last executing test programs:

4m25.094435459s ago: executing program 2 (id=516):
r0 = eventfd2(0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async)
pipe(&(0x7f0000000280)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) (async, rerun: 64)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) (async)
epoll_create1(0x0) (async, rerun: 32)
close(r3) (async, rerun: 32)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async, rerun: 64)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

4m24.569572652s ago: executing program 2 (id=521):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRES64, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = syz_clone(0xd084a80, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100008400000000000000000300000000000000000000000000000d94c1db490a7a4d52fa0394"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
prlimit64(0x0, 0x6, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000f00000000000000000000006f43fd71", @ANYRES64=r3, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[<r7=>0x0], &(0x7f00000000c0), 0x1, r6})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000000)={0x4, r7, r6})
socket$igmp6(0xa, 0x3, 0x2)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

4m22.844063489s ago: executing program 2 (id=527):
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x2, 0x675, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000180), 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=':(@\'/{)]\x00', r0)

4m21.85757027s ago: executing program 2 (id=530):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
wait4(r1, 0x0, 0x20000000, &(0x7f0000000240))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000002000000080003000b000000", 0x24)

4m20.229042711s ago: executing program 2 (id=535):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$FICLONE(r0, 0x40049409, r1)

4m18.352341674s ago: executing program 2 (id=541):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8bf1, 0x800, 0x0, 0x37}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0ea13e55b3", 0x5}], 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8bf1, 0x800, 0x0, 0x37}, &(0x7f0000000340), &(0x7f0000000280)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0ea13e55b3", 0x5}], 0x1}) (async)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r1, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async)

4m17.709523711s ago: executing program 32 (id=541):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8bf1, 0x800, 0x0, 0x37}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0ea13e55b3", 0x5}], 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8bf1, 0x800, 0x0, 0x37}, &(0x7f0000000340), &(0x7f0000000280)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="0ea13e55b3", 0x5}], 0x1}) (async)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r1, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async)

2m40.040491599s ago: executing program 4 (id=981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1040}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
llistxattr(0x0, &(0x7f00000002c0)=""/27, 0x1b)
process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f00000005c0)=""/158, 0x9e}, {0x0}], 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000049015590b0000000500800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

2m39.601536043s ago: executing program 4 (id=982):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeaf, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0502103, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, 'NLBL_MGMT\x00'}}, {@euid_eq}, {@dont_hash}, {@fsmagic}, {@context={'context', 0x3d, 'system_u'}}], 0x2f})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000000300)=""/132, 0x84)
lseek(r5, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000040)='jffs2\x00', 0x1)
close(r6)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x7, 0x0, 0x0, 0x0, [], [0xfd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc})

2m38.553657726s ago: executing program 4 (id=990):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e0000002140003"], 0x70}}, 0x0) (fail_nth: 5)

