  708.350215][ T5987] hid-generic 0000:0004:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  708.692624][T13974] fido_id[13974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  708.783885][ T5936] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  709.037981][ T5936] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.115221][ T5936] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  709.361196][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  709.380726][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  709.511552][ T5936] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  709.998586][ T5936] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  710.005966][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  710.008044][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  710.036587][T13977] virt_wifi0 speed is unknown, defaulting to 1000
[  710.061185][ T5936] usb 8-1: Product: syz
[  710.065410][ T5936] usb 8-1: Manufacturer: syz
[  710.105956][ T5936] usb 8-1: SerialNumber: syz
[  710.191736][ T5936] usb 8-1: config 0 descriptor??
[  710.197173][T13985] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  710.207726][T13985] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  710.216393][T13985] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  710.385059][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  710.694755][ T5936] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -110
[  710.741893][ T5936] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5
[  711.229763][ T5936] usb 8-1: USB disconnect, device number 14
[  711.483409][T13990] 9pnet_fd: Insufficient options for proto=fd
[  711.491451][T13992] openvswitch: netlink: Message has -3 unknown bytes.
[  711.504151][T13992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  713.471841][   T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  713.666449][   T24] usb 7-1: Using ep0 maxpacket: 32
[  713.903277][   T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  714.105413][   T24] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.195883][   T24] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  714.259149][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  714.286913][   T24] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  714.343790][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.396704][   T24] usb 7-1: config 0 descriptor??
[  714.622399][   T24] usbhid 7-1:0.0: can't add hid device: -71
[  715.246270][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  715.282220][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  715.362760][   T24] usb 7-1: USB disconnect, device number 31
[  716.158496][   T30] audit: type=1326 audit(1755600811.401:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  716.236282][   T30] audit: type=1326 audit(1755600811.401:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  716.287421][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  716.348363][   T30] audit: type=1326 audit(1755600811.401:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  716.574191][   T30] audit: type=1326 audit(1755600811.401:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.175922][   T30] audit: type=1326 audit(1755600811.401:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.208436][T12081] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  717.318196][   T30] audit: type=1326 audit(1755600811.401:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.358523][   T30] audit: type=1326 audit(1755600811.401:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.382218][   T30] audit: type=1326 audit(1755600811.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.511543][   T30] audit: type=1326 audit(1755600811.401:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  717.533254][T12081] usb 8-1: Using ep0 maxpacket: 16
[  717.541696][T12081] usb 8-1: config 0 has an invalid interface number: 25 but max is 0
[  717.787601][T14054] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.853869][   T30] audit: type=1326 audit(1755600811.401:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.4.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  718.461405][T12081] usb 8-1: config 0 has no interface number 0
[  719.939303][T12081] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12
[  719.948392][T12081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.971251][T12081] usb 8-1: config 0 descriptor??
[  719.983628][T12081] usb 8-1: can't set config #0, error -71
[  720.000580][T12081] usb 8-1: USB disconnect, device number 15
[  720.360879][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.435323][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.452327][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  720.861830][T12081] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  720.968101][T14073] random: crng reseeded on system resumption
[  721.636441][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  721.728802][T12081] usb 8-1: device descriptor read/64, error -71
[  722.065049][T12081] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  722.417374][T12081] usb 8-1: device descriptor read/64, error -71
[  722.680480][T12081] usb usb8-port1: attempt power cycle
[  723.491115][T12081] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  723.608911][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1929'.
[  723.691121][T14088] netlink: 'syz.7.1929': attribute type 10 has an invalid length.
[  723.732299][T12081] usb 8-1: device not accepting address 18, error -71
[  724.989732][T14104] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  724.999110][T14104] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  725.008577][T14104] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  725.812954][ T1328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  726.481032][T14121] trusted_key: encrypted_key: insufficient parameters specified
[  727.293202][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  727.304297][T14116] tipc: Started in network mode
[  727.309195][T14116] tipc: Node identity 080211, cluster identity 4711
[  727.330198][T14116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  727.452884][T14116] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  727.460408][T14116] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode
[  727.582887][T14113] tipc: Resetting bearer <eth:syzkaller0>
[  727.596015][T14130] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1939'.
[  728.281039][ T5936] tipc: Node number set to 134353152
[  728.767574][T14147] FAULT_INJECTION: forcing a failure.
[  728.767574][T14147] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.795844][T14147] CPU: 0 UID: 0 PID: 14147 Comm: syz.6.1948 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  728.795872][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  728.795885][T14147] Call Trace:
[  728.795893][T14147]  <TASK>
[  728.795902][T14147]  dump_stack_lvl+0x189/0x250
[  728.795930][T14147]  ? __pfx____ratelimit+0x10/0x10
[  728.795952][T14147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  728.795974][T14147]  ? __pfx__printk+0x10/0x10
[  728.796000][T14147]  ? __might_fault+0xb0/0x130
[  728.796035][T14147]  should_fail_ex+0x414/0x560
[  728.796068][T14147]  _copy_from_user+0x2d/0xb0
[  728.796096][T14147]  ___sys_sendmsg+0x158/0x2a0
[  728.796129][T14147]  ? __pfx____sys_sendmsg+0x10/0x10
[  728.796200][T14147]  ? __fget_files+0x2a/0x420
[  728.796218][T14147]  ? __fget_files+0x3a0/0x420
[  728.796248][T14147]  __sys_sendmmsg+0x227/0x430
[  728.796282][T14147]  ? __pfx___sys_sendmmsg+0x10/0x10
[  728.796309][T14147]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  728.796361][T14147]  ? ksys_write+0x22a/0x250
[  728.796380][T14147]  ? __pfx_ksys_write+0x10/0x10
[  728.796394][T14147]  ? rcu_is_watching+0x15/0xb0
[  728.796421][T14147]  __x64_sys_sendmmsg+0xa0/0xc0
[  728.796452][T14147]  do_syscall_64+0xfa/0x3b0
[  728.796472][T14147]  ? lockdep_hardirqs_on+0x9c/0x150
[  728.796493][T14147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.796513][T14147]  ? clear_bhb_loop+0x60/0xb0
[  728.796537][T14147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.796556][T14147] RIP: 0033:0x7fd19478ebe9
[  728.796574][T14147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  728.796590][T14147] RSP: 002b:00007fd19563c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  728.796618][T14147] RAX: ffffffffffffffda RBX: 00007fd1949b5fa0 RCX: 00007fd19478ebe9
[  728.796633][T14147] RDX: 0000000000000001 RSI: 0000200000003980 RDI: 0000000000000003
[  728.796646][T14147] RBP: 00007fd19563c090 R08: 0000000000000000 R09: 0000000000000000
[  728.796658][T14147] R10: 000000000000085c R11: 0000000000000246 R12: 0000000000000001
[  728.796670][T14147] R13: 00007fd1949b6038 R14: 00007fd1949b5fa0 R15: 00007ffe7c76e4f8
[  728.796703][T14147]  </TASK>
[  729.050732][T14152] netlink: 'syz.9.1949': attribute type 5 has an invalid length.
[  729.200340][T14148] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  729.208966][T14148] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  729.217427][T14148] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  729.294307][T14159] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1952'.
[  729.316786][   T43] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  729.483531][   T43] usb 10-1: Using ep0 maxpacket: 8
[  729.487496][T14156] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  729.498898][   T43] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  729.504222][T14156] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  729.572412][   T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  729.808236][   T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  729.819687][   T43] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  729.833075][   T43] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  729.984987][   T30] audit: type=1326 audit(1755600826.229:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14151 comm="syz.8.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x0
[  730.008493][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.084735][T14168] overlayfs: failed to clone upperpath
[  730.165880][T14154] kvm: vcpu 0: requested 98 ns lapic timer period limited to 200000 ns
[  730.247334][   T43] usb 10-1: GET_CAPABILITIES returned 0
[  730.357446][   T43] usbtmc 10-1:16.0: can't read capabilities
[  730.522691][T14179] sctp: [Deprecated]: syz.6.1954 (pid 14179) Use of struct sctp_assoc_value in delayed_ack socket option.
[  730.522691][T14179] Use struct sctp_sack_info instead
[  730.928472][T12081] usb 10-1: USB disconnect, device number 13
[  730.948909][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  731.341896][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'.
[  732.223597][T14199] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1963'.
[  732.259972][T14199] bridge_slave_1: left allmulticast mode
[  732.290174][T14199] bridge_slave_1: left promiscuous mode
[  732.295976][T14199] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.359426][T14209] trusted_key: syz.6.1963 sent an empty control message without MSG_MORE.
[  732.381387][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  732.388228][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  732.506506][ T5936] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  732.536152][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  732.577729][T14199] bridge_slave_0: left allmulticast mode
[  732.597558][T14199] bridge_slave_0: left promiscuous mode
[  732.621808][T14199] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.664025][ T5936] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  732.685339][ T5936] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  732.716020][ T5936] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  732.760226][ T5936] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  732.770726][ T5936] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  732.787208][ T5936] usb 8-1: Manufacturer: syz
[  732.805024][ T5936] usb 8-1: config 0 descriptor??
[  732.815904][ T5936] igorplugusb 8-1:0.0: incorrect number of endpoints
[  735.952467][T11979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  736.098537][   T43] usb 8-1: USB disconnect, device number 20
[  736.287550][T14267] netlink: 'syz.9.1978': attribute type 1 has an invalid length.
[  736.365192][T14267] 8021q: adding VLAN 0 to HW filter on device bond1
[  736.604097][   T43] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  736.758236][   T43] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  736.785473][   T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  736.837398][   T43] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  736.853503][   T43] usb 10-1: config 1 has no interface number 1
[  736.886677][   T43] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  736.933884][   T43] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  736.992430][   T43] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  737.004895][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.015876][   T43] usb 10-1: Product: syz
[  737.025957][   T43] usb 10-1: Manufacturer: syz
[  737.030928][   T43] usb 10-1: SerialNumber: syz
[  737.237917][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  737.267046][T14267] fuse: Bad value for 'rootmode'
[  737.308202][   T43] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  737.315960][   T43] usb 10-1: MIDIStreaming interface descriptor not found
[  737.400414][   T43] usb 10-1: USB disconnect, device number 14
[  737.508505][    T9] usb 9-1: Using ep0 maxpacket: 16
[  737.518971][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  737.529757][    T9] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  737.539630][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.760056][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  738.081321][    T9] usb 9-1: config 0 descriptor??