2m37.445097004s ago: executing program 4 (id=996):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x2014, 0x1b, 0x8, 0x70bd26, 0x25dfdbfe, {0xb}, [@generic="3bb52b060b7aaa8b34f86e715ba514afac8ff70f3a9433a059ceb3458adbd35724b99b16c1780f4efc2975e7cfcbe67d538270109f7dfb887e2b5256cbfec107532a4c5795f85d20a4274464cec0ecc9c9cbc9ab00c823250a92294be1d18b891c4c91cf16e0f574391669af89f54926d3f6f7798f1e71ade881879d1764e155994d710010167c2f9fd354e3a0d5c45d3c4dae1245afe146c5d1793ceef70862f0aaccb6fc50b1969cb191e681887e1ba134380faef8e94fc2aa649b8f92e7189d7477165d72fbae9a64c53b32bd54986800da0e03d5657dc6e9b7ebb17b06d525c011df38bcb3a0fe2918d7b1f1baa805a0e47f013906a70d155044af223b34848e1b337233feed71bfbe0402c447868b78f802e08a131d7671ec56cbca251950375eeea17bdbfff215f39dc540f1ebb423c155da860750537ee4b3cb993c55f6c993bc2675d274533e35d7edbbe077e8b2bd464e54a254c92d661eb72d28a59c77a31b35bc0f07ec5f037e67b98ed7934c7bd705f61c434652dd5f8b77fe815e41bf16ddf5761bcb9e870dc59f1aa1def1b71d2fd5215194a66d6cb2c0f0d47c85a2a9faba44bcd70067620d961daf2aee1ab202bd6c0fae0e9fc6857286da44cfd1ec8eb68e880530c4c1a28e7742aec70aaca769eaa284bd0be26b99f21ec4eda3e7c48dffc9a9e2e5d735aeb224d8707efc5aff4a38258f026afe0c9fe89257e8de8ae53eb9b5b339222646ad53a8a586e201dd3d6722ad4de80271f1dc0428e7a697b008ae329e93824f6acb66778de50a89bfb36ea747cf33cdc8c989393da5d3d48dc4e30c86e95890ba438085d93006d9f629daee9daa341c37851b2c14b8c8c0f8e0d64d389fc1c4cbddd5349386ddb0685d69d6a0a58d593a11b2912f633d501445186dbc39ac2b72f55104cf515e94d97df4461ef5520b87a66ecb2a484c168df6c679d80b3b2c9f8aba9f4531a2721ee04f4e004b4834981f3afbbcbd3092f731a62618be28bbcf9859d13b49610bff63770a8dcddb2583e411901fc71ac223998a75d9a1acb72ff72f6c73ffe996a5d3c59b221fd3cf3e11a3cfa5277a4d0c95e6e9b77584f37c28411dca6796d7743500631a4ec9b40d5f4bc81fbce455fd8cd7cbe7e880a6560959dcdf36eb7cfd2dcf98ea8944fd553ff126896d1ec63d60b297bf1f80248771cf291ebda70dda35d1f95cca987acbefc80fa00ca33ad7e49a99aca2adf964bd119425179953d31656483a8e6a8ce9e52e0d928128598b684f7fc93d6ace4b26c5d652843ec457649996516f054567c7ec1a978b78d4664ed0337cf5e20debfe8f21897096a0b9e1c0f4dff7c269554426314261665e8225ccae527fb302c270b3867693c327ae3b78f8037749a0ba50f79a91512756811a2f16929b937a4024c202473cf7f0e4752d31e245536da80373b40e1df9a3db62aac502842c69eded3b91ea572a38ba1c43f4897efbf679576c10efb7f54d66fd3b3127dbf0582c500d12d2cc644d409f1194d7ca541a9875ce4680c6fa787bc6d6b17dc2bff3b07a1862a486c71d117585419a2a1d8dc470042712fd488d4b93eb84337ff1df281e976d96830e80773e0647e795a41eea40c1397bccae495c8249f5dbbcded5574f5cbcf29d0be70cfa0f974efc0b3298d560037b2558cc883b711f7faa00c088e84dc54b9e656ffd403c6eddb1121a93072ba3da52318f808f2ef893a0bb8e462a79b9b81f11cfbbebfb6c53e0d9ed147501e2e9b4e3d86dc7a83532afa2bb960b54c6ecf0e600d375614d0be4a61b20aef0ed4a935385e6abee063c1e72f3f763a3b9e6b18f17832bb0ab114bb9c58827e8f84f1bea226a60425bb3b23aca8fd329a75950c2f5b0de07c9ff0201743c3de02cdaed8f87e7ca15ea3583818411c7e14145695da04b4162f9d15092fd04534abe891fd3d4b2f75e3db71e1d9ab5058dce8ea9d4bcc24cf705d2fc34fe3f73e7b72a7ad80b0d4f0aee30683bfb28441ca06f6748ab762b1a337e20ba34144876e62910644848bf91cfb7ce2192a368ff7fc1233233015934cdea1825cbaf51f8eed1eed83c5398dae9108baa76d7a49c50ba73a505a5d7d86887fe2da47374370c3be0799d370b6ac5aabeaf2414da4b536628783b3c065dfaa537f50a838226ec5265c44c4fa3a8de42eef29219b0d0795de1340c67a69fcdfdfe87c7381d94e51a4c0f113d50da022ac44e7b353bae5e8c1243995de25945d3fc52f41b866ebaf980a64410dff49964937c4199ff3f2769d2dd74fc14fbf72f89f02a88857cf05e3f0d3902f607647efdb97fea3fe53416b3588ef0f6ece8bbb21596f221157c8684f63bb9fe7d1ee1c355604e4c86ba838ec819ab1ee4e1b88582d370f68a9d676adfc4724ddd97f63e136bae2daa1b6cf12e75bdce012cf9d45be502a88f117c09b17ec6ecde674cdbf74eea46be8e71e06f507b59e0c27eb5aa95b699dd181d69bc0188eeccb32566d384f4cf302aa947c8859747a3b8c2b5f147f975dec779bef40076ad26dda4a5f77ef2d147728ab7d4c28c8b1186905408859a4453aacb8f70b49c969f336eb88ccdf2b1d74d052b1ccbfd39bd2ee204b263f0361e98136febb06006188bf575b8e800704d5aabdf817aba722d007e0aae9df089ec8abbbd57c41fea1b3715a17ce78d2b3e62a1ed579164b3a218b037c242a7d238344f00d5c2ee33529f9af67da5691bc86ecd4979a619c1c77d21e238919e2f7961a71216b0e3c00819653a09949b5238d006c50b2b05d446aee8883b17bff8eb343b3fc5e06d1c0bb84a166f11ea90761dba51c574cabef2b16480da37c1d1fde9094aeb7c9f8548102ab9b0d2d9d33a4d7f6515332ca2224bd3e09ae8cd6ab65a3b0d8f104528165a87e34895b0f9f49feaacf1f55aab7b11f5ca70a6cfeabf196063f4275b677522123acae02a36950e1d7194168c74ff26319b5c00422abd132d7ec854d767fe67ec9129c73d3c8a84c08bab27b7be01bdc2ea7f3c6b275ca0c0702bd01e63506fef719dc84dc0034a6befc9be6abfb818369c69b405221058afb1ff94e23eb6cdddfeb2f77e5531c447929a33a54779269cedea982cd8d6c2ef748d8a860e5b2b109e24d191de56e333858712c5deb838a3556591191742961014fe0d210c39c4aba1082657a42c01e893ceb6d75a04c76a60ad6132000dfda2b08c7e7248dcd474b9e12983488b8177d264979a83660096ad8d21c96470a1b75e2a87810a3a1989e64b48157885224b69834cde4654102fe3c94a3d400a70a89c2ab8e23813c8eded185aed8e7931f9cfb36f813b29f3d7bcd0817a074eb278da731d055827248c052050cf7355675af604609b7a20c01dddd9233c1b030343b48b22d5de9ba662ba68720db399e7589532b85c30eae0c4f8f6370ca16bcfd9dca4665409f227d0c36a5c66dc6f1583cb7dfcce9f6d98d19061a32e9ced44343243fa3abdd36e9b55d6ea08793281a271ee47fcb30fd936be3c145a7d6812a08a49a6fde015cdda203df2bc577ae38467a562c1c425eafb6de4aff98fd97c02be55bce92afa9ebde705177dfb6fda461b57a54039c5feb7ac4b7f58fda933948d824758a39dcb3b9f41287301347767c389305cc7b822a1c4fe0a4100adc062114af069eafe9f269ef4b4dbb35ec4c26d10f576d4e97849c724da2cea77837ce54c53f4ca4c54ac888ea954b455cd188d0d9fc028a4fb0427ededbb86cd9175e9074989b2d5a8a465728a1c31baeeaf35aae6ce51ef9070d360375dccccf94a4cbc8e20d152fc1b8fd8206ea2b088406ef330da533024c32dc3ac8623ef9d934c1f5464cc07592afa579fdfb820aed0e05afab93b7a95591b914111641af3f2cd420cab4d23fe4ad3878ad55dc7d4016a49b465b6f84c6a43d54215cdb0299584fc87a1779102e8ae6562052b54210f9cf2fa046350968ba88031ef54be5e4ed4a6ddb39b65d69ddb7edc5daee1ddb81ba0472510db4121a0305b40b698448b65d1ab3c968c63c4a9eb56ae6e01955430c7224a6db26900d30027b5e8b100754eec823d53a85e322af0a822b76cee55e07de7d65bcae20139a9580dc5560d2c43158faafa412de24f6f026541a818faf836e58fdec2048c6eb0afca26a1638adaee8c1ee219dd7e882d4ec6d7fec6c9febb3ec949c52ab8ec105228bc552863b38bf9890278bd29e37e931fdc8a4a9397adbbcf858d2437041d94bbe3bb64625b0230d954e1dd4fc18e9ef4ab4b728824869e3c952ee7f6410b942b402ca0b1a6d09dbd58ddc90fd49f3b1f85e234f51280ca270e1063924a5294fef370885352972cb8d8d1eceb619388ab22d560d03c1ca291c3749b95d9f0d95ac6c1816702c19d273bdeb5615f93edb3ba991cac31c7926f628087d1a959e4e587ea0454a9edb14c450b705006eb7d2324c2f71cccf42cbc03525f0b7daa49a6cceb007cd727d58a7427068143621c59423cbdd0b5737156621de2f2e059b10212020a2a45e99fd08e7de9a281238b6328eb64d09acf6461085a63a4a36259393d5a7aac1651b008169d72b2479565077d8a6eb571534b212efd7ce416d03919ed6dff339be0366ea42e328aa98e39c576d16b990c42d181c9e552b0b0f9ec6bc1a596be45b2a7708f914976cf627936dcc96d0fa4d7abf1ee7da0f6d280265e0f2276811466e5972e673a5eeaea324c1fa14068ae4d5067336e2a077da2a5edc615c72e1249c7efb4c1bf6e1c63c636219ac2ecb1b72754208748f936a1a8ba63e42fa0a9b9690901646936370b5e0f3aa8faa046a4f2149cdb9718d038dad1e18310ccc2aaa8c721d9ef3b895a08f787a9a41b1c1e4de666b549a6b29fa2d2f187c822a161b007e2c6e28cdd36082004a8563bf167340d82f77ebda3a8d874142861b2bd1d0db80a668c8e954b8511a52caf5a29fd280cd3f89fab5b9fa32a5d8bb6b1ca00fd46625be0cc5319367ac10668f76a80701431a8baa03b59586067d95c45879960b39ba663dadeffbfc369886e947a847cf036b94a3586228b358c042d219a9d61ae69aba6837565a003e959b60d2ed0366b24539e3e7c7ea5150884049c6bdf26a44910beec961c975039389eecb4b1865c1d9cb80179b08f0763c24c69bd4f758031e9961d9971c12d9d98d9412174e0771965f7b388cb0a5180c3fc4c38725dcae688c7f8ab59e4fca741534de8643c6b3cbc6ec82c62b4ceb90911a6ddba4689c51b17a839a0525d6c0e34f9ea33d112886a978be6c21c900a09fc0028a3b37919f24884a820ccfc360c442da6ead9100a6a720a38def151fca5a88782ff879d33d97ae20e78f9e6671a5b6c253c565f64454dc026051b497ccc30ade10a51fe921a4b3bc4c7bc804ccbaaf715ecfa690dfe4b063d3838fd1de33484e52b8c928ea86c91cbec2909c0faba9e74e6bf8face68fbd54ae7e8d70e88d51ee643fda9956de48ccb5431be7741d11de3c60ef8a9bc16ee6828759f5cff7e39f5b2115ee67128764f2e76bd0d1d1f040684063fdd2df699ebfd0d0501319eea8060b0fdf54c3e29eba182af3c02cab9989da90381090459b5046aa126f6f6596af54f12cfc2b8a2cf299d6697bf5c25d050e66110e144d4ae25bb6419bafddb3533dd277f1a0ce9744d2563904a943a41ab85055b00b19bd83f2ad8047d806d84eb2fbeafaa5fc6440d678faa0c1c5a6d0e5ed527c802d81b14beb6e2f3dfdcdd544392547d22bf72f2520f1d30722151517d3f610d8eee49c3bd1a9ad", @generic="22a404d09a8ce152c249dd29cd3e5d820e37608b2e54c7316f16869476ac859e722c22ea8cb3e3d68b293f94d8e0f7d25f78708353f719a12416aaf443b9a5aa3feffc96ed769f6ea645f0e1646372671c4c57cf389d99aaef287370fef26c8ea117aa0ea45654ce3fc2b929072147bfde7230627e933f6043d020aef75c978ac02e24a1f6fd276133a17fe3b05c24161c0c728de5fea53bbcf9fd98b5e4b311d385404fa82badbf0b10f84e1bddd05294ca57386ea5299aa196521a3651e2b602e59ed91ca9b772a17f99eed394c16b15b9efb858c2d15e190f8f820c479f80ec59ab096925bacdd40eb8f9a22827309ee7cca3bdd3b8ed13bf3029eed330c5c98f31c63e95810fb09972deeddb2452ee33af6e42a4c5c044144683d154c15d09ab6b3a061062402a567da1f0e2d1c2f5d29167384cd9e8f2d4a60cc486c202235e0a8bce8fbbe05ea562759e3ace91a5a8fdfbe1f4b3d7a6a363d416e9499df4afdbff3bc96985d3f9e86e2a9c67524d31c3909e61aa034ccd33a2b6590fabfeb90b8740c660f5a45eb794cc083ad4ebb0b8bf6265e3a9e88d964fdb94fc803831fada9f6d62972227cace6aa6251c523683132f11ca6d90db610c680985d75ea3aaacfc5143e4b2cc891246e1eb6b90921eaf69624507b94b91085e392b70bf06e6ebe3e3efc3f8ef780b77cea5a48e536ab91eb76f9d298b5053a980dc7b6e715ebe448c6afdbf6af835d331784b7e19e4e1d2575204015d19b9b7f4b37304e91da9143e090697bd0fe74597fa9143f7fee8ba3492138b16c4acdeedb0a6062ef8d83a6443080e13c67913e69bd71af7541b64bd73581c2f4e0ff3064ff136a9789787c347762184cc3013736b58d5553b095303fad99c598d5e1ab03ad97f6f1b4f438137362d8c610b83ae2b6f236e3c5e7f5a68850c4e53fb4e71b279c4e746a63502d389efd96efbb24dfc18cd90013277391752c09598c8c1d634c733fc45276984df09304a04682dafc864498f06283f3bb187b4d27a816fdd6cab99b43414ad90c378a9382f42648250477c3293cbea881eabbdf6882ef02ae0782acfa213e4cc767aad21da6b3179d27046c5a9cd636d260c9412842f86b5e87a301df2018a89caf3839a4ced4e785fc82df3a1766ce59d2315273f1b2fe417e6eaee01670d75016722431066d5061e4e8ed3d2b5abf35157c83e3cb54d43ac64664bbe93b0e5cc23f18e0e3cea18583d24e518bb3c4d838b8a68089e85d4d17503408f411ab643253019fb7e41ec7230ac11d7549b1d6a2a0ad498259145b04fcd2efa0bed3a3bc72a6ec4f2351d025822c1e2289ae9d97a2d53ad84e4fcebf1c7a8903cfbe1beea4ba803c364282982f8f68de38814882bd663ecbbc23d5bc61d541647ef9f3155e66c674689a9b2575c5274967a903aab053f870ad660038879770c33384c2040d387c5f3d4164632afade2d124af3a07560f2d4275b7503113f072a51ea752d8d81e24ca107221780d4ecc5c63cf91833f15a3ab2779e91fce13df85595ca996138e32b6e9d488a63955a71f1f7c122bf27397b9e6b1818cbfec91174216f111c2c17410e7c58e2a7e4b2c90eb03e9cd810b48c5309e8b5c27418f2cf946531a48994f4d357f65146d02284a75adcacf3bf4c6da6bf193785fa4ea12b8df26783dd14eab0c2d1cca4721495ec8619257f7797eb8f9840e39019a596aece25ffbfef984c1f85054c04603b2e440f6bb5a44d9071e739f02a9f21345d164c04ab5b8376f6f69eeac7e355ab395a158243ea43967b5b73c23763fa3f8aa984e1a2a84743b3a57d379d0187aa9846c509fe0d56b5086ca09dd792ff4d44c5604b86a515b785af13d1b9ac01a18b1e1cf2e06ab539f93a87d1ebb2d416379ed26483abc6e58082e77c1655162dfc90d7707678c9bbd23e1ca4db275dc688ceb96f7c04cccdfc932b922c75268b9f4856822852447f0fbc6cf3fbf47704cb71ab5f76c67cef9973d9067b850c9b7fb129769684188b47e314c6650026e6935bf7714ed134b5b9ce18940214c325a95050a37eeb77a869befb891831505b4fa43948584e605b569d051c2321e195596b76f6dea6306980995c9c65800d544cd9a841beb743f57490ae5d0aebaca68e1eecfeb5589505d01b5193d79ad2f65a1d0dc1f4fac682c9cd2ba94463822cc939372c8477d32f9203743c44179a9b7a5652b3aeb89d92fb5aff38cd570bcd75d60de2f8ece3e163a984c0439efd761085113251472129a293d5bd57a0da2d7dd0a27d24e7a43782f6931ff3adc5e9518162db8dbef518f923928fcfc5f58ae8d3b269d4dcf7a0e548083ea36b8c40ed89bd741fba34812016de7484c0d14cdaf87ab3836820b7a201026af36cc2f4e1157bc2e7cf7743f9e53b9f2a0a6aa8d88b2d1a20760ab04424e6216ff0ddd499cacf61cfab02c8a6e607de20fce42969ffd2c6107902fcae5075baee974ad464fdc0a8ab684b254cd88fbdd335a291fba7b655356df3b1ac23b9d5e2f53a4dc21c115472826d8fb692ed2e4859bf68e2d02633416c82b202521e1f396e0928db875f36dc74101f3f1718c030a442c8df79b21857ec490f7a254b29d7ee9b58e3c1eaa93e7c63ead7f2844cb3993a26c03607651ca4dd9c8526661d1141d054c702b255257c2b67ed002e20218b586e20268b50e8e473fd8599b17a22cf034a40491f490eea847d500929b1dab50d076efa8c9ddec4e43dcba7e8ba3768d718ebad5cfe6f5a5db13a897d18c0198abf85c895f23bb18b4982068a06c687c0f36791ea991efd4407436fb702a6868c7d1ce05ce7c4041a027503da03c2a801afab155f499c9d589c608766e13feb22ca958e74573cc3e3831851aee4ce0a1c45edf32905267a13ad8fb4c7bbfaa61ad3ae22bf804ffa2ad73ea21c055fa8b4ff1d1c288e71b1c7d94f176e31412b036284527e2ddd0ced90a89bb37e404e089f9287bb60cfabe1cda02882560584951977d0b0aff1d38233f639966bd7869f9443de080c5fe3379769a0cfaa70937e998e0e2f46dcf89bcd6b513c6247bc16d2b482da3a0976776f4884d28ec12e9c89204e2c1825f2cbf816d4c96d50c82b2d9c802cdde50fee86c1a155305b018654f98e2a71e61381d0a7cda970c69602ec40e8a413b120ca746d249659dccc12b9c729fbcf76069e294f4bae6a7e22d779f6da546ca208953a1943886ed4a3e4eca815d8e2b1cd44faad62e25a4e02e013d011415c16a417dd7843f0d8ff28a2f4d10b0d597b312a57c265d627acc88aa49e6d848f2b42b2d1bd46804d0243c21efeefe238f784ae6639c4c25cc88c0f685044fb298618222a79384996a3f2d0044748dcf0deb36d8de15a0e754b3fc25735892533226f6338c6e357deb586ff72746a014968e29539e987b0091889bc4a10ed34fbbaed17dae474117d168a74f64c769b32165285f19493aeaa7d6c87704b1af76a9489dda3faab118cf69afeeb5393e54972b2ac63ad27be76823b664d57abe35ffe117b7ee0c5fdcafc2ef42302dc498d08251e500e2e9eb918d01652f2e6630aaa0a73ee32690d791f7b3a366473783321863650e2020dcfc7bbbcc09a0514383d0f7e7f841a8bb273d8c265dc76038d0d91fd99e3f25ab760b02c1a86cba42c46cf386dc789788cae39459794fb555883455527e5974a42e513f37d345e398ed640110eed90b60247fb5694f6d4ac37ed79ab3a7c182d1790b048bdf7605e036af260ed32b905f92b66137079e519752d5d4691ead2f8b7877a860c9e9ce8830b20cbe45157b8f1341bec409c9f0b01f8988dc06697e261bb1f2a177e07d76aee0810262a16e9b42f02760f40fbbaf94e16cdd3dd8106f913962f32c96b90452caa5a06147cd23f19f0c4f45b86f2b04889ded6d01d38358712f1b8b5ed0642f38f9466d4d0ad6fe7a55936a12efe98fd75f29ac30bc65e413aa8c6c691515d43101d07f2374268d14e00a65ec486fa4bcee0164d2d9b524876c5035e7089b4add8065ace7a5c27837369f334828b1a22e4f877a965e3e6bf85a34c71f957f751187f7e7b6df61ef6c9f09b830d30eb4c2b4ace71dffb0405280f36b64830c2ebf547138e7cf11c3043b519c8f4c9c934954a335318d0b2c1a61ab1ee0e6444b7e02ef3d86b1ffafb599984fc70d5e007a99705a913b4818d33844c9597b8912a2ab2f6f8b03e96648b2361605b08b62e4b860170289c34f3f169bb88762eed58a15f84b7356fcc700318a3accab50927b1e4438dd485eac8d63ae5d18072ad9d6064b35af18a5eb00c094e2f511f2c95797128fa837b2acc7f15945198998322db29ed35d488ccf93025fc6aabdad41fef83ca2fb0bdc494479b68523214750bc73dc0ec3af897814ca9d7ef980d91e9cc3814895d33650799c66cd9a78d3514a6d32ae0b6ef0361f9cc17bfea3c898d87795170793dbddaa39a8aa097356dfaba9adee90d927edcc79ddbacb9c53e64d99f2b15d93451cc6c5e3be56d2100886cf311bccba58efc074dafad3356f78a0d18049b22be051efec6cdd3260fac2028a884a66f25fc7cd3d88b2131dfa60ac5653f1f25c7cf56ad491ac1be5e63a88f28c8ba7621c79b0771d390a1eb4c3aaf433a67afece737061fa730954db039f3a635ab46d5ba06a516d774ec827b462b20cb5b4d53456dda13874606bbfd24a5afab4fe437aa2d427e66900c91e7a9e0af077e4ccd9c632872ff680ae0f78e69f5984701ffc7b5693be6ef54e25cfedaae1dee24607faa73055fb4e5db01117e331ce526cd1b1a60d0779bc8308aab17419626b715204e0ac082b911477f99aa8f6b98b2e20f0beb59f95f2791812cdad0e7fc746feae5a1daec5c367e73167b345da561f0b7c5365f92ce608743f570e4ac87a0b255049f43cfa8f53ab810098b83728141a4df0f9a49cb14114bc77ae72a6491632b248c0a8ec351f4bb9b51e8e3bc103208030bc7021f9b878308f2c28bd19b38e36da5b95fe204f6932c59a31ba587aad830c08b0c2806755559d0f95f595fc862fd9af1ac6f3d8dbca60922298b89d3c7c0914b83d24ebcda38aab71fd3dc192bab86fe06dcbee9fa98f965663cee194daf7bcc1fba1d1418b962bd837cccecb89df05f1d6761f28fcd539df90f7873207bb3b124b0c402707a92973d906051898a20052210255b5365c504876aaf840e6074072b2e83e5575f1d74bf2c468776469743bc2b639c9d586aabbd12f50be1379f79ba7459c8584f5e8fbdaad8d6f8419ba3293a4b959bfac8abd55366b4145ec0b703a9d57ec83f895afc0ca04f1c58699a3ae100720c066249c027f7104ff2b257b748988069952a8cfecce0620e646137ac7f309c1ffffc048f47871a24fabb556693490c70a0446e3e4e638cb9c7079e6e3227a2a57e02559fbe7f5c4536d61612ee3ed398721b48414f43592a7509ac1d4220b2556961736195f593a4331d6a9ea8b80b2499dc23cd1619d54043cf22fca507cd4e1c6fa868ca5286f36db4c7c409f9ed48aaee2ef93662bde10a8f3b072b6cc127262a3de711c81a8edc0896953ea20cf54404cc82c4384be736d3636f361f8b63c154b5bbb11c1e4cef828e33011dc09b77f67899d18364b6543cff2ea04f5ad9c6726b74e477f3e15912033ef17ad640b34c5ec29c7897021f1f536014e1451872cef4f3beeebf4af7b252e9527291aee6e74a464487d1f5e1cd9eb3edb71ba6d4c9783260bd983734b3f4061cf6848190e4a89c3009ec2ec44"]}, 0x2014}, 0x1, 0x0, 0x0, 0x40c0}, 0x40010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, 0x0, r0, 0x0, 0x315)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f0000000400)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x280700a, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
move_mount(r0, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x11)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x20}, {0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x3048}], 0x6, 0x4)

2m36.900392021s ago: executing program 4 (id=1000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000002070106000000000000000000000008824049f1d015dbf0e79245a565e82f30d00f88289656daabb648dd40dd9edf50bbca7748f35ccd6b2a2237ae3004ffd8e50a33f1918863eb3bb34b44f3d2d09f7583fca71544ba813197e6512eb995a48adc2db6ccc8f3976adc3c30899fee0a671970960ba7dce1f3377d85b80928f0c9ac9b0785a4a9e0115aa750bc99e16f6d53a13e151b829c7a4e54e986e4db44c910db3418c0240d0c81a8ab9f0d6432d461e2"], 0x14}, 0x1, 0x0, 0x0, 0x44008094}, 0x40)

2m35.720355112s ago: executing program 1 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1040}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
llistxattr(0x0, &(0x7f00000002c0)=""/27, 0x1b)
process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f00000005c0)=""/158, 0x9e}, {0x0}], 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000049015590b0000000500800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00#', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)

2m35.303568436s ago: executing program 1 (id=1004):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, 0x0, 0x0)
connect$tipc(r0, 0x0, 0x0)
syz_usbip_server_init(0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/73, 0x0})
getsockname$tipc(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10)
eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20028811)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r2, r3, 0x4)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000, r6, 0x4}, 0x38)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x4000})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x5c}}, 0x0)

2m35.165271971s ago: executing program 4 (id=1006):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x328000, &(0x7f0000000000)="1b07cf", 0x3, 0x0, 0x0, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd25, 0x25dfdbf7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe, 0x2, 0x2700}, [@RTA_EXPIRES={0x8, 0x17, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0xc814)

2m34.296613303s ago: executing program 33 (id=1006):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x328000, &(0x7f0000000000)="1b07cf", 0x3, 0x0, 0x0, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd25, 0x25dfdbf7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe, 0x2, 0x2700}, [@RTA_EXPIRES={0x8, 0x17, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0xc814)

2m33.42299727s ago: executing program 1 (id=1011):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x538, 0x22b, 0x258, 0x538, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x2d8, 0x2f8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x11, 0x64, [{}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}]}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [0x0, 0x0, 0xffffff00], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000b0500"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="2b73562058aa694687b3343e4cb36a0e4f1cfaf5cd8b504ff61c031e3bd734e2fc39417334a3931713dd42b498317ec68876e32e7fd89f61475260f2eb5913f75a20d4993c4b"], 0x4c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000240)={0x1d, 0x0, 0x2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r10 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r10, 0x3a, 0x1, 0x0, 0x20000000)
ioctl$SIOCAX25OPTRT(r10, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56})
syz_emit_ethernet(0x12a3, &(0x7f00000012c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "b97421", 0x126d, 0x2f, 0x1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x88, 0x2, 0x4, 0x1, 0x2, 0x0, 0x455, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x29, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x2f, 0x20, '\x00', [@generic={0x0, 0xd1, "081a79ad22e85cc2b2bd0dfed4f06b0a6b6ca093221ff1cb6310dd33ed21240a4aa8b8d577c3404202f74247b2c422c2fdc7467a5eeda484e60d1958228bcbc800b1368ab01369d50446081cbd10da344bfbbb31c82bf23ffe1144aeef0ace6e4dee610297f9eaf6b500b555208c56e6866f7810d91c23fe4947f6915f2bda2a173f56a9daa1ea50b606631bcd4a273c5767cf24d3d887bd06a2740cd4706c734b26db47175967fa930e5a3332a745029c2ae04948df71f1647134683d1b67903dca63eb6a7c4d8de6a4a9e328c58cd071"}, @jumbo={0xc2, 0x4, 0x7e}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xc}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x7, [0x0, 0x5]}}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc5, 0x3, [0xb158], "401b6c5aa3a37b8c0d498d7a808c077ab93db42998facb50f7d5a9f520f97e5fd975686e570d0acec39f83e60c69ecc2e50b781b85fc38322b6254ddabeae92c40bc6a797796cac2aad004ae8529ca38470253133b2bec91d8e06fff55eb17e0fb0c9ff91d60ed233bd1a5df1d64e2d1310aeee87304f80ce09d3aa5ea77f77b9562f1ed7cb4d8c6c3604b1518dfd1fa54d2d70a9b0d1882617cf71537bc0759fd22e077b19c9e97a6656e1829a6e7955ece99462ab075f0b8796a8a38ef5745fa9987b2e0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x7fff], "bc3bbf5c2cd51703e3"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x4, 0x5], "ea60b4139bd7b8b2200d4253d7b38d3d34d16ab59e80eec606"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x6, 0x3, 0x1, 0x1, 0x0, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0xb, 0x2, 0xfe, 0x1, 0x0, 0x1, 0x2, 0x4}, 0x2, {0x8, 0x800, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, 0x0)

2m31.997043042s ago: executing program 1 (id=1017):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_create(0x0, 0xa)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c3320"], 0xb8)
write$proc_mixer(r3, 0x0, 0xc6)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140))
socketpair(0x1, 0x100000005, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0))

2m30.247941222s ago: executing program 1 (id=1019):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000100d050100000003090400000103000000092153070001220500090581030000000300"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
r6 = fcntl$getown(r4, 0x9)
sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0x6)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async)
sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x9) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000100d050100000003090400000103000000092153070001220500090581030000000300"], 0x0) (async)
syz_usb_control_io(r5, 0x0, 0x0) (async)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async)
fcntl$getown(r4, 0x9) (async)
sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0x6) (async)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) (async)

2m29.572078092s ago: executing program 1 (id=1022):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfe}, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
read(r0, &(0x7f0000000000)=""/123, 0x7b) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (rerun: 64)
ioctl$TUNGETVNETHDRSZ(r7, 0x8004b708, 0x0) (async)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x110, 0x6, 0x0, 0x20000000)

2m29.190938568s ago: executing program 34 (id=1022):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfe}, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
read(r0, &(0x7f0000000000)=""/123, 0x7b) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40501, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (rerun: 64)
ioctl$TUNGETVNETHDRSZ(r7, 0x8004b708, 0x0) (async)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x110, 0x6, 0x0, 0x20000000)

1m47.344281406s ago: executing program 3 (id=1201):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}, 0x108)
close_range(r6, 0xffffffffffffffff, 0x0)
dup(r3)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003280)={{0x0, 0x0, 0x80}})

1m45.81659193s ago: executing program 3 (id=1207):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000400)={0x20000, 0x0, [0x9, 0x3, 0x2, 0x7, 0x6, 0x7, 0x6, 0x80000001]})
syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010003c01c"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x480, 0x480, 0x480, 0xf8, 0x248, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0x118, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0xfff, 0x94, 0x4, 0x17, 0x6, 0x7ff, 0x0, 0x1, 0x0, 0xc, 0x9, 0x200, 0xda, 0x7, 0x7, 0xffff], 0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty, [], [], [], 0x0, 0x2203}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x2, 0x1, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0x11, 0x148, 0x138, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'tunl0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x2000)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, @hci={0x1f, 0x2, 0x1}, @can, @isdn={0x22, 0x17, 0x7, 0x4, 0xb}, 0x4f, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team0\x00', 0x3, 0xbb07, 0x1})
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x8d2ad0b6874c0e49, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x6, 0x7, "c4378b8424ad2b8fd335f78dd314472df4838a624b5e63d5", {0x6, 0x1000}, 0x7})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'})
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})

1m45.135298595s ago: executing program 3 (id=1209):
gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="669a8768281008e122c9cb7b79db77059369877c033da3d0cc420b1fbe788052005b8e97a4ab4690a475f8b458b868a55e5db36e8373dfd03d55086c97b6f19db1f6a9e35c79c156441056dfcdf09f570c919fde9c26bfa4cc8c52a7082f19dd604deb69d02dbc6c", &(0x7f0000000400)="21fd907f0e0c6a2f53e9df4de7870027f5466d3a8b34e58fdb8ba313baf280b60125727bf5af3e2f05a0ea393418a3e99622850105618b24f11ef870944356aa6feae9789a2bb728eb00330d0a8ee13405e7be2c6bc91b7759f03ddb7e7de29281fa7bab4710adcf27d024ceae35ef3980e7e45ce370b9b423ed5da9dd1c200b6fcb2038f390c56037491d8f18f9c168ccdfe8d304ff65eb2c289334448ef0b8039b72f71c7dc35d09bfe29358240fe0235f81d5f9"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x40, 0x10000, {}, {0x3, 0x8, 0xc, 0x5, 0xfd, 0x6a, "254798ed"}, 0x100, 0x1, {0x0}, 0x301})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001100)={0x28, 0x3, r3, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b7ffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x5c}}, 0x0)

1m44.173453357s ago: executing program 3 (id=1210):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2000010}}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r4=>0x0}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r5, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"], 0xb8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

1m44.050708221s ago: executing program 3 (id=1211):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

1m42.392401694s ago: executing program 3 (id=1216):
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x200000008b}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r0, r0, 0x0, 0x30)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}], [], 0x6b}})
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc400, 0x3, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x5}})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)

1m27.049847343s ago: executing program 35 (id=1216):
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x200000008b}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r0, r0, 0x0, 0x30)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}], [], 0x6b}})
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc400, 0x3, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x5}})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)

1m6.69308237s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

56.324483206s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

44.946049774s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

32.862261953s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18.06112501s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11.171060217s ago: executing program 7 (id=1506):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) (rerun: 32)
connect$pppl2tp(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) (async)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async)
r3 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) (async)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r8, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x1, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
accept4(r9, 0x0, 0x0, 0x0)

10.660568937s ago: executing program 7 (id=1509):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) (async)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
getpid() (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000015c0), 0x0) (async)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000015c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x88, 0x31c01, 0xfffeffff, 0xfffffefe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xde})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x6e, 0x1, 0x20000, 0x0, 0x10, 0x0, 0xfffffffd})
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'geneve0\x00', @local})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x20) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x20)