[  738.356568][T14291] udevd[14291]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  738.495021][    T9] hid (null): global environment stack underflow
[  738.544278][    T9] megaworld 0003:07B5:0312.0017: global environment stack underflow
[  738.595770][    T9] megaworld 0003:07B5:0312.0017: item 0 0 1 11 parsing failed
[  738.633811][    T9] megaworld 0003:07B5:0312.0017: parse failed
[  738.658157][    T9] megaworld 0003:07B5:0312.0017: probe with driver megaworld failed with error -22
[  738.866139][   T43] usb 9-1: USB disconnect, device number 3
[  741.245563][T14346] tipc: Started in network mode
[  741.274049][T14346] tipc: Node identity 9e7e7192c7a3, cluster identity 4711
[  741.303012][T14346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  741.325217][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  741.507142][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2002'.
[  741.587982][T14346] syzkaller0: entered promiscuous mode
[  741.611227][T14346] syzkaller0: entered allmulticast mode
[  741.617534][T14346] tipc: Resetting bearer <eth:syzkaller0>
[  741.644738][T14345] tipc: Resetting bearer <eth:syzkaller0>
[  742.312702][   T43] tipc: Node number set to 1507684754
[  742.504984][T14366] delete_channel: no stack
[  742.737884][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  742.783889][T12081] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  742.998485][   T43] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  743.006083][   T43] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  743.013433][T12081] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.018415][   T43] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  743.059549][T12081] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.587627][   T43] hid-generic 0000:0004:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  743.715505][T12081] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  743.724604][T12081] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.853657][T12081] usb 9-1: config 0 descriptor??
[  744.702103][T12081] razer 0003:1532:010E.0019: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0
[  747.983289][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  749.328346][T14345] tipc: Disabling bearer <eth:syzkaller0>
[  749.417040][ T5936] usb 9-1: USB disconnect, device number 4
[  750.358174][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  750.475557][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2027'.
[  750.490848][T14441] netlink: 'syz.8.2027': attribute type 10 has an invalid length.
[  751.212817][   T43] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  751.482766][T14453] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2030'.
[  751.589655][   T43] usb 10-1: Using ep0 maxpacket: 32
[  752.068967][   T43] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[  752.081738][   T43] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  752.090452][   T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  752.103243][   T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[  752.113294][   T43] usb 10-1: config 1 has no interface number 0
[  752.119479][   T43] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  752.131095][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.154759][   T43] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[  752.471595][T14441] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  753.490878][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  754.619368][   T43] snd_usb_pod 10-1:1.1: set_interface failed
[  754.646527][   T43] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[  754.680981][   T43] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -71
[  754.762497][   T43] usb 10-1: USB disconnect, device number 15
[  754.919301][ T5936] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  755.357294][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  755.412784][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  755.656657][ T5936] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  755.795267][ T5936] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  755.826735][ T5936] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  755.838323][ T5936] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  756.009451][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0
[  756.047272][ T5936] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  756.059294][ T5936] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  756.069816][ T5936] usb 7-1: Product: syz
[  756.074144][ T5936] usb 7-1: Manufacturer: syz
[  756.088839][T14505] Timeout policy `syz0' can only be used by L3 protocol number 34915
[  756.101264][ T5936] usb 7-1: SerialNumber: syz
[  756.344684][ T5936] usb 7-1: config 0 descriptor??
[  756.399125][ T5936] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  756.648332][ T5936] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  756.783574][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.811299][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.932626][ T5936] usb 7-1: USB disconnect, device number 32
[  756.950941][ T5936] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  758.667200][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  758.784400][T14539] ucma_write: process 891 (syz.6.2052) changed security contexts after opening file descriptor, this is not allowed.
[  760.041530][T14554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  760.411122][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  761.778464][T14568] netlink: 'syz.9.2061': attribute type 4 has an invalid length.
[  763.223504][T14578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.652679][ T5936] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  763.994683][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  764.483167][ T5936] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  764.547177][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.602950][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.631268][ T5936] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  764.687179][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.734331][ T5936] usb 8-1: config 0 descriptor??
[  765.127740][ T5936] sony 0003:054C:024B.001A: unexpected long global item
[  765.628658][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  767.531339][T14612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  767.616047][ T5936] sony 0003:054C:024B.001A: parse failed
[  767.621911][ T5936] sony 0003:054C:024B.001A: probe with driver sony failed with error -22
[  767.990875][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2078'.
[  767.996800][ T5936] usb 8-1: USB disconnect, device number 21
[  769.392576][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  770.698461][T14645] No such timeout policy "syz0"
[  771.248250][T12081] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  771.351370][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  772.404095][T12081] usb 8-1: Using ep0 maxpacket: 8
[  772.413416][T12081] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  773.351909][T14661] netlink: 'syz.8.2089': attribute type 5 has an invalid length.
[  773.922628][T12081] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  773.932838][T12081] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  773.949919][T12081] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  773.963376][T12081] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  773.972580][T12081] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.016932][T12081] usb 8-1: can't set config #16, error -71
[  774.129093][ T5910] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  774.232466][T12081] usb 8-1: USB disconnect, device number 22
[  774.305747][ T5936] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  774.361866][ T5910] usb 10-1: Using ep0 maxpacket: 16
[  774.482951][ T5936] usb 9-1: Using ep0 maxpacket: 8
[  774.500051][ T5910] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  774.538883][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  774.596636][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.630851][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  774.673265][ T5910] usb 10-1: Product: syz
[  774.713079][ T5910] usb 10-1: Manufacturer: syz
[  774.726886][ T5936] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89
[  774.760009][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  774.785104][ T5910] usb 10-1: SerialNumber: syz
[  774.851064][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  775.089264][ T5910] usb 10-1: config 0 descriptor??
[  775.120736][ T5936] usb 9-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82
[  775.193939][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.234581][T14655] block nbd6: shutting down sockets
[  775.292489][ T5936] usb 9-1: Product: syz
[  775.341990][ T5910] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  775.350026][ T5936] usb 9-1: Manufacturer: syz
[  775.354642][ T5936] usb 9-1: SerialNumber: syz
[  775.379243][ T5910] usb 10-1: Detected FT-X
[  775.428015][ T5936] usb 9-1: config 0 descriptor??
[  775.435749][ T5910] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  776.250828][ T5910] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  776.357258][ T5910] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71
[  776.414606][ T5910] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  776.423622][ T5936] usb 9-1: USB disconnect, device number 5
[  776.479119][ T5910] usb 10-1: USB disconnect, device number 16
[  776.519237][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  776.562291][ T5910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  776.657066][ T5910] ftdi_sio 10-1:0.0: device disconnected
[  776.809558][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2098'.
[  776.883789][T14691] netlink: 'syz.8.2098': attribute type 10 has an invalid length.
[  777.793988][T14700] netlink: 'syz.7.2100': attribute type 1 has an invalid length.
[  777.866531][T14700] netlink: 'syz.7.2100': attribute type 4 has an invalid length.
[  777.874284][T14700] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2100'.
[  778.080284][   T30] audit: type=1326 audit(1755600877.824:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14695 comm="syz.7.2100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d49d8ebe9 code=0x0
[  778.939073][T14716] x_tables: ip_tables: icmp match: only valid for protocol 1
[  779.815523][T14725] FAULT_INJECTION: forcing a failure.
[  779.815523][T14725] name failslab, interval 1, probability 0, space 0, times 0
[  779.832135][T14725] CPU: 0 UID: 0 PID: 14725 Comm: syz.6.2109 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  779.832162][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  779.832174][T14725] Call Trace:
[  779.832181][T14725]  <TASK>
[  779.832190][T14725]  dump_stack_lvl+0x189/0x250
[  779.832217][T14725]  ? __pfx____ratelimit+0x10/0x10
[  779.832238][T14725]  ? __pfx_dump_stack_lvl+0x10/0x10
[  779.832260][T14725]  ? __pfx__printk+0x10/0x10
[  779.832292][T14725]  ? __pfx___might_resched+0x10/0x10
[  779.832313][T14725]  ? fs_reclaim_acquire+0x7d/0x100
[  779.832346][T14725]  should_fail_ex+0x414/0x560
[  779.832373][T14725]  should_failslab+0xa8/0x100
[  779.832397][T14725]  __kmalloc_noprof+0xcb/0x4f0
[  779.832414][T14725]  ? kfree+0x4d/0x440
[  779.832440][T14725]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  779.832471][T14725]  tomoyo_realpath_from_path+0xe3/0x5d0
[  779.832516][T14725]  tomoyo_check_open_permission+0x1c1/0x3b0
[  779.832537][T14725]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  779.832556][T14725]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  779.832619][T14725]  ? tomoyo_file_open+0x166/0x220
[  779.832648][T14725]  security_file_open+0xb1/0x270
[  779.832670][T14725]  do_dentry_open+0x35e/0x1970
[  779.832711][T14725]  vfs_open+0x3b/0x340
[  779.832732][T14725]  ? path_openat+0x2ecd/0x3830
[  779.832762][T14725]  path_openat+0x2ee5/0x3830
[  779.832795][T14725]  ? arch_stack_walk+0xfc/0x150
[  779.832851][T14725]  ? __pfx_path_openat+0x10/0x10
[  779.832881][T14725]  ? rcu_is_watching+0x15/0xb0
[  779.832913][T14725]  do_filp_open+0x1fa/0x410
[  779.832937][T14725]  ? __lock_acquire+0xab9/0xd20
[  779.832957][T14725]  ? __pfx_do_filp_open+0x10/0x10
[  779.833003][T14725]  ? _raw_spin_unlock+0x28/0x50
[  779.833026][T14725]  ? alloc_fd+0x64c/0x6c0
[  779.833054][T14725]  do_sys_openat2+0x121/0x1c0
[  779.833077][T14725]  ? __pfx_do_sys_openat2+0x10/0x10
[  779.833099][T14725]  ? ksys_write+0x22a/0x250
[  779.833116][T14725]  ? __pfx_ksys_write+0x10/0x10
[  779.833135][T14725]  __x64_sys_openat+0x138/0x170
[  779.833161][T14725]  do_syscall_64+0xfa/0x3b0
[  779.833178][T14725]  ? lockdep_hardirqs_on+0x9c/0x150
[  779.833195][T14725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.833210][T14725]  ? clear_bhb_loop+0x60/0xb0
[  779.833230][T14725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.833246][T14725] RIP: 0033:0x7fd19478ebe9
[  779.833260][T14725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  779.833275][T14725] RSP: 002b:00007fd19563c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  779.833292][T14725] RAX: ffffffffffffffda RBX: 00007fd1949b5fa0 RCX: 00007fd19478ebe9
[  779.833304][T14725] RDX: 0000000000121880 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  779.833316][T14725] RBP: 00007fd19563c090 R08: 0000000000000000 R09: 0000000000000000
[  779.833326][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  779.833336][T14725] R13: 00007fd1949b6038 R14: 00007fd1949b5fa0 R15: 00007ffe7c76e4f8
[  779.833363][T14725]  </TASK>
[  780.128661][    C0] vkms_vblank_simulate: vblank timer overrun
[  780.143515][ T1328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  780.182297][T14725] ERROR: Out of memory at tomoyo_realpath_from_path.
[  780.359535][T14733] No such timeout policy "syz0"
[  781.992145][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  782.169529][T14741] smc: net device bond0 applied user defined pnetid SYZ2
[  782.615714][T14749] netlink: 'syz.8.2117': attribute type 2 has an invalid length.
[  782.828682][T14752] /dev/nullb0: Can't lookup blockdev
[  783.291883][ T5910] libceph: connect (1)[c::]:6789 error -101
[  783.297957][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  783.587784][ T5910] libceph: connect (1)[c::]:6789 error -101
[  783.674614][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  784.157904][ T5910] libceph: connect (1)[c::]:6789 error -101
[  784.178185][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  784.798031][T14751] ceph: No mds server is up or the cluster is laggy
[  785.495214][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  786.721192][   T43] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  786.937603][   T43] usb 8-1: Using ep0 maxpacket: 8
[  786.987874][   T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  787.050259][   T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  787.103156][ T5910] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  787.132074][   T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  787.144642][   T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  787.166990][   T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  787.179188][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.254052][ T5910] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  787.275788][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2128'.
[  787.304160][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.380100][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  787.399719][ T5910] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  787.453439][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.461757][   T43] usb 8-1: GET_CAPABILITIES returned 0
[  787.474880][   T43] usbtmc 8-1:16.0: can't read capabilities
[  787.483976][ T5910] usb 10-1: config 0 descriptor??
[  787.853372][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  788.479039][ T5910] sony 0003:054C:024B.001B: unexpected long global item
[  789.048491][ T5987] usb 8-1: USB disconnect, device number 23
[  789.062676][ T5910] sony 0003:054C:024B.001B: parse failed
[  789.073772][ T5910] sony 0003:054C:024B.001B: probe with driver sony failed with error -22
[  789.646163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  789.681478][T14813] virt_wifi0 speed is unknown, defaulting to 1000
[  789.737866][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  790.329707][ T5910] usb 10-1: USB disconnect, device number 17
[  790.888162][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  791.785652][T14823] netlink: 'syz.4.2140': attribute type 10 has an invalid length.
[  792.077315][T14829] overlayfs: failed to clone lowerpath
[  792.749497][T14838] netlink: zone id is out of range
[  792.755026][T14838] netlink: zone id is out of range
[  792.760123][T14838] netlink: zone id is out of range
[  792.765261][T14838] netlink: zone id is out of range
[  792.770469][T14838] netlink: zone id is out of range
[  792.775580][T14838] netlink: zone id is out of range
[  792.780692][T14838] netlink: zone id is out of range
[  792.785795][T14838] netlink: zone id is out of range
[  792.791061][T14838] netlink: zone id is out of range
[  792.796201][T14838] netlink: zone id is out of range
[  793.274437][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  793.648042][T14846] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  794.237251][T14846] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  794.256751][T14846] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  794.460926][T14853] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  794.729907][T14853] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  794.852429][T14853] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  796.200527][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  796.262057][T14868] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  796.270643][T14868] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  796.279323][T14868] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  796.802625][T14898] netlink: 'syz.6.2159': attribute type 10 has an invalid length.
[  796.852558][T14898] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2159'.
[  797.838116][T14898] batman_adv: batadv0: Adding interface: virt_wifi0
[  797.846167][T14898] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  797.992044][T14898] batman_adv: batadv0: Interface activated: virt_wifi0
[  798.170772][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2161'.
[  798.678317][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  799.937951][T14930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  800.001083][T14930] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  800.356511][T14944] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  800.365464][    T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  800.374201][T14944] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  800.383077][T14944] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  800.642755][    T9] usb 7-1: Using ep0 maxpacket: 16
[  800.771381][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  800.834050][    T9] usb 7-1: too many configurations: 68, using maximum allowed: 8
[  800.870698][    T9] usb 7-1: unable to read config index 0 descriptor/start: -61
[  800.892174][    T9] usb 7-1: can't read configurations, error -61
[  801.046268][    T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  801.277237][    T9] usb 7-1: Using ep0 maxpacket: 16
[  801.317821][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  801.326005][    T9] usb 7-1: too many configurations: 68, using maximum allowed: 8
[  801.331901][T14952] netlink: 752 bytes leftover after parsing attributes in process `syz.4.2173'.
[  801.376051][    T9] usb 7-1: unable to read config index 0 descriptor/start: -61
[  801.400153][    T9] usb 7-1: can't read configurations, error -61
[  801.538553][T14953] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  801.547173][T14953] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  801.556555][T14953] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  801.579345][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  801.589011][    T9] usb usb7-port1: attempt power cycle
[  801.968985][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  801.997531][    T9] usb 7-1: Using ep0 maxpacket: 16
[  802.009107][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  802.023598][    T9] usb 7-1: too many configurations: 68, using maximum allowed: 8
[  802.048645][    T9] usb 7-1: unable to read config index 0 descriptor/start: -61
[  802.061020][    T9] usb 7-1: can't read configurations, error -61
[  802.203694][T14961] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  802.212590][T14961] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  802.222019][T14961] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  802.668006][    T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  802.701418][T14963] smc: net device bond0 erased user defined pnetid SYZ2
[  802.741977][T14963] loop6: detected capacity change from 0 to 63
[  802.787049][T14963] buffer_io_error: 3946 callbacks suppressed
[  802.787067][T14963] Buffer I/O error on dev loop6, logical block 0, async page read
[  802.863104][T14963] Buffer I/O error on dev loop6, logical block 1, async page read
[  802.910372][T14963] Buffer I/O error on dev loop6, logical block 2, async page read
[  802.918331][T14963] Buffer I/O error on dev loop6, logical block 3, async page read
[  802.932580][    T9] usb 7-1: device not accepting address 36, error -71
[  802.954631][    T9] usb usb7-port1: unable to enumerate USB device
[  802.981018][T14489] Buffer I/O error on dev loop6, logical block 0, async page read
[  802.998507][T14489] Buffer I/O error on dev loop6, logical block 1, async page read
[  803.009805][T14489] Buffer I/O error on dev loop6, logical block 2, async page read
[  803.025369][T14489] Buffer I/O error on dev loop6, logical block 3, async page read
[  803.060196][T14489] Buffer I/O error on dev loop6, logical block 0, async page read
[  803.252169][T14489] Buffer I/O error on dev loop6, logical block 1, async page read
[  803.978794][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  804.105492][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'.
[  804.121816][ T5936] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  804.271099][   T43] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  804.285240][ T5936] usb 8-1: Using ep0 maxpacket: 32
[  804.324984][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  804.383063][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  804.467068][   T43] usb 10-1: config 5 has an invalid interface number: 123 but max is 0
[  804.482808][ T5936] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  804.506301][   T43] usb 10-1: config 5 has no interface number 0
[  804.517660][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.548449][   T43] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  804.603875][   T43] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  804.627865][ T5936] usb 8-1: config 0 descriptor??
[  804.751562][   T43] usb 10-1: config 5 interface 123 has no altsetting 0
[  804.828120][   T43] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  804.838859][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.874040][   T43] usb 10-1: Product: syz
[  804.935106][   T43] usb 10-1: Manufacturer: syz
[  804.940121][   T43] usb 10-1: SerialNumber: syz
[  805.074668][ T5936] ft260 0003:0403:6030.001C: unknown main item tag 0x7
[  805.117056][T14995] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2188'.
[  805.246787][ T5936] ft260 0003:0403:6030.001C: chip code: 6424 8183
[  805.476976][ T5936] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0
[  805.523596][T15003] No such timeout policy "syz0"
[  805.609453][ T5936] ft260 0003:0403:6030.001C: failed to retrieve status: -71, no wakeup
[  805.639483][ T5936] ft260 0003:0403:6030.001C: failed to retrieve status: -71
[  805.697439][ T5936] ft260 0003:0403:6030.001C: failed to reset I2C controller: -71
[  806.046240][ T5936] usb 8-1: USB disconnect, device number 24
[  806.267598][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  808.371634][T15037] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2201'.
[  809.252702][   T43] ni6501 10-1:5.123: driver 'ni6501' failed to auto-configure device.