8.519342739s ago: executing program 0 (id=1513):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x40, 0x10, 0xc6, {0xc6, 0x5, "b28f607c95a7f1a961b5f932b9e51607310a89b13d5025a3e1d659b00f3ee39e0ae729dc93034d86f0182fe46f571ac18154b6314fa5d3885b75cdefdfef5cde454176d68c1d782409109be9a043ea97adc041f86454c6f4fd6f1ac48e8a80efd271db8ac7f920c8b310b493082fe9c680cbcab1a16876168ff3fa78c29e51a558b2b64d0157035067a8a1ece2d82bc898d6a5c783bd4e1be7961d9c5e346c8bcf25c07c1771df2818a0fd1de0336acd625a4d25874deb20edfbe641594dd06e1808007c"}}, &(0x7f0000000840)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "12dca9a98df1d42356614ac7c28220e8b8e27cf47e90d9f456410d410a02c103b981e258120b1b5d06db3a7b99f629884ac43e30b71c7aed71e7a4e003c22be829936ac0bf9afcb77a07a0a22d48366256759db0c5f8fa8b38670375417eb3afd67fd389fa0e6fb43517bc3290615a44e2be83a3cbc3fb9f99c8479f6d9488c34db428236615e8cca27f348e3f113c4ddd1288873ce13e8322515e9029a6c015e88b"}}, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe593, 0x1, 0x1, {0x22, 0xfe5}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x9, 0xd, "fb400913944d4bc5b5af140170"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)=ANY=[@ANYBLOB="20015521000006d0fc466fd327c40289c21e13e42b71c602b6a52064c71ee6326304a2f010b899d2450ac4210de3cdd51b23a2ca3d82ba32b1b0e79931a9a08b6c0e4cfcd14559ab246fc1f0def0ecd368e459c5f6b485b0cf78a9"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x5}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000600)={0x0, 0x1, 0xa5, "f29c5c89a129b75a3397dfbb78cc174317fee3d55bce4f045ed089a3f3bf2041991ae0a7184e764cf88729f5c73d8434bf32d96d9d798e52838f40beb024c2796dcdc89ea3fe49bc9e3b9c9226f361baa2e486f2a2aa9a8356e70fc94509bd8feafb261f0464e0183d103eeb6ab2207557a02bb89287a7debe0ef2bdf36d20e2c9891c8c2a31df05c0770bc5308b875c8a20b46a92fb19f9dc2a769e6d80a04a70bec716b3"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x2, ',;'}, &(0x7f0000000540)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000700)={0x20, 0x83, 0x1, "89"}, &(0x7f0000000740)={0x20, 0x84, 0x4, "7618f51a"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "21520f"}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x64, 0x6, 0x6c0, 0x6b8, 0x558, 0x6b8, 0x410, 0x0, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fffffff, 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000), 0x8200, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d00)={0x24, &(0x7f0000000b80)={0x40, 0x21, 0x1a, {0x1a, 0x1a, "cb541482c3ee6f187d59224de5e18b769656321a67cce5ec"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "e67aaac7c7c9f93329563f88530065a77d3650c39090267e005fa71dda97918daf7bb2774917042d45796a53cfb13702f3c6a1bc82d508b5af111245b5ee6d9490981a60127e28ae1cb231c78f99ee8f422f39fb9b920ae689615c2137aca167109024b60d06ede8dfdbf6d5c07ccfe588cd0c39eeffe1a1f591d0fadb7d3f6703bd5b9d342006ee5df0f7fbdbb8708dc71633e3fb40723b8cd8db4c1a8f49f5da53f38b"}}, &(0x7f0000000c80)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0xa, "ef"}, @global=@item_4={0x3, 0x1, 0x1, "58e02dea"}, @main=@item_4={0x3, 0x0, 0x7, "aa6f038a"}]}}, &(0x7f0000000cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x335}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)={0x40, 0x12, 0x96, "2d2b0596ea85acca365cb709bae81af790d08fead2a8d012ca528c3d35d6aeb63faf990c24be5965e68e8b08572605a38f509ed522b5535c52b7596d8bdf5852ae2cad2438967b7c1338c7dbed567dac784c1d1cc8f4ac4c42d2765a56e3e3fbc6fbe842e07ba58342428b7a6eb21d7ab5fa64beaaf583df9c981a90c4bb28d60fdaa0507c0587a8fb51af53e14b3f5193f659e1f53d"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e80)={0x20, 0x1, 0x81, "3951ff3b56a479f210847aeb8aa0c7fea4b0ec46287ba1b377d4862cd464c2517454788924539d2fcc2a8af7b4b65e5f7d56ef9dc22fd87a5599b864de01cb839eda3c92d724e2d8ec513d25b65aa5200490632da9e856499bbeec9e9f88617dcb2b5768634e7b6544a9dbe28685b011e5009c168da0632c07ef384576a9d3689e"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0x7}})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

8.429659623s ago: executing program 7 (id=1514):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@RTM_DELMDB={0x18, 0x55, 0x10, 0x70bd2c, 0x25dfdbfb, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20018042}, 0x0)
mount(&(0x7f00000006c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x204000, 0x0)

8.421719035s ago: executing program 8 (id=1515):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000040)="0e", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x9e, 0xa3, 0x64, 0x20, 0xb49, 0x64f, 0xacb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0xd3, 0x4a}}]}}]}}, 0x0)

8.329392118s ago: executing program 7 (id=1516):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(r0, 0xa, &(0x7f0000000100)={0xf, 0x3}, &(0x7f00000001c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x30, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4})
get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280))
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x25dfdbff, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048004}, 0x4800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]})
syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601})

7.021951899s ago: executing program 8 (id=1518):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x538, 0x22b, 0x258, 0x538, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x2d8, 0x2f8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x11, 0x64, [{}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}]}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [0x0, 0x0, 0xffffff00], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000b0500"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="2b73562058aa694687b3343e4cb36a0e4f1cfaf5cd8b504ff61c031e3bd734e2fc39417334a3931713dd42b498317ec68876e32e7fd89f61475260f2eb5913f75a20d4993c4b"], 0x4c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000240)={0x1d, 0x0, 0x2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r10 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r10, 0x3a, 0x1, 0x0, 0x20000000)
ioctl$SIOCAX25OPTRT(r10, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56})
syz_emit_ethernet(0x12ab, &(0x7f00000012c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "b97421", 0x1275, 0x2f, 0x1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x88, 0x2, 0x4, 0x1, 0x2, 0x0, 0x455, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x29, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x2f, 0x21, '\x00', [@generic={0x0, 0xd0, "081a79ad22e85cc2b2bd0dfed4f06b0a6b6ca093221ff1cb6310dd33ed21240a4aa8b8d577c3404202f74247b2c422c2fdc7467a5eeda484e60d1958228bcbc800b1368ab01369d50446081cbd10da344bfbbb31c82bf23ffe1144aeef0ace6e4dee610297f9eaf6b500b555208c56e6866f7810d91c23fe4947f6915f2bda2a173f56a9daa1ea50b606631bcd4a273c5767cf24d3d887bd06a2740cd4706c734b26db47175967fa930e5a3332a745029c2ae04948df71f1647134683d1b67903dca63eb6a7c4d8de6a4a9e328c58cd0"}, @jumbo={0xc2, 0x4, 0x7e}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xc}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x7, [0x0, 0x5, 0xffffffffffffffff]}}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc5, 0x3, [0xb158], "401b6c5aa3a37b8c0d498d7a808c077ab93db42998facb50f7d5a9f520f97e5fd975686e570d0acec39f83e60c69ecc2e50b781b85fc38322b6254ddabeae92c40bc6a797796cac2aad004ae8529ca38470253133b2bec91d8e06fff55eb17e0fb0c9ff91d60ed233bd1a5df1d64e2d1310aeee87304f80ce09d3aa5ea77f77b9562f1ed7cb4d8c6c3604b1518dfd1fa54d2d70a9b0d1882617cf71537bc0759fd22e077b19c9e97a6656e1829a6e7955ece99462ab075f0b8796a8a38ef5745fa9987b2e0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x7fff], "bc3bbf5c2cd51703e3"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x4, 0x5], "ea60b4139bd7b8b2200d4253d7b38d3d34d16ab59e80eec606"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x6, 0x3, 0x1, 0x1, 0x0, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0xb, 0x2, 0xfe, 0x1, 0x0, 0x1, 0x2, 0x4}, 0x2, {0x8, 0x800, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, 0x0)

6.887286296s ago: executing program 8 (id=1519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
shutdown(r0, 0x0) (async)
poll(&(0x7f0000000180)=[{r0}, {r0, 0x500}], 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x4c, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x16, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x2}]}}}}}}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a0000000000"], 0x1c}}, 0x0) (async, rerun: 32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) (async)
write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80000000bbbbbbbbbbbbaaaaaaaaaabb88a83000655817000800451900140065000001329078ac14142d64010102"], 0x2e) (async)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000200)) (async)
ioperm(0x0, 0x1fb, 0x4)

6.625470958s ago: executing program 5 (id=1520):
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000440), 0x2008, 0xc7f8f0da05baec8d)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x0, 0x1000, 0x500, 0x2}})
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000100))
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000004c0)={0x0, r5, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0xb, 0x0, 0x0, 0x0, [<r7=>0x0], [0xfd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]})
r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000002c0), 0x4)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f0000000340)={0x0, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffff40})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000002c0), 0x0, 0x0, 0x6, 0x0, r9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x40080)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r7})

6.246700395s ago: executing program 6 (id=1167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="190000060200010000000000000000004c120000fe00ff0100000000"], 0x1c}}, 0x40)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x6000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz1\x00', {}, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000dc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f00006db000/0x1000)=nil, 0x1000, 0x4000000, 0x13, r5, 0x100000000)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="66b8010000008b0080c1c123320f32b874000f00d8b8b2008ed0ea87d08a00660f78c69a0b66b9980300000f3265260fda6e00660ff7e5", 0x37}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='>\r '])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.996982103s ago: executing program 0 (id=1521):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0)
fchmod(r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)={<r6=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080))
close(r6)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001000))
socket$kcm(0x29, 0x2, 0x0)

4.988161416s ago: executing program 7 (id=1522):
r0 = io_uring_setup(0x11eb, &(0x7f0000000180))
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
timerfd_create(0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.976107524s ago: executing program 5 (id=1523):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfd324000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="d8dc626fb8ae038c1a2ddba312aa562570f3b9e7c8f60a46dd89ac3935442bca8d619f4e2d5a7491912cbb70609585588cb9acfde06ad63aa564fa190c64faf9437b21f043f41e465e1ae8db307354", 0x4f}, {&(0x7f00000003c0), 0xfffffe80}, {&(0x7f0000000200)="09a939a33adcebb03c3d5e22e2d3f32fd548458f33907b3250944cbb7c97386a76cf", 0x2}], 0x3}, 0xc804)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110feff0000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pread64(r5, &(0x7f0000000240)=""/231, 0xe7, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, 0x3, 0x0, 0x30)

4.916542012s ago: executing program 8 (id=1524):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
setreuid(0x0, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd}, {0x0, 0x7}}}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8)
r4 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setresgid(0x0, 0xee00, 0xee01)

4.216327642s ago: executing program 0 (id=1525):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x27a)
write$qrtrtun(r2, &(0x7f0000000180)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250a", 0x1f) (async)
r3 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x1, 0xf7, 0x9, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x0, {0x18d, 0x0, 0x74, 0xfff}}, 0x20) (async)
write$binfmt_script(r2, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, '(\xe3-'}, {0x20, '\x00'}, {0x20, '-\'\'%:{'}], 0xa, "2fd06f78020000000000000064f5b1ec34736b31bfef73580a19f077bad356ed59be45eb7965bca3d6ef247f7413d0da176e112bcdcc0749bb2fc42afdc5129288772193b83ba9d94ec506bd5e72d63dff0300fa9cdba1b61e3565b328755d3929f4ca0867c7805f5fb0c7cc02fb700e3b628bd73c7c3f9240794de265e1a1cfd297d65a7b5c7fab18339989a21a8f1b34ecd64c2fda6f2fbd57301c5b2f0a7166220f7498b0c80a15652cb3c245a665a966f96d956aead7f64e34dab0fe61719ce5dd6ea1ecb22118ef09547648fc899099a2849e51539785a8a128f3a890cd112898c297b427447e15f28dfd08dad8c8d588a6e12b3ed0885798306b478ec241b20ff6113d3204b209e68582a2a0ad83d0e9bb076995cd1e4f2caf55ed6a639e0fa39f2b0af03fedb95e8e0977be33eb1207d0743109cc0a5f674ac19f7cdd5e9a39fbf697b37d886a61159dad490c1f0e47d19dbb6860c0cd9d3040d40f686341bd84a855942a4754eb55ef2b3c34bff013aef9f9efe3bfafadc89338137622"}, 0x199) (async)
write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {<r7=>r4}}, './file0\x00'})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x10ffff) (async)
write$binfmt_elf32(r7, &(0x7f0000001240)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x5, 0x0, 0x4, 0x9, 0x3, 0x3e, 0x0, 0x3bd, 0x38, 0x4c, 0xfff, 0xda3b, 0x20, 0x2, 0x8001, 0xa, 0x7}, [{0x6474e551, 0x5, 0x8c, 0xb, 0x9, 0x7, 0x9, 0xfffffbff}, {0x2, 0x9, 0x4, 0x5, 0xffffffff, 0x1, 0x1, 0x82f}], "b848c069ef99c99f59c146d83df5d8a4ebf2f1087deaba2c2102046fd21be1dd05518c70a0e13009799e7652df1e768110efa02e5bfdd403687a8d58b0a0dffcb133a2a4fc6a7c781daa59d7bfee961e2bf166a01714897eb036b4fde1561321672646e5ff43ee5377dc24882ed9690dcf69a470587b81f8a7647a106b7fb28d9202", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xafa) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0x4}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x26}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) (async)
write$qrtrtun(r2, &(0x7f00000003c0)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3fc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649a03003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d0400a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5ac2a", 0x277) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