[  809.870220][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  810.437234][   T43] usb 10-1: USB disconnect, device number 18
[  812.323848][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  812.761354][T15074] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2210'.
[  813.176208][ T5987] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  814.213496][ T5987] usb 10-1: Using ep0 maxpacket: 16
[  814.934073][ T5987] usb 10-1: config 0 descriptor has 1 excess byte, ignoring
[  814.941452][ T5987] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  814.967532][ T5987] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  814.978182][ T5987] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223
[  815.188215][ T5987] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  815.204277][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.212649][ T5987] usb 10-1: Product: syz
[  815.222873][ T5987] usb 10-1: Manufacturer: syz
[  815.232397][ T5987] usb 10-1: SerialNumber: syz
[  815.242724][ T5987] usb 10-1: config 0 descriptor??
[  815.316588][T15078] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  815.324015][T15078] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  815.486560][ T5987] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected
[  815.493862][    C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71)
[  815.493928][    C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71)
[  815.594730][T15096] net_ratelimit: 15 callbacks suppressed
[  815.594835][T15096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  816.002010][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  816.176709][ T5910] usb 10-1: USB disconnect, device number 19
[  816.198218][ T5910] mcba_usb 10-1:0.0 can0: device disconnected
[  816.248881][   T30] audit: type=1326 audit(1755600918.766:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.382602][   T30] audit: type=1326 audit(1755600918.766:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.470947][   T30] audit: type=1326 audit(1755600918.766:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.627047][   T30] audit: type=1326 audit(1755600918.766:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.649209][   T30] audit: type=1326 audit(1755600918.766:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.671480][   T30] audit: type=1326 audit(1755600918.766:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  816.701650][   T30] audit: type=1326 audit(1755600918.766:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  817.254462][   T30] audit: type=1326 audit(1755600918.766:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  817.306187][   T30] audit: type=1326 audit(1755600918.766:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  817.400471][   T30] audit: type=1326 audit(1755600918.766:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fca18ebe9 code=0x7ffc0000
[  817.730865][T15124] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2224'.
[  818.549666][T15135] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  818.558014][T15135] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  818.566481][T15135] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  819.621626][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2233'.
[  819.699148][T15146] 8021q: adding VLAN 0 to HW filter on device bond1
[  819.764697][T15148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  820.032853][ T5997] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  820.345206][ T5997] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  820.563721][ T5997] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  820.718881][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.735942][T15165] netlink: 384 bytes leftover after parsing attributes in process `syz.7.2229'.
[  820.765349][ T5997] gspca_main: stv0680-2.14.0 probing 041e:4007
[  820.777943][T15165] netlink: 'syz.7.2229': attribute type 2 has an invalid length.
[  821.257053][ T1328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  821.357877][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'.
[  821.412383][T15176] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2239'.
[  821.539140][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2240'.
[  821.580875][T15183] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.589811][T15183] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.602664][T15180] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2240'.
[  822.101419][ T5997] stv0680 9-1:4.0: STV(e): camera ping failed!!
[  822.185653][ T5997] stv0680 9-1:4.0: last error: 77,  command = 0xaf
[  822.371179][T15195] FAULT_INJECTION: forcing a failure.
[  822.371179][T15195] name failslab, interval 1, probability 0, space 0, times 0
[  822.417443][T15195] CPU: 1 UID: 0 PID: 15195 Comm: syz.6.2243 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  822.417473][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  822.417485][T15195] Call Trace:
[  822.417493][T15195]  <TASK>
[  822.417501][T15195]  dump_stack_lvl+0x189/0x250
[  822.417529][T15195]  ? __pfx____ratelimit+0x10/0x10
[  822.417550][T15195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  822.417571][T15195]  ? __pfx__printk+0x10/0x10
[  822.417600][T15195]  ? __pfx___might_resched+0x10/0x10
[  822.417626][T15195]  should_fail_ex+0x414/0x560
[  822.417651][T15195]  ? traverse+0xd9/0x570
[  822.417673][T15195]  should_failslab+0xa8/0x100
[  822.417696][T15195]  __kvmalloc_node_noprof+0x161/0x5f0
[  822.417717][T15195]  ? traverse+0xd9/0x570
[  822.417744][T15195]  traverse+0xd9/0x570
[  822.417769][T15195]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  822.417806][T15195]  seq_read_iter+0xcfe/0xe10
[  822.417830][T15195]  ? set_page_refcounted+0x76/0x160
[  822.417863][T15195]  ? kernfs_fop_read_iter+0x13f/0x640
[  822.417887][T15195]  ? __asan_memset+0x22/0x50
[  822.417918][T15195]  copy_splice_read+0x54f/0x9b0
[  822.417949][T15195]  ? __pfx_copy_splice_read+0x10/0x10
[  822.417964][T15195]  ? look_up_lock_class+0x74/0x170
[  822.417983][T15195]  ? register_lock_class+0x51/0x320
[  822.418033][T15195]  ? alloc_pipe_info+0x374/0x4d0
[  822.418054][T15195]  ? __pfx_copy_splice_read+0x10/0x10
[  822.418072][T15195]  splice_direct_to_actor+0x4a6/0xcc0
[  822.418115][T15195]  ? __pfx_direct_splice_actor+0x10/0x10
[  822.418132][T15195]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  822.418165][T15195]  do_splice_direct+0x181/0x270
[  822.418189][T15195]  ? __pfx_do_splice_direct+0x10/0x10
[  822.418211][T15195]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  822.418240][T15195]  ? rw_verify_area+0x258/0x650
[  822.418272][T15195]  do_sendfile+0x4da/0x7e0
[  822.418303][T15195]  ? __pfx_do_sendfile+0x10/0x10
[  822.418338][T15195]  __se_sys_sendfile64+0xd9/0x190
[  822.418362][T15195]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  822.418381][T15195]  ? rcu_is_watching+0x15/0xb0
[  822.418408][T15195]  ? do_syscall_64+0xbe/0x3b0
[  822.418434][T15195]  do_syscall_64+0xfa/0x3b0
[  822.418453][T15195]  ? lockdep_hardirqs_on+0x9c/0x150
[  822.418473][T15195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.418492][T15195]  ? clear_bhb_loop+0x60/0xb0
[  822.418516][T15195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.418534][T15195] RIP: 0033:0x7fd19478ebe9
[  822.418551][T15195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  822.418568][T15195] RSP: 002b:00007fd19563c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  822.418589][T15195] RAX: ffffffffffffffda RBX: 00007fd1949b5fa0 RCX: 00007fd19478ebe9
[  822.418604][T15195] RDX: 0000200000002700 RSI: 0000000000000003 RDI: 0000000000000004
[  822.418616][T15195] RBP: 00007fd19563c090 R08: 0000000000000000 R09: 0000000000000000
[  822.418627][T15195] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  822.418638][T15195] R13: 00007fd1949b6038 R14: 00007fd1949b5fa0 R15: 00007ffe7c76e4f8
[  822.418670][T15195]  </TASK>
[  822.791929][T15199] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2244'.
[  822.908384][T15202] vti0: entered promiscuous mode
[  822.913432][T15202] vti0: entered allmulticast mode
[  823.229723][ T5910] usb 9-1: USB disconnect, device number 6
[  823.341215][ T5997] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  823.386117][T15221] netlink: 'syz.8.2251': attribute type 1 has an invalid length.
[  824.590849][ T5997] usb 10-1: Using ep0 maxpacket: 32
[  824.611628][ T5997] usb 10-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  824.625295][ T5997] usb 10-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  824.654856][ T5997] usb 10-1: Product: syz
[  824.701686][ T5997] usb 10-1: config 0 descriptor??
[  824.750362][ T5997] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  824.765577][T15228] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  824.827483][ T5997] gspca_stv06xx: st6422 sensor detected
[  825.326614][T15211] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  825.522276][ T5997] STV06xx 10-1:0.0: probe with driver STV06xx failed with error -71
[  825.646081][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2254'.
[  825.665309][ T5997] usb 10-1: USB disconnect, device number 20
[  826.039568][T15240] Timeout policy `syz0' can only be used by L3 protocol number 34915
[  826.459058][T15238] tap0: tun_chr_ioctl cmd 2147767520
[  826.624616][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  827.174590][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2258'.
[  827.321945][T15255] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  827.330216][T15255] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  827.340160][T15255] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  830.904211][T15264] syz.7.2263: attempt to access beyond end of device
[  830.904211][T15264] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  830.917871][T15264] (syz.7.2263,15264,0):ocfs2_get_sector:1714 ERROR: status = -5
[  830.926642][T15264] (syz.7.2263,15264,0):ocfs2_sb_probe:753 ERROR: status = -5
[  830.935866][T15264] (syz.7.2263,15264,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  830.944985][T15264] (syz.7.2263,15264,0):ocfs2_fill_super:1177 ERROR: status = -5
[  831.807182][T11979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  832.020528][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  833.253012][ T5936] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  833.696161][ T5936] usb 7-1: Using ep0 maxpacket: 32
[  833.842931][ T5936] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  833.892205][ T5936] usb 7-1: config 0 has no interface number 0
[  833.926542][ T5936] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  833.963908][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.177601][ T5936] usb 7-1: Product: syz
[  834.280960][ T5936] usb 7-1: Manufacturer: syz
[  834.376820][T15313] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  834.385144][ T5936] usb 7-1: SerialNumber: syz
[  834.394467][T15313] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  834.404329][T15313] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  834.418179][ T5936] usb 7-1: config 0 descriptor??
[  834.593603][ T5936] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  834.834590][ T5936] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  834.877413][ T5936] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  834.888356][T15320] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  834.926656][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  834.966592][ T5936] usb 7-1: USB disconnect, device number 37
[  835.005967][ T5936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  835.084513][ T5936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  835.496290][T15328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  836.133430][ T5936] quatech2 7-1:0.51: device disconnected
[  836.264956][T15334] loop6: detected capacity change from 0 to 2098
[  836.865373][T15347] syz.7.2283: attempt to access beyond end of device
[  836.865373][T15347] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  836.879628][T15347] (syz.7.2283,15347,0):ocfs2_get_sector:1714 ERROR: status = -5
[  836.888237][T15347] (syz.7.2283,15347,0):ocfs2_sb_probe:753 ERROR: status = -5
[  836.897213][T15347] (syz.7.2283,15347,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  836.906510][T15347] (syz.7.2283,15347,0):ocfs2_fill_super:1177 ERROR: status = -5
[  837.651267][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  837.651454][ T1328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  839.064650][T15358] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  839.073787][T15358] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  839.083161][T15358] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  839.507835][T15366] overlayfs: conflicting options: userxattr,metacopy=on
[  841.270008][T15399] No such timeout policy "syz0"
[  841.966767][T15404] program syz.9.2299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  842.025711][T15405] program syz.9.2299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  842.170468][T15405] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  842.393519][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2299'.
[  842.729578][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  842.998479][T15415] netlink: 'syz.8.2303': attribute type 23 has an invalid length.
[  843.215346][T15415] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2303'.
[  845.037607][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  846.922542][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  847.173657][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  847.973646][T15448] No such timeout policy "syz0"
[  848.578020][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  849.965304][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  852.785180][ T5910] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  853.468702][ T6887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  853.525080][ T5910] usb 8-1: Using ep0 maxpacket: 8
[  853.545619][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  853.642386][ T5910] usb 8-1: config 0 has no interfaces?
[  853.767197][T15488] netlink: 'syz.6.2323': attribute type 1 has an invalid length.
[  853.775113][T15488] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2323'.
[  853.797740][ T5910] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  853.893788][T15490] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20000
[  853.931812][ T5910] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  853.940021][ T5910] usb 8-1: Product: syz
[  853.961109][ T5910] usb 8-1: Manufacturer: syz
[  853.965835][ T5910] usb 8-1: SerialNumber: syz
[  853.973616][ T5910] usb 8-1: config 0 descriptor??
[  854.212628][ T5910] usb 8-1: USB disconnect, device number 25
[  854.359841][T15500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  854.478147][T15497] 9pnet: Could not find request transport: fdúÌ–
[  855.465516][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  855.882103][T15521] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  856.362999][T15522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.518169][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.540775][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.577083][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.608612][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.636624][T15520] tipc: Resetting bearer <eth:syzkaller0>
[  856.645270][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.691447][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.724507][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.766218][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.796205][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.811324][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.822290][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.835383][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.863279][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  856.927563][T15533] SET target dimension over the limit!
[  857.058034][ T5936] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  857.081284][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.088749][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.103479][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.112114][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.123509][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.131927][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.143643][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.162683][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.206197][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.214218][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.227701][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.275380][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.283338][ T5936] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  857.307719][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.318454][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.332317][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.340569][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  857.359293][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.367023][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.380169][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.387881][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.388183][ T5936] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  857.421305][ T5936] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  857.433030][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.441618][T15542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  857.450571][ T5936] usb 7-1: Manufacturer: syz
[  857.471700][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.500536][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.516535][ T5936] usb 7-1: config 0 descriptor??
[  857.531459][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.549301][ T5936] igorplugusb 7-1:0.0: incorrect number of endpoints
[  857.571572][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.593743][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.619504][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.637146][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.668764][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.688178][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.712135][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.742923][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.773813][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.790866][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.812341][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.844302][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.869243][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.892007][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.918092][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.938593][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.960829][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  857.977450][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.012242][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.032053][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.050444][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.077702][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.248032][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  858.282901][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.293059][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.301206][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.321622][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.329125][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.349191][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.356787][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.422269][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.483930][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.551687][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.597836][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.663219][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.725955][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.786664][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.851275][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  858.939520][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.007350][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.065954][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.093189][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.122015][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.156433][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.309101][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.353707][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.372485][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.395851][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.426300][ T5910] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  859.459328][ T5910] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  859.525864][ T5910] usb 7-1: USB disconnect, device number 38
[  859.577975][T15519] tipc: Disabling bearer <eth:syzkaller0>
[  860.089269][T12706] Bluetooth: hci4: Frame reassembly failed (-84)
[  860.525654][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  860.697816][ T5910] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  860.722530][T15593] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20000
[  860.810047][T12081] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  860.883738][ T5910] usb 10-1: device descriptor read/64, error -71
[  860.968227][T12081] usb 7-1: Using ep0 maxpacket: 32
[  860.979345][T12081] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  860.996238][T12081] usb 7-1: config 0 has no interface number 0
[  861.044792][T12081] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  861.053956][T12081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.062061][T12081] usb 7-1: Product: syz
[  861.066247][T12081] usb 7-1: Manufacturer: syz
[  861.070943][T12081] usb 7-1: SerialNumber: syz
[  861.080956][T12081] usb 7-1: config 0 descriptor??
[  861.089059][   T24] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[  861.089425][T12081] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  861.105466][T12081] usb 7-1: selecting invalid altsetting 1
[  861.111250][T12081] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  861.128160][ T5910] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  861.136972][T12081] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  861.147644][T12081] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  861.173299][T12081] usb 7-1: media controller created
[  861.199150][T12081] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  861.252283][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  861.265288][ T5910] usb 10-1: device descriptor read/64, error -71
[  861.280797][   T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  861.292935][   T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  861.304483][   T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  861.321448][   T24] usb 9-1: string descriptor 0 read error: -22
[  861.328728][   T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  861.358274][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.387386][ T5910] usb usb10-port1: attempt power cycle
[  861.402543][   T24] usb 9-1: 0:2 : does not exist
[  861.629474][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2353'.
[  861.698019][T15600] netlink: 440 bytes leftover after parsing attributes in process `syz.7.2353'.
[  861.707259][T15600] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2353'.
[  861.716394][T15600] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2353'.
[  861.726308][ T5910] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  861.844908][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'.
[  861.891157][T15603] netlink: 'syz.4.2354': attribute type 10 has an invalid length.
[  861.937979][ T5910] usb 10-1: device descriptor read/8, error -71
[  861.965610][ T5848] Bluetooth: hci4: command 0x1003 tx timeout
[  861.974371][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  862.069769][T15609] netlink: 'syz.4.2355': attribute type 10 has an invalid length.
[  862.081957][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2355'.
[  862.091989][T15609] batadv0: entered promiscuous mode
[  862.107251][T15609] batadv0: entered allmulticast mode
[  862.119448][T15609] bridge0: port 3(batadv0) entered blocking state
[  862.127393][T15609] bridge0: port 3(batadv0) entered disabled state
[  862.160863][ T5910] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  862.180605][ T5910] usb 10-1: device descriptor read/8, error -71
[  862.263810][T12081] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  862.271823][T12081] zl10353_read_register: readreg error (reg=127, ret==-110)
[  862.291915][ T5910] usb usb10-port1: unable to enumerate USB device
[  862.321318][T15604] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  862.548414][ T6711] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  862.558326][ T6711] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  863.159370][T15618] netlink: 83 bytes leftover after parsing attributes in process `syz.7.2357'.
[  863.429319][T12081] usb 7-1: USB disconnect, device number 39
[  865.401036][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  865.403839][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2362'.
[  865.474187][T15641] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20000
[  866.539053][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2365'.
[  866.560504][T15647] netlink: 'syz.4.2365': attribute type 10 has an invalid length.
[  866.775060][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2370'.
[  866.793112][T15654] overlayfs: conflicting options: userxattr,metacopy=on
[  866.970333][ T5910] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  867.068170][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2364'.
[  867.077568][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2364'.
[  867.193664][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  867.203515][ T5910] usb 7-1: Using ep0 maxpacket: 8
[  867.208787][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.227590][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.232731][ T5910] usb 7-1: unable to get BOS descriptor or descriptor too short
[  867.697248][ T5910] usb 7-1: unable to read config index 0 descriptor/start: -71
[  867.713328][ T5910] usb 7-1: can't read configurations, error -71
[  869.094305][T15682] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2377'.
[  871.360807][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  872.020576][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  872.814930][T15703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  872.826053][T15703] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  872.909862][T15710] No such timeout policy "syz0"
[  873.722665][T15718] openvswitch: netlink: Message has -3 unknown bytes.
[  873.737722][T15718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  875.100019][T15741] syz.9.2395: attempt to access beyond end of device
[  875.100019][T15741] nbd9: rw=0, sector=6, nr_sectors = 2 limit=0
[  875.148202][T15741] ADFS-fs (nbd9): error: unable to read block 3, try 0
[  875.192962][T15743] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  875.211836][T15740] virt_wifi0 speed is unknown, defaulting to 1000
[  876.321122][T15754] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.330548][T15754] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.372155][T15754] bridge0: entered allmulticast mode
[  876.729163][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  877.428851][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  877.513769][T15762] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  878.577522][T15775] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  878.585785][T15775] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  878.594379][T15775] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  878.615883][T15777] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  878.624857][T15777] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  878.633803][T15777] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  878.642645][T15777] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  878.736289][T15777] vxlan0: entered promiscuous mode
[  878.757422][T15777] vxlan0: entered allmulticast mode
[  878.841069][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2405'.
[  879.019552][T15789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.028194][T15789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.539270][T15813] netlink: 'syz.7.2416': attribute type 21 has an invalid length.
[  880.572675][T15812] netlink: 'syz.7.2416': attribute type 21 has an invalid length.
[  880.849512][   T30] kauditd_printk_skb: 671 callbacks suppressed
[  880.849524][   T30] audit: type=1326 audit(1755600988.097:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  880.964350][   T30] audit: type=1326 audit(1755600988.129:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  881.002141][   T30] audit: type=1326 audit(1755600988.129:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  881.029763][   T30] audit: type=1326 audit(1755600988.129:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  881.202094][T15835] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  881.210990][T15835] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  881.219623][T15835] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  881.603196][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  881.665373][   T30] audit: type=1326 audit(1755600988.129:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  881.687961][   T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  881.701505][   T30] audit: type=1326 audit(1755600988.129:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  881.900715][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  882.135993][T12081] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[  882.255174][   T24] usb 8-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  882.259198][   T30] audit: type=1326 audit(1755600988.129:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  882.303913][   T30] audit: type=1326 audit(1755600988.129:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  882.313017][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.326151][   T30] audit: type=1326 audit(1755600988.129:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  882.404690][T12081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  882.472549][   T24] usb 8-1: config 0 descriptor??