4.111075995s ago: executing program 8 (id=1526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000cf9ab26bcee96c0000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ftruncate(0xffffffffffffffff, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r2, &(0x7f0000000040)="0b11", 0x2, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xe0440)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10)
io_setup(0x3, &(0x7f0000000340))
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000000))

4.025956053s ago: executing program 5 (id=1527):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x223404d, 0x20, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b22, &(0x7f0000000040))
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22)
r8 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3.751108611s ago: executing program 0 (id=1528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"24783e245402fd60273e14c3eb090723ac476c7538b5ea19588c28b06516b72c6d73315762a6555c17a6d5554aaacc942d2328f17bd1c1121342c854847f3de3f12ce9d138093f6a5df3c89a72cb4e7b08827e473a39dffaab7929106845137921fc23a872ad3bf6cfcecbab32d6936e26f52c5ad8b0afd9102d54eec650987b229e64deac8e9aaa9c38229a701259d2b4211012b3eee1d382e7fce9a55a45cc4fab7878d594718a47681c915f7fd7c502d1099140cc71538582497de53482f60ec3e66f21cab92485ed154f7283e05539487e211cf750c461ef2c76315064df74415bcdfa867d8b27fa63b3bba3230a1a9605d3091204dba17ca4b55d4f721607521f5e45c791bb45de35eb1917c1e9c1f65bdcca8822a03a1d2ef1118681e258c7e20e8bbdbdbae0b2d015d019428cc9742e92151bb7c4b2b0a36b9042249028b7b2a068b87b9dfbdd8dbd4b7e4e74801b9e2e4e112462ed6f14e2196778e27c041a3c7f6bcbf0ff4d30f692af0c8d160414d4e22427bafa7a8c2f6c8bd9883a3b70aa510654a5441343489d94ee314da0f3886e76b43c028e47138899d2ba84776eaf60da2f8340169152b42df69eb0f583d5cc986112b23650d1d8ed7310a445db4be5cd9918bb5a806a2c7ae870f3b4b1ac46dc42cbe74b51b25da2805d72b61493bdc2e04e4477978b40fd9a965bfa742224adeaae6277f57ad0b695d997a2239c2fd46eb430df27849b1a65d92e1900a1e48225f94f737f9d8c5284f2205df5732afd59bd0b3b1934c7db1581ec4684c3bcd5381e0e3be00cdfc21ba691c45c4537e9690708b68fa700814d27cb50df2b1be14a7a3e3981d6c6044a73ecbe40f2304b724ba10133ffec218b242ae97a52f16984247c28fe950d49dc7900475b777b37813e61d0cfd6da391f07ab622dec7b121967e80d67c8c7db77e05e37712b92aee01230ca29badfd714db3c03bea8e840d5dafc6a27fa98c7a6179ad39df582088e31e17ee283a76c5c9a05d0a0b4fc95a6aa46104947bac4f50b0e57925e3be186df0409e5c2c5b775347e83c9c8829e95623541603ce68589e942d3724ab7963731167f0954faa87b98aba0336469a127f3377a5d0cb91d11749d1489226c9da6abe765c2f1206ca7be3b9f7e116b7bc1baad37b14b842cbb89c348147e493a615f1972ef9baf03cc353c979865573bc40b84ac6cecf673985479ebaf24f2ad9d905874249bed88ed0c69479a0a7b53ecad68cff344866d03e4eb0cf80610af2465d64d3dceaf4fd6a5ee2eda719233fb33ef043b6019fec948bf5d0295a4f7af154475cbb3461650f7fcfc66c03db610ce8244ad432157ba91df573f3e13b430d4272d60b9a9a454bc1cafa87f1aa9c289ab6dae4f0e81f496d6767bf1bb503aebbd8a58e7dba9f643ab02e000d5f01e896e4c1d6e5b9771faacec322aa2b121d679c7941469dc233adfc5a83fe218a8ea686750e1426eb81fdd86ec193102bae34eb7e48986a18d05284ec1cffeae698ef739181f94a0c91a754f333cd44bc9053144c3f1491fc31684376a382b33e8c3d70eedbf5245dc63d86033c739c6f0f4ebab3007075c4dc66d7a8c93a718a7ec03d811b0ee727b0e695ebbc507d410f7e88204bb209beeef2b6fd0b4db48cd33a0b6591d91caf6676a4a74125afc3a04ea7eac3ce2662694999e891e77ef72ee4ec64b92b8918a3cb53cee960caf02b2cfb5449a64ad7ce57a5aa931a898d8adfc25c36d03861d5504772624b69ce823597b4488882e88a0f90362f604d4b722f9255220c3528a547b1c2d73aeb6034e549706fc467072adfd6a951b6a788b1e40a0c12cdc10f4be0e7cbb2b47704a8a684aeaf74d9e08bef07e3be8aed8ac00f398ff9f4e7cac9c5dbaadfdb0858d6d98dcfbddd609d5489e3f18b5db69aeff479281a976d30905eaf78121cf6365ff43e063e768cddd88040cc49c6961ba276f48b7e92419d0eadbf79cf8304ec48f51c5ca311d9530b6ade8702640c88ebe2f99ce88e8dc25b1373fee1aee3ca8e6a5905209205e0033ff02afcb4d1e08bfb0566ba2b07abaa07f48c37ccc147fcb627262391aa59df48450476aeaf85c6b82c3faca07679268f27260bae1ccfeaffa3af472bdd92c0b84dee9b857b2d0d72895db5e87527747fefb9906eeb4e9fc98c5d89937134a8650e1dc6a2abe84859302da2854000152043da9a8d09b4cb34ba15a6bd031cc116db6fbd5d50afaf6f7169af9794235de346b70f638e8c46a8a4c80da4844c0589e3eba83eecf0efcbab54b577448038134d169bb66fd4028c7dba7eb869a0de8ca9337633a784dcd6693c2a55621ecbb0ef025f69f234508df53d23e8bb11ff9399dc79aa79adcbbc969e55ed2e7b0a606e024457209cec002f38b18a7abf2aae9a178194ed70080f59350a44ffdc1d89332cae9923e13f36ae05d73fffd41281a0cdc6a95740082a3742350ab95b4065340154e3efaf044ee867e1b66f656bdd8c2273c03aeff9f655457863cb3419656f8f144b592b6ba56d4d2bdc4aee710e5871a10f560a237c3e357902ac150ffc23f78e81a2c71543bd89c3ed6d1e57cacae6f5141a84849d90e0e5df1ee86d18993dbb272bd2d54713c9f222802e22ee2976174caf00abe8fdd6d432dd2993b74cbb16839f11d6393c1b291c7e7f509ecc9edd433f21b80c8890883fb7b591c6486be7ed48402b618518b10445edfdc3a4ad8d3ce4b2439a1def220ba384e7cb3e69b782035087598c546bc68a72f4fe51e95ffae21091552849d02ebb1b0dda26bc3477cb3d74360587bb8712d85c6e458cf334b4c65823c22ca818dd0e81d20b6050cb8590452486ea641e6dc4c61efc3675517cdb820debd0f66f78ca88efdc6dc1679ab95a52fb85d78e43de6409805c43f63bd516610c17782377f4e6659a803e725742c05aa251d7236c8b5d45009aa62e17697f31735a3a3a56839d8ef0d68501d3f584283ce80cc371dfa0ab0724c3265429456ea4c9a27759f49e02a7b9d5028b4eda3836876a4567758ea1d5136db27be77b1656de90792c939fa3e9572bd6f7fa6662223f4d8b5c88cc7d3605b9489cf7afacdb34b04527a3d1448ab4011bc92b5ae8521b93b657a90ecba6e6a89472e31c22ae31cbb046c2964204ed9fcfcef49d0f1f96f239cf9997b70d9cffdbfca813dd723fed1d95ee994b6094e6e57905544d60e605533acc921bae751aca79515cdbb2dcc7828968252421308d95fe68dbb136ad5b611ea37912f75df2aee792b8a387f5cad76a6157a7363ef567d77b1bc476d35768079a868733513985b26f7cf79ce76c807eace09146558e85dd1bb867996500a99fc26129a16496bff1ddebd97db54bd7f78b35003a1b702c51bfceb2abc0a5fd55cb02f67458c93b0cbecb086dbf8a066a7771b29953a50089812b28901acc0d97845e6a9ade6b366b8c880753080e6c73c99165aae12ce51b723ec366cd6730634a81fabaa1f0b01c750458bf365e60dfeb605b86bd7a37b6492c483dd74e3a2fa6d152d0e230cee186f1259f97d6b9ff615fe012f58a382c2809a8e63334230b93b24de8fdd1dba7bc9f623c82f1a8e81287d08555f71e2af0aad9202e9352058e66771d813b7fb68fce040b06cc168c2c7d9fcf3bd5cdec5bd8ce2b338cedbfb6cfad342973aa2e2faedde11efc2466896c81f7842cbf25f78403e1f0f5ca5544cbecd7bba70b616f29a4388fc4896428a23d8772dc21794c20d76f55439fa66b94c56c7e01ac016820caca23f42de23c309d86b2cb207dcd096d6a44d2f681c7bc725d3f81cc6a08c2ae82ca55228125034f312fe04f2befb4c4ef6fcb803c1474988a7e07810e60d0d38d1934b135015d39b49fa48bfee6ad4ad0298bc5e66e8d357ee47fe61f215f7326de507addbf4ababa0cb928c947e91354ed232332cbde85e5dc3e173fdbc4d4dd96786bd6dce83cf1ea099b06f2a4f18dc0394951e6ee2eb72dfa6a013713590aebdeda149bc06b64ad40fa64538edd9afd408bb013d38b3cbf17c265f0295b0e085112dc490230322b1eecaf727d0fc3e67226e0f8a50af7025e960072c336d0a9838f328a68ed1d6551a5743d10504193f0e32ced3ba98b8a21b3c431efb8dd3a2cadf10e12daf461d5d9171d2ca7ae218c0bb868c363feb0487d8ffac4a654c6c551a3725902c7ebc55ed822605c039363f4e4e24ea4b3d7dfd21d07c9228a3b37c31b7124aea3faaa5930dd138ca433069a7c3807c1828dcab13ab9ff0afa6a3ff63d5811269913e4f9774a59ff9df2dbe7ff2c29e599253324b5514f4c2b634996fcd421797712b159896e9f3ba234d6ebb658c792dee2aa26001b5b6427dc311924b24264ec2155a0a32d8f51205925fe80e5fea15d957c327165791e7571b74fed1003e680b6f743fa6fa91f8e423b5cb68e86eb2e13f6b6a94ee4b992b59f6a4978d93a60ee207986bb5be365740b990d98f1866e58d5182532312b570daa8d1f9a8d0ae551480e0fad001aec5a17dc64b0ab5704780c0408b5fb1dc69a55f29514facae81b7f6e6503fea6a75a912a966f6f20ce7ee726be01c698ebd81cd81d972fd6278ff9591e4def2877cdcaee3ea046911cb5a6abc16197eda0a850f8c6acd59e845dae487e4427694fdd50b1bdf9da7e662ad05ef239e8ecb9e3156d1cf27b6b0579745f046a163eabf6e385bb617cbbf77e93bfba6a422c44d6e60bfd03928c32837e991cad562b8db3a21777b1f7b1496c1774d202a0b63f80d3f3bdcba0b8ae06ce357a6a88de0b98a4fa0bcba5e9b2cece271fbf4476b606ae02299ecb88d527af0db95e306279dc0ee14127a780586b4821b0aa0456df345e1034de046623bf53496ba41fdc2897996a90e315b9c9fd23be0e38f80e233d7cf42566e0ed721364bb8685b5bef438c136fb3a2fe1cd36a18fe1384adf503ae9c3a50f5c7c8610145b63de52183ceccb49b55940ab504943cd8b0df6bc52a47bbbec418b4af2f29ebdc8fe09460f2ca409519a10c45ecccb3e3342ea8c30152ef43416fca25a2b79b8815295fc802dd80a5f6ba72f32e54b8166dd8c9079d3ba0f06e00020b691d7d49cdde6e65f5b61624404d52509fd34a9430bb85085bda9df7f98d890d53e559ebf3c024ea90b68c32fe7b149ddd12b7386c9a6b441453f91ce3d351d0c64185795befae6bb9ce2646af1319a6b8f4daf1904c2684ebae533a3939c83b1be1bfb5f3ffb34b00532df06337f520bafe1c4bee4c2854ddfd7867a94c9a660c1311e1da75876406e8a2372bc521ef178ca0e0a6b3f587493a31aafc46490dfedb0283b3d2ba0536bc3f76ca685cad56b28499da509a925d769dad43264260ca857436a8b28e3067a70d07c87988fb30f069773b40bcfe0552f392e5c5508efde3b303231f991d6c14fc5639347bb11315237ba57fb81d4acf5f5a17f31debf3c3e6acf45f5f46e34b1f8af4d712cd65d4da93634bb878eb044381f29935972b835b2fd7a75082dd67f67c94a073ebba59d57c8a828cc21ce7875c5ab42b6b342303fddad0852ab24caeaf33af93c9ba023d2b1e7eb4fcd91a8ef680d7d641dea186a5c7f20401be0c26ce5ab44d5efd932ee0dfff62ab58408e0aaa6ec1d68c9d56c3f47c2ce2df2c9e342208e8c653ef850dd622e1e7cfe70b3b23e353746a076736c3addb9247384e4424754ccfc181f60c24f940ae4b17bf8c5710cb97a28b493edad712240bf420acdf9fc2e232056558c62894c10836ea6476d751", 0x1040}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
llistxattr(0x0, &(0x7f00000002c0)=""/27, 0x1b)
process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f00000005c0)=""/158, 0x9e}, {0x0}], 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000049015590b0000000500800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00#', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f000000080003", @ANYRES32=r6, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

3.12047155s ago: executing program 0 (id=1529):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
eventfd(0x0)
syz_io_uring_setup(0x1b75, 0x0, 0x0, 0x0)
readv(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20)
socket(0x10, 0x80003, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf}}}]}, 0x48}}, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)="719021b996bc9b", 0x7}, {&(0x7f0000000440)="b42d", 0x2}], 0x2, 0xc)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d0102030109021200010000"], 0x0)
syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0xe, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0})
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001f000100000000000000000005"], 0x114}], 0x1}, 0x0)
splice(r6, 0x0, r8, 0x0, 0x7, 0x8)

3.095785113s ago: executing program 8 (id=1530):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
prlimit64(r3, 0x9, &(0x7f0000000240)={0x5, 0xd657}, &(0x7f0000000280))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000080)=0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x0, &(0x7f0000000300)={0x2, 0x80000000})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x18, 0x21}, 0x18)
r9 = openat(r8, 0x0, 0x1, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, 0x0, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
dup(r4)
ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000003280)={{0x0, 0x0, 0x80}})

2.494759771s ago: executing program 36 (id=1530):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
prlimit64(r3, 0x9, &(0x7f0000000240)={0x5, 0xd657}, &(0x7f0000000280))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000080)=0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x0, &(0x7f0000000300)={0x2, 0x80000000})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x18, 0x21}, 0x18)
r9 = openat(r8, 0x0, 0x1, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, 0x0, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
dup(r4)
ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000003280)={{0x0, 0x0, 0x80}})

1.900615743s ago: executing program 7 (id=1532):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x8)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rcu_utilization\x00', r1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rcu_utilization\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
waitid(0x2, 0x0, &(0x7f0000000240), 0x2, &(0x7f0000000440))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) (async)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000500)={0x81, 0x51, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb})
socket$key(0xf, 0x3, 0x2)
syz_usb_connect(0x2, 0x6b, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESHEX=r2], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x19})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
semget(0x3, 0x2, 0x284) (async)
r4 = semget(0x3, 0x2, 0x284)
semctl$IPC_RMID(r4, 0x0, 0x0) (async)
semctl$IPC_RMID(r4, 0x0, 0x0)
r5 = semget(0x1, 0x3, 0x204)
semget(0x3, 0x1, 0x654)
semctl$IPC_RMID(r5, 0x0, 0x0)

876.336228ms ago: executing program 5 (id=1533):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @broadcast}, 0x46, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='caif0\x00', 0x7ff, 0x571d, 0xffff}) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x2f, @private=0xa010100, 0x4e24, 0x1, 'ovf\x00', 0xd, 0x10, 0x24}, {@broadcast, 0x4e23, 0x4, 0x81, 0x9, 0x3ff}}, 0x44) (async)
getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r2=>0x0, 0x29, 0xb7, 0x2, 0x1ffe00, 0x7ba138107b656933, @loopback, @local, 0x8000, 0x40, 0x80, 0x7}})
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delqdisc={0x7c, 0x25, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7}, {0xc, 0x5}, {0x9, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x9, 0x6, 0x0, 0xf, 0x10001, 0xfffffff3, 0x4}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x40081) (async, rerun: 64)
r3 = socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 64)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x53e, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe15}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x27, &(0x7f0000000540)=""/39, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x9, 0x7ff, 0x80000001}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], &(0x7f0000000640)=[{0x4, 0x5, 0xb}, {0x0, 0x5, 0x5, 0x5}, {0x3, 0x2, 0xb, 0xa}, {0x4, 0x2, 0xf}], 0x10, 0x9, @void, @value}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000740)={r6, r7})
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x0, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f0000000780), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1a, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x66, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x5, 0x3, 0x5, 0x1}}, @common=@icmp6={{0x28}, {0x16, "d0cc"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x6, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6, @gre_key=0x1}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xff000000, 0xff], 'veth1_to_bond\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x5, 0xb, 0x3}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x80000001, 0xbbbbe3b4d296f0fe, 0x0, [0x8, 0x9, 0xa, 0x8, 0x4, 0x80, 0xfffb, 0x7ff, 0x5, 0xf93c, 0x6, 0x8, 0x2, 0x7f, 0x7, 0x401], 0x7}}, @common=@dst={{0x48}, {0x2, 0xf73399b6b33e631d, 0x0, [0x5, 0xc, 0x3, 0x6, 0x2, 0x7, 0xfff9, 0xb115, 0x100, 0x3, 0x8, 0xc, 0x5, 0x4, 0x5], 0xe}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x6, @ipv6=@private1, @ipv6=@empty, @gre_key=0x7, @gre_key=0x9}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0x712792a9efa2b507, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffff00], 'bridge_slave_0\x00', 'veth0_vlan\x00', {}, {}, 0x33, 0x1, 0x6, 0xa}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@empty, @ipv6=@local, @port=0x4e24, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async)
r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000e00), &(0x7f0000000e40)=0x10, 0x80800)
bind$phonet(r8, &(0x7f0000000e80)={0x23, 0xa, 0x3, 0x8}, 0x10)
lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r4, {<r12=>0xffffffffffffffff, <r13=>0x0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001080)={{0x1, 0x1, 0x18, r4, {0x0, <r14=>0xee00}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r15=>r3, {0x0, <r16=>0xee01}}, './file0\x00'})
setgroups(0x9, &(0x7f0000001100)=[0xee00, r9, 0x0, r10, r11, r13, r14, 0xffffffffffffffff, r16])
r17 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001140), 0x1110c0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r17, 0xc018937b, &(0x7f0000001180)={{0x1, 0x1, 0x18, r8, {r12, r9}}, './file0\x00'}) (async)
syz_open_dev$loop(&(0x7f00000011c0), 0x42ec, 0xcf9c3927817d992f)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x369c, 0xffffffff7fffffff, &(0x7f0000001200))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r15, 0xc0189378, &(0x7f0000001240)={{0x1, 0x1, 0x18, r6, {<r18=>r4}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r18, 0x84, 0x7c, &(0x7f0000001280)={0x0, 0x5ae, 0xffff}, &(0x7f00000012c0)=0x8)

785.623046ms ago: executing program 5 (id=1534):
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
mknod(0x0, 0x8001420, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40003fa3", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0002a0a000008009f000d0000000800260094090000"], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_mreq(r4, 0x29, 0x1, 0x0, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000240)=0x8)
fchdir(0xffffffffffffffff)
write$cgroup_int(r5, &(0x7f00000000c0)=0x1c3, 0x12)
syz_emit_ethernet(0x36, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
poll(0x0, 0x0, 0x6)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x15, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
syz_io_uring_setup(0x94a, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

481.565224ms ago: executing program 5 (id=1535):
r0 = socket$inet(0x2, 0xa, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000150081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407900060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, &(0x7f0000000640)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="001305"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0)

0s ago: executing program 0 (id=1536):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082da76", 0x4, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000600)=0x30)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1934}}, 0x0)

kernel console output (not intermixed with test programs):