[  882.502786][   T30] audit: type=1326 audit(1755600988.129:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.4.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04eab8ebe9 code=0x7ffc0000
[  882.513534][T12081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  882.598536][T15845] libceph: resolve 'c>' (ret=-3): failed
[  882.695509][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  883.047370][T12081] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  883.137435][   T24] input: HID 28bd:0933 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28BD:0933.001E/input/input28
[  883.155306][   T24] uclogic 0003:28BD:0933.001E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.7-1/input0
[  883.165464][T12081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.207571][T12081] usb 7-1: config 0 descriptor??
[  883.220601][T12081] hub 7-1:0.0: USB hub found
[  883.266789][T15851] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  883.320878][ T5987] usb 8-1: USB disconnect, device number 26
[  883.403174][T12081] hub 7-1:0.0: 2 ports detected
[  883.457966][   T24] IPVS: starting estimator thread 0...
[  883.945066][T15859] IPVS: using max 26 ests per chain, 62400 per kthread
[  884.370639][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.379883][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  884.443411][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'.
[  884.474584][T15874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2436'.
[  884.600894][T12081] usb 7-1: USB disconnect, device number 42
[  885.766393][T15892] sctp: [Deprecated]: syz.4.2442 (pid 15892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  885.766393][T15892] Use struct sctp_sack_info instead
[  885.798396][T15853] syz.9.2430 (15853): drop_caches: 2
[  885.936724][T12704] Bluetooth: Invalid byte 5e after esc byte
[  886.849788][ T5918] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  886.870516][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  887.040698][ T5918] usb 10-1: config 0 has an invalid interface number: 255 but max is 0
[  887.058409][ T5918] usb 10-1: config 0 has no interface number 0
[  887.065206][ T5918] usb 10-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  887.076705][ T5918] usb 10-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  887.144393][ T5918] usb 10-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  887.181965][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.218941][ T5918] usb 10-1: Product: syz
[  887.255590][ T5918] usb 10-1: Manufacturer: syz
[  887.282370][ T5918] usb 10-1: SerialNumber: syz
[  887.391956][ T5918] usb 10-1: config 0 descriptor??
[  887.669711][T15918] syz.8.2450: attempt to access beyond end of device
[  887.669711][T15918] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  887.684704][T15918] (syz.8.2450,15918,0):ocfs2_get_sector:1714 ERROR: status = -5
[  887.693143][T15918] (syz.8.2450,15918,0):ocfs2_sb_probe:753 ERROR: status = -5
[  887.701006][T15918] (syz.8.2450,15918,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  887.710039][T15918] (syz.8.2450,15918,0):ocfs2_fill_super:1177 ERROR: status = -5
[  887.796110][ T5918] vmk80xx 10-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  887.834494][ T5918] vmk80xx 10-1:0.255: probe with driver vmk80xx failed with error -22
[  887.865999][ T5848] Bluetooth: hci4: command 0x1003 tx timeout
[  887.872972][ T5846] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  888.007537][T15924] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  888.007537][T15924] The task syz.7.2449 (15924) triggered the difference, watch for misbehavior.
[  888.054125][T15924] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2449' sets config #0
[  888.104605][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  888.255924][    T9] usb 10-1: USB disconnect, device number 26
[  889.517066][ T5936] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  891.238948][T15963] No such timeout policy "syz0"
[  891.631555][ T5936] usb 10-1: Using ep0 maxpacket: 8
[  891.641034][ T5936] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  891.650546][ T5936] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.658781][ T5936] usb 10-1: Product: syz
[  891.663093][ T5936] usb 10-1: Manufacturer: syz
[  891.667784][ T5936] usb 10-1: SerialNumber: syz
[  891.675500][ T5936] usb 10-1: config 0 descriptor??
[  891.877996][ T5936] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  891.884915][T15965] syz.8.2465: attempt to access beyond end of device
[  891.884915][T15965] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  891.900946][T15965] (syz.8.2465,15965,0):ocfs2_get_sector:1714 ERROR: status = -5
[  891.909317][T15965] (syz.8.2465,15965,0):ocfs2_sb_probe:753 ERROR: status = -5
[  891.917489][T15965] (syz.8.2465,15965,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  891.926507][T15965] (syz.8.2465,15965,0):ocfs2_fill_super:1177 ERROR: status = -5
[  892.006238][T12081] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  892.251194][ T6887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  892.323599][T12081] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  892.446027][T12081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.635760][T12081] usb 7-1: config 0 descriptor??
[  892.755543][ T5936] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  892.810894][ T5936] usb 10-1: USB disconnect, device number 27
[  893.032097][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.041150][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.067569][T15985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.078251][T15985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.142253][ T5987] usb 8-1: new full-speed USB device number 27 using dummy_hcd
[  893.242172][T12081] usb 7-1: Cannot set autoneg
[  893.247637][T12081] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  893.261771][T12081] usb 7-1: USB disconnect, device number 43
[  893.302530][ T5987] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.314344][ T5987] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  893.327045][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  893.337074][ T5987] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  893.361010][ T5987] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  893.374369][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  893.382668][ T5987] usb 8-1: Product: syz
[  893.387467][ T5987] usb 8-1: Manufacturer: syz
[  893.392136][ T5987] usb 8-1: SerialNumber: syz
[  893.401670][ T5987] usb 8-1: config 0 descriptor??
[  893.455924][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  893.629994][ T5987] radio-si470x 8-1:0.0: could not find interrupt in endpoint
[  893.693198][ T5987] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5
[  893.739918][ T5987] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  893.742545][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.795123][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.901348][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.919358][T15988] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  893.928045][T15988] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  893.934913][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.947249][T15988] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  894.030715][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  894.099428][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  894.133328][ T5987] usb 8-1: USB disconnect, device number 27
[  895.926623][T16018] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20000
[  897.607391][ T1328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  897.876823][T16037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  898.156223][T16051] netlink: 'syz.8.2492': attribute type 13 has an invalid length.
[  898.296844][T16054] input: syz1 as /devices/virtual/input/input29
[  898.477264][T16057] syz.9.2494: attempt to access beyond end of device
[  898.477264][T16057] nbd9: rw=6144, sector=128, nr_sectors = 8 limit=0
[  898.491830][T16057] gfs2: error -5 reading superblock
[  898.803530][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  899.006183][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2492'.
[  901.301896][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  901.315919][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  901.327388][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  901.356413][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  901.368166][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  901.538068][T16051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  901.552962][T16051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.803495][T16051] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.819540][T16051] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.830837][T16051] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  901.839967][T16051] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  902.108222][T16060] syzkaller0: entered promiscuous mode
[  902.127572][T16060] syzkaller0: entered allmulticast mode
[  902.745802][T16117] could not allocate digest TFM handle sha1-neon
[  902.976638][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  903.291022][ T5848] Bluetooth: hci4: command tx timeout
[  903.712424][ T5897] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  903.718930][ T5897] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  903.956740][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'.
[  904.177123][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  904.190507][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  904.200746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  907.058602][T16087] virt_wifi0 speed is unknown, defaulting to 1000
[  907.420475][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2510'.
[  907.675714][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  907.942050][T16163] syz.8.2511: attempt to access beyond end of device
[  907.942050][T16163] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  907.955487][T16163] (syz.8.2511,16163,0):ocfs2_get_sector:1714 ERROR: status = -5
[  907.963831][T16163] (syz.8.2511,16163,0):ocfs2_sb_probe:753 ERROR: status = -5
[  907.971329][T16163] (syz.8.2511,16163,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  907.980233][T16163] (syz.8.2511,16163,0):ocfs2_fill_super:1177 ERROR: status = -5
[  908.456325][T12081] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  909.021941][T12081] usb 10-1: Using ep0 maxpacket: 32
[  909.036165][T12081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 7
[  909.055186][T12081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25642, setting to 1024
[  909.066844][T12081] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  909.076111][T12081] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.104651][T12081] usb 10-1: config 0 descriptor??
[  909.117578][ T1313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  909.136205][T12081] hub 10-1:0.0: bad descriptor, ignoring hub
[  909.142771][T12081] hub 10-1:0.0: probe with driver hub failed with error -5
[  909.161633][ T1313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.178473][T12081] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  909.338656][T16087] chnl_net:caif_netlink_parms(): no params data found
[  910.113215][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  911.349110][ T1313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  911.371256][ T1313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.448013][T16108] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  911.597428][T16108] usb 7-1: Using ep0 maxpacket: 16
[  911.712522][T16108] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.858372][T16108] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  911.867149][ T1313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  911.885683][ T1313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.889965][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.905469][T16108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  911.967287][T16108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  912.004574][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.033461][T16108] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  912.083292][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  912.116365][T16108] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  912.117362][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.126635][T16108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.144765][ T1313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.156646][T16108] usb 7-1: Product: syz
[  912.160833][T16108] usb 7-1: Manufacturer: syz
[  912.165451][T16108] usb 7-1: SerialNumber: syz
[  912.175057][ T1313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.175799][T12081] usb 10-1: USB disconnect, device number 28
[  912.188147][T16108] usb 7-1: config 0 descriptor??
[  912.208072][T16108] xbox_remote_probe: endpoint_in message size==0?
[  912.252788][T16087] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.265112][T16087] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.272819][T16087] bridge_slave_0: entered allmulticast mode
[  912.285932][T16087] bridge_slave_0: entered promiscuous mode
[  912.307488][T16087] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.315219][T16087] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.352458][T16087] bridge_slave_1: entered allmulticast mode
[  912.368511][T16087] bridge_slave_1: entered promiscuous mode
[  912.942227][T12081] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  913.060428][T12081] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  913.230348][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  913.348742][T16218] No such timeout policy "syz0"
[  913.639550][T12081] usb 7-1: USB disconnect, device number 44
[  913.812206][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2523'.
[  913.844639][T16216] gre1: left promiscuous mode
[  913.897299][T16087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.187099][T16087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  916.262960][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  916.475774][T16284] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  916.669070][T16087] team0: Port device team_slave_0 added
[  916.691960][T16281] syz_tun: entered promiscuous mode
[  916.706809][T16281] syz_tun: left promiscuous mode
[  916.942797][T16295] No such timeout policy "syz0"
[  917.204013][T16087] team0: Port device team_slave_1 added
[  917.330553][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2532'.
[  917.388791][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2532'.
[  917.405234][ T1313] bridge0: port 3(batadv0) entered disabled state
[  917.603448][ T1313] bridge_slave_1: left allmulticast mode
[  917.621220][ T1313] bridge_slave_1: left promiscuous mode
[  917.902032][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.181004][ T1313] bridge_slave_0: left allmulticast mode
[  918.419220][ T1313] bridge_slave_0: left promiscuous mode
[  918.425608][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.486546][T16268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  919.347919][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  919.442721][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.516264][ T1313] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  919.557932][ T1313] bond0 (unregistering): Released all slaves
[  919.693724][ T1313] bond1 (unregistering): Released all slaves
[  920.326538][T16301] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  920.335444][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2534'.
[  920.348949][T16301] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  920.400537][ T1313] tipc: Left network mode
[  920.405352][T16301] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  920.413350][T16087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.470502][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  920.604548][T16087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.642213][T16087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.644837][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  920.644852][   T30] audit: type=1326 audit(1755601030.766:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.687240][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  920.687316][T16087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.750312][   T30] audit: type=1326 audit(1755601030.777:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.750410][   T30] audit: type=1326 audit(1755601030.777:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.750507][   T30] audit: type=1326 audit(1755601030.788:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.750601][   T30] audit: type=1326 audit(1755601030.788:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.750706][   T30] audit: type=1326 audit(1755601030.798:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.750857][   T30] audit: type=1326 audit(1755601030.798:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  920.751010][   T30] audit: type=1326 audit(1755601030.798:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16325 comm="syz.9.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c4f8ebe9 code=0x7ffc0000
[  921.657980][T16266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  922.556074][T16087] hsr_slave_0: entered promiscuous mode
[  922.556705][T16087] hsr_slave_1: entered promiscuous mode
[  922.557125][T16087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  922.557138][T16087] Cannot create hsr debugfs directory
[  922.722931][T16352] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2543'.
[  923.266921][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  924.482295][ T1313] hsr_slave_0: left promiscuous mode
[  924.578230][ T1313] hsr_slave_1: left promiscuous mode
[  924.586928][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  924.607850][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.623499][T16372] netlink: 'syz.9.2548': attribute type 10 has an invalid length.
[  924.733476][ T1313] veth1_macvtap: left promiscuous mode
[  924.746914][ T1313] veth0_macvtap: left promiscuous mode
[  924.761113][ T1313] veth1_vlan: left promiscuous mode
[  924.773139][ T1313] veth0_vlan: left promiscuous mode
[  925.323749][ T1313] pim6reg (unregistering): left allmulticast mode
[  926.934131][T16270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  928.296129][T16400] overlayfs: missing 'lowerdir'
[  928.639854][T16261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  928.966056][ T1313] team0 (unregistering): Port device team_slave_1 removed
[  929.033084][ T1313] team0 (unregistering): Port device team_slave_0 removed
[  929.789175][T16400] netlink: 'syz.8.2557': attribute type 1 has an invalid length.
[  929.797549][T16400] netlink: 'syz.8.2557': attribute type 2 has an invalid length.
[  930.388157][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2560'.
[  933.315310][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  934.467691][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  934.898608][T16108] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  935.709703][T16108] usb 7-1: Using ep0 maxpacket: 32
[  935.754366][T16108] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  935.799316][T16108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.841249][T16087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  935.861536][T16108] usb 7-1: config 0 descriptor??
[  935.871084][T16087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  936.292758][T16108] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  936.299962][T16087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  936.334444][T16108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  936.376817][T16087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  936.386633][T16108] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  936.404473][T16108] usb 7-1: media controller created
[  936.415241][T16441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.454388][T16441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.540605][T16108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  936.641234][T16108] az6027: usb out operation failed. (-71)
[  936.674582][T16108] az6027: usb out operation failed. (-71)
[  936.691426][T16108] stb0899_attach: Driver disabled by Kconfig
[  936.717725][T16108] az6027: no front-end attached
[  936.717725][T16108] 
[  936.742601][T16108] az6027: usb out operation failed. (-71)
[  936.762655][T16108] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  936.780812][T16108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31
[  936.822363][T16108] dvb-usb: schedule remote query interval to 400 msecs.
[  936.830638][T16108] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  936.878471][T16108] usb 7-1: USB disconnect, device number 45
[  936.923643][T16087] 8021q: adding VLAN 0 to HW filter on device bond0
[  937.007963][T16087] 8021q: adding VLAN 0 to HW filter on device team0
[  937.061572][T16108] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  937.117861][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.125099][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  937.510649][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.517873][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  938.106183][T16456] netlink: 'syz.7.2569': attribute type 10 has an invalid length.
[  938.560651][T12081] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  938.763798][T12081] usb 7-1: Using ep0 maxpacket: 16
[  938.793417][T12081] usb 7-1: config 252 has an invalid interface number: 15 but max is 0
[  938.817682][T12081] usb 7-1: config 252 has no interface number 0
[  938.826800][T16087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  938.850558][T12081] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  939.105490][T16475] sysfs: Unknown parameter 'tS'
[  939.393991][T12081] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  939.395649][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  939.414051][T12081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.425276][T12081] usb 7-1: Product: syz
[  939.426224][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  939.429573][T12081] usb 7-1: Manufacturer: syz
[  939.444830][T12081] usb 7-1: SerialNumber: syz
[  939.556155][T16465] syz.7.2571 (16465): drop_caches: 2
[  939.564273][T12081] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  939.702918][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2570'.
[  939.719529][T16108] usb 7-1: USB disconnect, device number 46
[  939.737635][ T1313] usb 7-1: Failed to submit usb control message: -71
[  939.757706][ T1313] usb 7-1: unable to send the bmi data to the device: -71
[  939.776259][ T1313] usb 7-1: unable to get target info from device
[  939.783476][ T1313] usb 7-1: could not get target info (-71)
[  939.792004][ T1313] usb 7-1: could not probe fw (-71)
[  940.985455][T16087] veth0_vlan: entered promiscuous mode
[  941.075410][T16087] veth1_vlan: entered promiscuous mode
[  941.562392][T16516] sctp: [Deprecated]: syz.6.2582 (pid 16516) Use of struct sctp_assoc_value in delayed_ack socket option.
[  941.562392][T16516] Use struct sctp_sack_info instead
[  942.700922][T16087] veth0_macvtap: entered promiscuous mode
[  942.770155][T16087] veth1_macvtap: entered promiscuous mode
[  942.817076][T16087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  942.829048][T16087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  942.855596][T16087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  942.902795][T16087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  942.931408][T16087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  942.966804][T16087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  944.289125][T12706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  944.466576][T16550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2593'.
[  944.735343][T12715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  945.029492][T12704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.050420][T12704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.188146][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.208563][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  949.506653][T16257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  950.113398][T12704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  950.576984][T16105] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  951.033478][T16633] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  951.042724][T16633] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  951.051792][T16633] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  951.061251][T16633] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  951.071387][T16633] geneve2: entered promiscuous mode
[  951.315036][T16105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  951.432929][T16105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  951.515961][ T1313] Bluetooth: hci3: Frame reassembly failed (-84)
[  951.638770][T16105] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  951.680385][T16105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.718527][T16105] usb 5-1: config 0 descriptor??