ng to 10
[  385.981873][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  385.995345][  T973] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  386.029278][ T7872] team0 (unregistering): Port device team_slave_1 removed
[  386.057442][  T973] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  386.075547][  T973] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  386.094898][  T973] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  386.109488][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  386.120504][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  386.120730][ T7872] team0 (unregistering): Port device team_slave_0 removed
[  386.131767][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  386.150447][  T973] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  386.165754][  T973] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  386.175623][  T973] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  386.184936][  T973] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  386.196642][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  386.215111][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  386.254398][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1306'.
[  386.256055][  T973] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  386.276824][  T973] usb 1-1: string descriptor 0 read error: -22
[  386.294520][  T973] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  386.304319][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.336812][  T973] adutux 1-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  386.593346][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.614826][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.640888][   T29] audit: type=1326 audit(1733690937.260:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.685593][   T29] audit: type=1326 audit(1733690937.260:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.717651][   T29] audit: type=1326 audit(1733690937.280:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.744902][   T29] audit: type=1326 audit(1733690937.280:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.780766][   T29] audit: type=1326 audit(1733690937.280:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.813372][   T29] audit: type=1326 audit(1733690937.280:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.851271][   T29] audit: type=1326 audit(1733690937.280:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.889998][T10942] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.897154][   T29] audit: type=1326 audit(1733690937.280:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.923296][T10942] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.931905][T10942] bridge_slave_0: entered allmulticast mode
[  386.939524][T10942] bridge_slave_0: entered promiscuous mode
[  386.956139][   T29] audit: type=1326 audit(1733690937.280:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  386.983909][T10942] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.991190][T10942] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.998493][T10942] bridge_slave_1: entered allmulticast mode
[  387.005442][T10942] bridge_slave_1: entered promiscuous mode
[  387.012151][   T29] audit: type=1326 audit(1733690937.280:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  387.042674][   T29] audit: type=1326 audit(1733690937.280:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  387.066392][   T29] audit: type=1326 audit(1733690937.280:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  387.132868][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.143358][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.177873][   T29] audit: type=1326 audit(1733690937.280:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.0.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6b437fed9 code=0x7ffc0000
[  387.201206][    C0] vkms_vblank_simulate: vblank timer overrun
[  387.247852][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  387.355570][T10942] team0: Port device team_slave_0 added
[  387.395968][T11022] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  387.406347][T10942] team0: Port device team_slave_1 added
[  387.494874][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.502192][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.535412][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.574740][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.581993][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.613841][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.629470][ T5895] usb 1-1: USB disconnect, device number 54
[  387.763053][T10942] hsr_slave_0: entered promiscuous mode
[  387.773899][T10942] hsr_slave_1: entered promiscuous mode
[  388.251050][ T5895] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  388.291752][T11043] syzkaller1: entered promiscuous mode
[  388.302828][T11043] syzkaller1: entered allmulticast mode
[  388.397561][ T5895] usb 1-1: device descriptor read/64, error -71
[  388.404657][T11051] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1317'.
[  388.621489][T10942] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  388.635204][T10942] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  388.644901][ T5895] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  388.665898][T10942] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  388.686272][T10942] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  388.729798][T10942] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.746074][T10942] 8021q: adding VLAN 0 to HW filter on device team0
[  388.755547][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.762607][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.776880][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.784024][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.797520][ T5895] usb 1-1: device descriptor read/64, error -71
[  388.895692][T10942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.907886][ T5895] usb usb1-port1: attempt power cycle
[  389.019849][T10942] veth0_vlan: entered promiscuous mode
[  389.029085][T10942] veth1_vlan: entered promiscuous mode
[  389.048376][T10942] veth0_macvtap: entered promiscuous mode
[  389.055756][T10942] veth1_macvtap: entered promiscuous mode
[  389.068138][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.079492][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.089500][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.100134][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.110027][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.120559][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.130435][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.141344][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.151272][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.161740][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.177184][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.187809][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.198909][T10942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.210743][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.221310][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.231739][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.242189][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.252018][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.262610][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.273607][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.277403][ T5895] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  389.290414][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.301633][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.312247][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.317855][ T5895] usb 1-1: device descriptor read/8, error -71
[  389.322250][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.328532][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  389.345821][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.403374][T10942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.415301][T10942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.424302][T10942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.433182][T10942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.442264][T10942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.522893][ T7871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.545212][ T7871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.570129][ T7872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.578325][ T5895] usb 1-1: new low-speed USB device number 58 using dummy_hcd
[  389.588457][ T7872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.618137][ T5895] usb 1-1: device descriptor read/8, error -71
[  389.631576][T11075] overlay: Unknown parameter 'overlay'
[  389.737660][ T5895] usb usb1-port1: unable to enumerate USB device
[  390.452885][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1325'.
[  391.751010][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1327'.
[  391.914232][    T9] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  391.939835][ T7871] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.099660][    T9] usb 1-1: config 0 has no interfaces?
[  392.108380][    T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  392.117700][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  392.125704][    T9] usb 1-1: Product: syz
[  392.129893][    T9] usb 1-1: Manufacturer: syz
[  392.134486][    T9] usb 1-1: SerialNumber: syz
[  392.197527][    T9] usb 1-1: config 0 descriptor??
[  392.410541][    T9] usb 1-1: USB disconnect, device number 59
[  393.039792][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.050948][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.080803][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.092684][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.100236][ T5141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  393.107915][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.360350][T11122] chnl_net:caif_netlink_parms(): no params data found
[  393.505477][T11122] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.520309][T11122] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.544178][T11122] bridge_slave_0: entered allmulticast mode
[  393.566015][T11122] bridge_slave_0: entered promiscuous mode
[  393.593488][T11122] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.614610][T11122] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.633372][T11122] bridge_slave_1: entered allmulticast mode
[  393.649626][T11122] bridge_slave_1: entered promiscuous mode
[  393.703912][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.717147][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.774669][T11122] team0: Port device team_slave_0 added
[  393.798264][T11122] team0: Port device team_slave_1 added
[  393.840769][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.848036][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.876295][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.891317][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.901027][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.974329][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.021708][T11122] hsr_slave_0: entered promiscuous mode
[  394.028072][T11122] hsr_slave_1: entered promiscuous mode
[  394.034136][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.048099][T11122] Cannot create hsr debugfs directory
[  394.145818][ T7871] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.333525][ T5141] Bluetooth: hci1: failed to read key size for handle 201
[  394.341499][T11143] netlink: 'syz.0.1336': attribute type 25 has an invalid length.
[  394.350122][T11143] netlink: 'syz.0.1336': attribute type 7 has an invalid length.
[  394.373450][ T7871] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.549849][ T7871] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.706676][T11151] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1337'.
[  394.813827][T10730] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  394.987634][T10730] usb 9-1: Using ep0 maxpacket: 32
[  394.997124][T10730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.031556][T10730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.042410][T10730] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  395.084661][T10730] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  395.113951][ T7871] bridge_slave_1: left allmulticast mode
[  395.133417][T10730] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  395.158722][ T7871] bridge_slave_1: left promiscuous mode
[  395.164405][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.167846][ T5141] Bluetooth: hci2: command tx timeout
[  395.186650][T10730] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  395.212445][ T7871] bridge_slave_0: left allmulticast mode
[  395.245691][T10730] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  395.405793][ T7871] bridge_slave_0: left promiscuous mode
[  395.423966][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.475206][T10730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.483425][T10730] usb 9-1: Product: syz
[  395.491871][T10730] usb 9-1: Manufacturer: syz
[  395.500124][T10730] usb 9-1: SerialNumber: syz
[  395.723250][T10730] cdc_ncm 9-1:1.0: bind() failure
[  395.731330][T10730] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  395.742370][T10730] cdc_ncm 9-1:1.1: bind() failure
[  395.760705][T10730] usb 9-1: USB disconnect, device number 3
[  395.882037][T11170] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  396.009972][ T7871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.020124][ T7871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.031036][ T7871] bond0 (unregistering): Released all slaves
[  397.024338][ T7871] hsr_slave_0: left promiscuous mode
[  397.048205][ T7871] hsr_slave_1: left promiscuous mode
[  397.054826][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.057434][ T5865] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  397.062718][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.096549][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.107779][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.156562][ T7871] veth1_macvtap: left promiscuous mode
[  397.162525][ T7871] veth0_macvtap: left promiscuous mode
[  397.174850][ T7871] veth1_vlan: left promiscuous mode
[  397.182036][ T7871] veth0_vlan: left promiscuous mode
[  397.197471][ T6886] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  397.257453][ T5141] Bluetooth: hci2: command tx timeout
[  397.259227][ T5865] usb 6-1: Using ep0 maxpacket: 32
[  397.285260][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.300999][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.310827][ T5865] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  397.319981][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.329790][ T5865] usb 6-1: config 0 descriptor??
[  397.354225][ T6886] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf
[  397.363471][ T6886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.372383][ T6886] usb 9-1: Product: syz
[  397.376578][ T6886] usb 9-1: Manufacturer: syz
[  397.388600][ T6886] usb 9-1: SerialNumber: syz
[  397.410320][ T6886] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  397.419209][ T6886] dvb-usb: bulk message failed: -22 (3/0)
[  397.451774][ T6886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  397.486691][ T6886] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  397.505149][ T6886] dvb_usb_umt_010 9-1:1.0: probe with driver dvb_usb_umt_010 failed with error -22
[  397.540669][ T6870] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  397.660739][ T6886] usb 9-1: USB disconnect, device number 4
[  397.710355][ T6870] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  397.727716][ T6870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.735769][ T6870] usb 1-1: Product: syz
[  397.745586][ T6870] usb 1-1: Manufacturer: syz
[  397.776090][ T7871] team0 (unregistering): Port device team_slave_1 removed
[  397.835670][ T7871] team0 (unregistering): Port device team_slave_0 removed
[  397.926389][ T6870] usb 1-1: SerialNumber: syz
[  397.955830][ T6870] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  398.325302][  T970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  398.380148][ T5141] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  398.388786][ T5141] Bluetooth: hci1: Injecting HCI hardware error event
[  398.397854][ T5141] Bluetooth: hci1: hardware error 0x00
[  398.762693][T11212] netlink: 'syz.0.1355': attribute type 4 has an invalid length.
[  398.855639][T11122] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  398.876288][T11122] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  398.885219][T11122] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  398.911949][T11122] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  399.014352][T11122] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.038589][T11122] 8021q: adding VLAN 0 to HW filter on device team0
[  399.048740][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.055826][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.071088][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.078273][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.227624][T10730] usb 1-1: USB disconnect, device number 60
[  399.243752][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.337516][   T54] Bluetooth: hci2: command tx timeout
[  399.470702][T11122] veth0_vlan: entered promiscuous mode
[  399.493275][T11122] veth1_vlan: entered promiscuous mode
[  399.532374][T11122] veth0_macvtap: entered promiscuous mode
[  399.551940][T11122] veth1_macvtap: entered promiscuous mode
[  399.572575][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.594311][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.604258][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.614830][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.626038][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.636641][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.658039][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.670639][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.680607][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.691353][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.701216][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.712437][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.723779][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.742527][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.753344][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.774841][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.795769][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.817149][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.841612][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.857491][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.878124][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.887970][  T970] usb 1-1: Service connection timeout for: 256
[  399.887991][  T970] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  399.891324][  T970] ath9k_htc: Failed to initialize the device
[  399.923364][ T5865] usbhid 6-1:0.0: can't add hid device: -71
[  399.936729][ T5865] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  399.957824][T10730] usb 1-1: ath9k_htc: USB layer deinitialized
[  399.959985][ T5865] usb 6-1: USB disconnect, device number 40
[  399.965403][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.982261][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.992813][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.003515][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.016127][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.089968][T11122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.099379][T11122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.112509][T11122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.121271][T11122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.460118][ T5141] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  400.468801][T10730] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  400.677571][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.685706][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.703025][T10730] usb 1-1: Using ep0 maxpacket: 16
[  400.706603][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.726316][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.734801][T10730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.757795][T10730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.773317][T10730] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  400.782471][T10730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.796341][T10730] usb 1-1: config 0 descriptor??
[  400.863673][T11240] veth1_to_hsr: mtu less than device minimum
[  400.897522][ T6886] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  400.915874][T11247] tipc: Started in network mode
[  400.921367][T11247] tipc: Node identity 101, cluster identity 4711
[  400.927943][T11247] tipc: Node number set to 257
[  401.057458][ T6886] usb 6-1: Using ep0 maxpacket: 32
[  401.096335][ T6886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.146282][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  401.146308][   T29] audit: type=1400 audit(1733690951.750:1435): avc:  denied  { accept } for  pid=11249 comm="syz.8.1365" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  401.184792][ T6886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.203820][ T6886] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  401.222326][ T6886] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  401.233507][ T6886] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  401.249618][ T6886] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  401.266486][ T6886] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  401.280149][ T6886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.282392][T10730] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.003F/input/input68
[  401.289946][ T6886] usb 6-1: Product: syz
[  401.308198][ T6886] usb 6-1: Manufacturer: syz
[  401.312836][ T6886] usb 6-1: SerialNumber: syz
[  401.361112][T10730] appleir 0003:05AC:8241.003F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  401.528510][ T6886] cdc_ncm 6-1:1.0: bind() failure
[  401.535618][ T6886] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  401.542542][ T6886] cdc_ncm 6-1:1.1: bind() failure
[  401.551056][ T6886] usb 6-1: USB disconnect, device number 41
[  402.018578][ T5115] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.516138][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  403.526616][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  403.535286][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  403.543802][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  403.552414][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  403.632971][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  403.669826][ T5868] usb 1-1: USB disconnect, device number 61
[  403.703574][ T5115] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.746275][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1374'.
[  403.869708][ T5115] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.203951][ T5115] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.237421][ T6870] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[  404.330201][T11271] chnl_net:caif_netlink_parms(): no params data found
[  404.389233][ T6870] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config
[  404.414235][ T6870] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  404.447769][ T6870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  404.457088][ T6870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  404.472453][ T6870] usb 6-1: SerialNumber: syz
[  404.485532][T11271] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.492929][T11271] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.500105][T11271] bridge_slave_0: entered allmulticast mode
[  404.506530][T11271] bridge_slave_0: entered promiscuous mode
[  404.513234][T11315] sch_fq: defrate 0 ignored.
[  404.532963][T11271] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.547249][T11271] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.555506][T11271] bridge_slave_1: entered allmulticast mode
[  404.570601][T11271] bridge_slave_1: entered promiscuous mode
[  404.591941][ T5115] bridge_slave_1: left allmulticast mode
[  404.607334][ T5115] bridge_slave_1: left promiscuous mode
[  404.613042][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.630608][ T5115] bridge_slave_0: left allmulticast mode
[  404.636257][ T5115] bridge_slave_0: left promiscuous mode