[  951.958594][T16105] usb 5-1: USB disconnect, device number 6
[  952.782146][T16648] BUG: assuming non migratable context at ./include/linux/filter.h:703
[  952.797908][T16647] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  952.819303][T16648] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 16648, name: syz.4.2625
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  953.322744][ T5846] Bluetooth: hci3: command 0x1003 tx timeout
[  953.330177][ T5848] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  953.386989][T16648] 3 locks held by syz.4.2625/16648:
[  953.474331][T16648]  #0: ffff888024d036d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xb97/0x2810
[  953.527619][T16648]  #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00
[  953.546919][T16648]  #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380
[  953.585416][T16648] CPU: 0 UID: 0 PID: 16648 Comm: syz.4.2625 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  953.585447][T16648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  953.585461][T16648] Call Trace:
[  953.585470][T16648]  <TASK>
[  953.585481][T16648]  dump_stack_lvl+0x189/0x250
[  953.585514][T16648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  953.585539][T16648]  ? ipt_do_table+0x13dd/0x1630
[  953.585571][T16648]  ? print_lock_name+0xde/0x100
[  953.585604][T16648]  __cant_migrate+0x238/0x2e0
[  953.585641][T16648]  ? __pfx___cant_migrate+0x10/0x10
[  953.585681][T16648]  nf_hook_run_bpf+0x8f/0x1f0
[  953.585703][T16648]  ? __pfx_ipt_do_table+0x10/0x10
[  953.585729][T16648]  ? __pfx_nf_hook_run_bpf+0x10/0x10
[  953.585749][T16648]  ? iptable_mangle_hook+0x189/0x4c0
[  953.585778][T16648]  ? nf_hook+0x9d/0x380
[  953.585794][T16648]  ? nf_nat_ipv4_out+0x2f7/0x4e0
[  953.585818][T16648]  ? __pfx_nf_hook_run_bpf+0x10/0x10
[  953.585841][T16648]  nf_hook_slow+0xc5/0x220
[  953.585874][T16648]  nf_hook+0x217/0x380
[  953.585898][T16648]  ? nf_hook+0x9d/0x380
[  953.585916][T16648]  ? __pfx_nf_hook+0x10/0x10
[  953.585939][T16648]  ? __pfx_ip_finish_output+0x10/0x10
[  953.585967][T16648]  ? ip_fast_csum+0x1ee/0x2b0
[  953.585997][T16648]  ip_output+0x16c/0x220
[  953.586015][T16648]  ? __pfx_ip_finish_output+0x10/0x10
[  953.586038][T16648]  ? __ip_queue_xmit+0x63/0x1b00
[  953.586057][T16648]  __ip_queue_xmit+0x1101/0x1b00
[  953.586084][T16648]  ? __ip_queue_xmit+0x63/0x1b00
[  953.586112][T16648]  sctp_packet_transmit+0x2581/0x2bb0
[  953.586183][T16648]  sctp_packet_singleton+0x233/0x330
[  953.586209][T16648]  ? __pfx_sctp_packet_singleton+0x10/0x10
[  953.586246][T16648]  ? sctp_outq_select_transport+0x462/0x570
[  953.586270][T16648]  ? sctp_transport_burst_limited+0x19c/0x280
[  953.586299][T16648]  sctp_outq_flush+0x4f0/0x3140
[  953.586321][T16648]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  953.586361][T16648]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  953.586392][T16648]  ? rcu_is_watching+0x15/0xb0
[  953.586420][T16648]  ? __pfx_sctp_outq_flush+0x10/0x10
[  953.586449][T16648]  ? sctp_outq_tail+0x612/0x8c0
[  953.586470][T16648]  ? sctp_outq_uncork+0x4d/0xa0
[  953.586504][T16648]  sctp_do_sm+0x5332/0x5a20
[  953.586532][T16648]  ? sctp_stream_init_ext+0x57/0x180
[  953.586553][T16648]  ? sctp_sendmsg_to_asoc+0x12fd/0x1810
[  953.586580][T16648]  ? sctp_sendmsg+0x1941/0x2810
[  953.586606][T16648]  ? __sock_sendmsg+0x19c/0x270
[  953.586637][T16648]  ? __pfx_sctp_do_sm+0x10/0x10
[  953.586706][T16648]  ? __sk_mem_raise_allocated+0xaa9/0x1240
[  953.586741][T16648]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  953.586776][T16648]  sctp_sendmsg_to_asoc+0x102d/0x1810
[  953.586803][T16648]  ? __asan_memcpy+0x40/0x70
[  953.586841][T16648]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  953.586887][T16648]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  953.586916][T16648]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  953.586943][T16648]  ? __local_bh_enable_ip+0x12d/0x1c0
[  953.586974][T16648]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  953.586997][T16648]  ? security_sctp_bind_connect+0x7e/0x2e0
[  953.587025][T16648]  sctp_sendmsg+0x1941/0x2810
[  953.587069][T16648]  ? __pfx_sctp_sendmsg+0x10/0x10
[  953.587094][T16648]  ? rcu_is_watching+0x15/0xb0
[  953.587116][T16648]  ? trace_sched_exit_tp+0x38/0x120
[  953.587153][T16648]  ? __schedule+0x16c8/0x4c90
[  953.587187][T16648]  ? sock_rps_record_flow+0x19/0x410
[  953.587215][T16648]  ? inet_sendmsg+0x2f4/0x370
[  953.587242][T16648]  __sock_sendmsg+0x19c/0x270
[  953.587271][T16648]  ____sys_sendmsg+0x52d/0x830
[  953.587309][T16648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  953.587351][T16648]  ? import_iovec+0x74/0xa0
[  953.587383][T16648]  ___sys_sendmsg+0x21f/0x2a0
[  953.587418][T16648]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.587488][T16648]  ? __fget_files+0x2a/0x420
[  953.587509][T16648]  ? __fget_files+0x3a0/0x420
[  953.587543][T16648]  __sys_sendmmsg+0x227/0x430
[  953.587580][T16648]  ? __pfx___sys_sendmmsg+0x10/0x10
[  953.587607][T16648]  ? do_futex+0x333/0x420
[  953.587667][T16648]  ? __pfx___se_sys_futex+0x10/0x10
[  953.587690][T16648]  ? fd_install+0x30d/0x540
[  953.587724][T16648]  __x64_sys_sendmmsg+0xa0/0xc0
[  953.587757][T16648]  do_syscall_64+0xfa/0x3b0
[  953.587779][T16648]  ? lockdep_hardirqs_on+0x9c/0x150
[  953.587800][T16648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.587821][T16648]  ? clear_bhb_loop+0x60/0xb0
[  953.587846][T16648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.587865][T16648] RIP: 0033:0x7f8d9dd8ebe9
[  953.587885][T16648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  953.587904][T16648] RSP: 002b:00007f8d9eb92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  953.587925][T16648] RAX: ffffffffffffffda RBX: 00007f8d9dfb5fa0 RCX: 00007f8d9dd8ebe9
[  953.587941][T16648] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000005
[  953.587954][T16648] RBP: 00007f8d9de11e19 R08: 0000000000000000 R09: 0000000000000000
[  953.587967][T16648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  953.587980][T16648] R13: 00007f8d9dfb6038 R14: 00007f8d9dfb5fa0 R15: 00007fffc574ad08
[  953.588016][T16648]  </TASK>
[  954.448613][T16108] usb 9-1: USB disconnect, device number 7
[  954.873848][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  955.472682][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  955.503179][T16264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.610291][T16264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.697949][T16264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.761070][T16264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.867825][T16264] bridge_slave_1: left allmulticast mode
[  955.873647][T16264] bridge_slave_1: left promiscuous mode
[  955.879723][T16264] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.889416][T16264] bridge_slave_0: left allmulticast mode
[  955.895088][T16264] bridge_slave_0: left promiscuous mode
[  955.901250][T16264] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.255526][T16264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.268901][T16264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  956.279285][T16264] bond0 (unregistering): Released all slaves
[  956.467586][T16264] hsr_slave_0: left promiscuous mode
[  956.473410][T16264] hsr_slave_1: left promiscuous mode
[  956.479662][T16264] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  956.487211][T16264] batman_adv: batadv0: Removing interface: batadv_slave_0
[  956.498048][T16264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  956.505600][T16264] batman_adv: batadv0: Removing interface: batadv_slave_1
[  956.529795][T16264] veth1_macvtap: left promiscuous mode
[  956.535398][T16264] veth0_macvtap: left promiscuous mode
[  956.541105][T16264] veth1_vlan: left promiscuous mode
[  956.546381][T16264] veth0_vlan: left promiscuous mode
[  956.995962][T16264] team0 (unregistering): Port device team_slave_1 removed
[  957.041786][T16264] team0 (unregistering): Port device team_slave_0 removed
[  957.755387][T16264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.816526][T16264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.899808][T16264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.952790][T16264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.076398][T16264] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.146085][T16264] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.217985][T16264] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.643547][T16264] bridge_slave_1: left allmulticast mode
[  958.649256][T16264] bridge_slave_1: left promiscuous mode
[  958.654925][T16264] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.663384][T16264] bridge_slave_0: left allmulticast mode
[  958.669099][T16264] bridge_slave_0: left promiscuous mode
[  958.674775][T16264] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.688666][T16264] bridge_slave_1: left allmulticast mode
[  958.694825][T16264] bridge_slave_1: left promiscuous mode
[  958.700467][T16264] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.710055][T16264] bridge_slave_0: left allmulticast mode
[  958.715979][T16264] bridge_slave_0: left promiscuous mode
[  958.721663][T16264] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.074202][T16264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.083961][T16264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.093269][T16264] bond0 (unregistering): Released all slaves
[  959.429942][T16264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.441370][T16264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.453531][T16264] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  959.464097][T16264] bond0 (unregistering): (slave team0): Releasing backup interface
[  959.474354][T16264] bond0 (unregistering): Released all slaves
[  959.592540][T16264] bond1 (unregistering): Released all slaves
[  959.919172][T16264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.929734][T16264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.939614][T16264] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  959.948774][T16264] bond0 (unregistering): Released all slaves
[  960.063447][T16264] bond1 (unregistering): Released all slaves
[  960.165653][T16264] tipc: Disabling bearer <eth:syzkaller0>
[  960.193557][T16264] tipc: Left network mode
[  960.213928][T16264] tipc: Left network mode
[  960.245613][T16261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  960.696462][T16264] hsr_slave_0: left promiscuous mode
[  960.704295][T16264] hsr_slave_1: left promiscuous mode
[  960.710607][T16264] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.721336][T16264] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.729709][T16264] batman_adv: batadv0: Removing interface: virt_wifi0
[  960.740586][T16264] hsr_slave_0: left promiscuous mode
[  960.746440][T16264] hsr_slave_1: left promiscuous mode
[  960.752166][T16264] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  960.759697][T16264] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.767516][T16264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  960.775015][T16264] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.788843][T16264] hsr_slave_0: left promiscuous mode
[  960.795346][T16264] hsr_slave_1: left promiscuous mode
[  960.801672][T16264] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.809489][T16264] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.834673][T16264] veth1_macvtap: left promiscuous mode
[  960.838710][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  960.840353][T16264] veth0_macvtap: left promiscuous mode
[  960.856504][T16264] veth1_vlan: left promiscuous mode
[  960.861788][T16264] veth0_vlan: left promiscuous mode
[  961.299584][T16264] team0 (unregistering): Port device team_slave_1 removed
[  961.347928][T16264] team0 (unregistering): Port device team_slave_0 removed
[  961.456286][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  961.462849][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  962.131808][T16264] team0 (unregistering): Port device team_slave_1 removed
[  962.176957][T16264] team0 (unregistering): Port device team_slave_0 removed