[  404.649269][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.359428][ T5868] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  405.537624][    T9] usb 6-1: USB disconnect, device number 42
[  405.583565][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.596919][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  405.623312][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  405.636219][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  405.651794][ T5868] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  405.661161][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.669922][ T5868] usb 1-1: Product: syz
[  405.674258][ T5868] usb 1-1: Manufacturer: syz
[  405.678891][ T5868] usb 1-1: SerialNumber: syz
[  405.684107][   T29] audit: type=1400 audit(1733690956.300:1436): avc:  denied  { setopt } for  pid=11332 comm="syz.8.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  405.705458][ T5868] usb 1-1: config 0 descriptor??
[  405.713027][ T5868] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  405.722515][ T5868] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  405.733136][ T5141] Bluetooth: hci2: command tx timeout
[  405.752756][ T5868] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  405.854971][   T29] audit: type=1400 audit(1733690956.470:1437): avc:  denied  { getopt } for  pid=11337 comm="syz.8.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  405.894214][ T5115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.904165][ T5115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.915542][ T5115] bond0 (unregistering): Released all slaves
[  405.971726][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.994722][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.053922][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.053994][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.133126][ T5895] usb 1-1: USB disconnect, device number 62
[  406.133624][ T5895] garmin_gps 1-1:0.0: device disconnected
[  406.136338][T11271] team0: Port device team_slave_0 added
[  406.138187][T11271] team0: Port device team_slave_1 added
[  406.186036][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.186052][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.186075][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.194763][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.194777][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.194800][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.323222][T11271] hsr_slave_0: entered promiscuous mode
[  406.323896][T11271] hsr_slave_1: entered promiscuous mode
[  406.347574][  T970] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  406.377033][ T5115] hsr_slave_0: left promiscuous mode
[  406.378629][ T5115] hsr_slave_1: left promiscuous mode
[  406.380936][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.380964][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.381510][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.381532][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.392168][ T5115] veth1_macvtap: left promiscuous mode
[  406.392216][ T5115] veth0_macvtap: left promiscuous mode
[  406.392304][ T5115] veth1_vlan: left promiscuous mode
[  406.398996][ T5115] veth0_vlan: left promiscuous mode
[  406.538175][  T970] usb 6-1: Using ep0 maxpacket: 16
[  406.539473][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.539500][  T970] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  406.539556][  T970] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  406.539581][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.541168][  T970] usb 6-1: config 0 descriptor??
[  406.543422][  T970] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  406.764688][   T29] audit: type=1400 audit(1733690957.380:1438): avc:  denied  { read } for  pid=11344 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  406.876852][T11349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11349 comm=syz.0.1390
[  407.019777][ T5115] team0 (unregistering): Port device team_slave_1 removed
[  407.060481][ T5115] team0 (unregistering): Port device team_slave_0 removed
[  407.538018][   T29] audit: type=1400 audit(1733690957.930:1439): avc:  denied  { setopt } for  pid=11351 comm="syz.8.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  407.557626][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.807508][ T5141] Bluetooth: hci2: command tx timeout
[  407.837388][ T6870] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  407.978403][ T6870] usb 9-1: device descriptor read/64, error -71
[  408.697727][ T6870] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  408.815247][T11271] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  408.869701][T11271] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  408.878656][ T6870] usb 9-1: device descriptor read/64, error -71
[  408.893753][T11271] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  408.923954][T11271] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  409.529922][ T6870] usb usb9-port1: attempt power cycle
[  409.811204][ T6886] usb 6-1: USB disconnect, device number 43
[  409.888999][ T6870] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  409.946965][ T5141] Bluetooth: hci2: command tx timeout
[  410.001710][ T6870] usb 9-1: device descriptor read/8, error -71
[  410.015974][T11271] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.029275][T11271] 8021q: adding VLAN 0 to HW filter on device team0
[  410.041898][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.049032][ T5115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.059757][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1397'.
[  410.070845][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.077945][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.087453][ T5895] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  410.203747][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.248056][ T6870] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  410.271444][ T6870] usb 9-1: device descriptor read/8, error -71
[  410.274053][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  410.291526][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.297507][ T6886] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  410.307311][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.321251][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  410.337366][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  410.346442][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.356897][ T5895] usb 1-1: config 0 descriptor??
[  410.387906][ T6870] usb usb9-port1: unable to enumerate USB device
[  410.393001][T11271] veth0_vlan: entered promiscuous mode
[  410.405942][T11271] veth1_vlan: entered promiscuous mode
[  410.427127][T11271] veth0_macvtap: entered promiscuous mode
[  410.436993][T11271] veth1_macvtap: entered promiscuous mode
[  410.456400][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.467067][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.479738][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.490447][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.500842][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.511350][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.521500][ T6886] usb 6-1: unable to get BOS descriptor or descriptor too short
[  410.529536][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.540960][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.551856][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.562504][ T6886] usb 6-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config
[  410.572891][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.583794][ T6886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 204, changing to 11
[  410.607556][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.618318][ T6886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 32857, setting to 1024
[  410.633758][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.643981][ T6886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.661857][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.671765][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.684902][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.695197][ T6886] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  410.706055][ T6886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.714380][ T6886] usb 6-1: Product: syz
[  410.718627][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.729185][ T6886] usb 6-1: Manufacturer: syz
[  410.733782][ T6886] usb 6-1: SerialNumber: syz
[  410.738251][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.753561][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.754050][ T6886] usb 6-1: config 0 descriptor??
[  410.771362][ T6886] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  410.784359][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.799694][ T5895] microsoft 0003:045E:07DA.0040: ignoring exceeding usage max
[  410.815018][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.832721][ T5895] microsoft 0003:045E:07DA.0040: No inputs registered, leaving
[  410.840787][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.852879][ T5895] microsoft 0003:045E:07DA.0040: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  410.873834][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.884712][ T5895] microsoft 0003:045E:07DA.0040: no inputs found
[  410.891465][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.901573][ T5895] microsoft 0003:045E:07DA.0040: could not initialize ff, continuing anyway
[  410.912544][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.981074][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.091284][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.259273][T11271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.268103][T11271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.277890][T11271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.286594][T11271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.320726][ T6886] usb 1-1: USB disconnect, device number 63
[  411.455674][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1401'.
[  411.526149][T11372] KVM: debugfs: duplicate directory 11372-12
[  411.593367][ T5115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.602590][ T5115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.626409][ T5115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.634583][ T5115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.867414][ T5895] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  412.017451][ T5895] usb 9-1: Using ep0 maxpacket: 32
[  412.026829][ T5895] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.038245][ T5895] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.048186][ T5895] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  412.059231][ T5895] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  412.068993][ T5895] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  412.078827][ T5895] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  412.090364][ T5895] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.099719][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.107851][ T5895] usb 9-1: Product: syz
[  412.112022][ T5895] usb 9-1: Manufacturer: syz
[  412.116861][ T5895] usb 9-1: SerialNumber: syz
[  412.792434][ T5895] cdc_ncm 9-1:1.0: bind() failure
[  412.805618][ T5895] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  412.812732][ T5895] cdc_ncm 9-1:1.1: bind() failure
[  412.820768][ T5895] usb 9-1: USB disconnect, device number 9
[  412.855689][ T6870] usb 6-1: USB disconnect, device number 44
[  412.933328][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.942178][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.019997][T11415] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:21
[  413.118004][T11419] sp0: Synchronizing with TNC
[  413.124004][T11419] sp0: Found TNC
[  413.237538][ T5895] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  413.277471][ T6870] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  413.282919][T11418] [U] è`
[  413.309839][  T161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.357503][ T6886] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  413.387583][ T5895] usb 9-1: device descriptor read/64, error -71
[  413.451394][ T6870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.463214][ T6870] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  413.472542][ T6870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.482084][ T6870] usb 1-1: config 0 descriptor??
[  413.517401][ T6886] usb 6-1: Using ep0 maxpacket: 16
[  413.523962][ T6886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.533823][ T6886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  413.546839][ T6886] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  413.556777][ T6886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.565884][ T6886] usb 6-1: config 0 descriptor??
[  413.574060][ T6886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  413.627365][ T5895] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  413.757449][ T5895] usb 9-1: device descriptor read/64, error -71
[  413.867717][ T5895] usb usb9-port1: attempt power cycle
[  414.210813][   T29] audit: type=1400 audit(2000000002.720:1440): avc:  denied  { ioctl } for  pid=11416 comm="syz.0.1406" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  414.237413][ T5895] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[  414.258280][ T5895] usb 9-1: device descriptor read/8, error -71
[  414.321462][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  414.331986][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  414.341340][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  414.349437][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  414.358973][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  414.366785][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  414.460122][T11432] chnl_net:caif_netlink_parms(): no params data found
[  414.522281][  T161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.527368][ T5895] usb 9-1: new low-speed USB device number 13 using dummy_hcd
[  414.565892][T11432] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.574188][T11432] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.585092][T11432] bridge_slave_0: entered allmulticast mode
[  414.592039][ T5895] usb 9-1: device descriptor read/8, error -71
[  414.599223][T11432] bridge_slave_0: entered promiscuous mode
[  414.619258][  T161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.637813][T11432] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.645059][T11432] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.652532][T11432] bridge_slave_1: entered allmulticast mode
[  414.664370][T11432] bridge_slave_1: entered promiscuous mode
[  414.701925][  T161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.716313][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.730121][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.732158][ T5895] usb usb9-port1: unable to enumerate USB device
[  414.784205][T11432] team0: Port device team_slave_0 added
[  414.794639][T11432] team0: Port device team_slave_1 added
[  414.865370][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.876004][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.903803][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.919870][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.926913][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.953306][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.976577][  T161] bridge_slave_1: left allmulticast mode
[  414.984476][  T161] bridge_slave_1: left promiscuous mode
[  414.994208][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.003665][  T161] bridge_slave_0: left allmulticast mode
[  415.015024][  T161] bridge_slave_0: left promiscuous mode
[  415.020887][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.351271][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.362358][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.372598][  T161] bond0 (unregistering): Released all slaves
[  415.409152][T11432] hsr_slave_0: entered promiscuous mode
[  415.422251][T11432] hsr_slave_1: entered promiscuous mode
[  415.436956][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.446049][T11432] Cannot create hsr debugfs directory
[  415.572304][  T161] hsr_slave_0: left promiscuous mode
[  415.587788][  T161] hsr_slave_1: left promiscuous mode
[  415.593665][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.602205][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.610083][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.617906][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.635421][  T161] veth1_macvtap: left promiscuous mode
[  415.641706][  T161] veth0_macvtap: left promiscuous mode
[  415.647226][  T161] veth1_vlan: left promiscuous mode
[  415.654362][  T161] veth0_vlan: left promiscuous mode
[  416.209782][ T5895] usb 6-1: USB disconnect, device number 45
[  416.215990][ T6870] usbhid 1-1:0.0: can't add hid device: -71
[  416.222717][ T6870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  416.232268][ T6870] usb 1-1: USB disconnect, device number 64
[  416.273704][  T161] team0 (unregistering): Port device team_slave_1 removed
[  416.379685][T11457] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  416.405883][T11457] CIFS: Unable to determine destination address
[  416.528879][ T5141] Bluetooth: hci2: command tx timeout
[  417.006632][  T161] team0 (unregistering): Port device team_slave_0 removed
[  417.049120][ T5895] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  418.011714][ T5895] usb 1-1: device descriptor read/64, error -71
[  418.315517][ T5895] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  418.438947][T11490] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  418.451125][T11490] Dead loop on virtual device ipvlan1, fix it urgently!
[  418.587505][ T6886] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  418.617403][ T5141] Bluetooth: hci2: command tx timeout
[  418.775845][ T6886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.788251][ T6886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.798357][ T6886] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  418.807984][ T6886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.818252][ T6886] usb 9-1: config 0 descriptor??
[  418.847825][ T5895] usb 1-1: Using ep0 maxpacket: 8
[  418.854120][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.868561][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  418.877989][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.893437][ T5895] usb 1-1: config 0 descriptor??
[  418.911798][ T5895] gspca_main: vc032x-2.14.0 probing 046d:0892
[  418.988978][T11432] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  419.004992][T11432] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  419.069854][T11432] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  419.093759][T11432] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  419.186484][T11432] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.223026][T11432] 8021q: adding VLAN 0 to HW filter on device team0
[  419.243330][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.250495][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.286327][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.293496][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.305193][ T6886] isku 0003:1E7D:319C.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0
[  419.679917][ T6886] isku 0003:1E7D:319C.0041: couldn't init struct isku_device
[  419.687465][ T6886] isku 0003:1E7D:319C.0041: couldn't install keyboard
[  419.696599][ T6886] isku 0003:1E7D:319C.0041: probe with driver isku failed with error -32
[  420.688748][ T5141] Bluetooth: hci2: command tx timeout
[  420.708216][   T29] audit: type=1400 audit(2000000008.180:1441): avc:  denied  { accept } for  pid=11492 comm="syz.5.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  421.401547][ T5895] gspca_vc032x: reg_w err -71
[  421.406302][ T5895] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  421.412969][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.415822][ T5895] usb 1-1: USB disconnect, device number 66
[  422.030667][T11432] veth0_vlan: entered promiscuous mode
[  422.259147][T11504] [U] ã
[  422.264758][T11432] veth1_vlan: entered promiscuous mode
[  422.387491][    T9] usb 9-1: USB disconnect, device number 14
[  422.437893][T10730] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  422.453154][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1425'.
[  422.587743][T11432] veth0_macvtap: entered promiscuous mode
[  422.595912][T11432] veth1_macvtap: entered promiscuous mode
[  422.773586][ T5141] Bluetooth: hci2: command tx timeout
[  422.778084][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.790405][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.810635][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.821488][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.831754][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.842391][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.855957][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.867617][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.887098][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.901480][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.926756][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.939888][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.970949][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.986447][T10730] usb 6-1: Using ep0 maxpacket: 16
[  423.002535][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.013083][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.022941][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.033405][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.043239][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.053706][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.063571][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.074282][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.085429][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.096061][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.105970][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.116452][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.128249][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.151929][T11432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.160898][T11432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.169798][T11432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.178748][T11432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.196229][T10730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.206076][T10730] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  423.218997][T10730] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  423.221436][T11528] IPv6: addrconf: prefix option has invalid lifetime
[  423.228054][T10730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.252601][T10730] usb 6-1: config 0 descriptor??
[  423.273532][T10730] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  423.343712][ T7872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.351668][ T7872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.360024][ T7872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.389562][ T7872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.197445][  T973] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  424.347417][  T973] usb 1-1: Using ep0 maxpacket: 16
[  424.357553][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.372600][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.383577][  T973] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  424.392757][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.403038][  T973] usb 1-1: config 0 descriptor??
[  424.815096][  T973] corsair 0003:1B1C:1B02.0042: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  425.017490][  T973] corsair 0003:1B1C:1B02.0042: Failed to get K90 initial state (error -71).
[  425.028314][  T973] usb 1-1: USB disconnect, device number 67
[  425.229219][T11544] block device autoloading is deprecated and will be removed.
[  425.286228][  T973] usb 6-1: USB disconnect, device number 46
[  425.396383][  T161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.840586][  T161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.926248][  T161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.012344][  T161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.101508][  T161] bridge_slave_1: left allmulticast mode
[  426.107180][  T161] bridge_slave_1: left promiscuous mode
[  426.112804][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.122728][  T161] bridge_slave_0: left allmulticast mode
[  426.131467][  T161] bridge_slave_0: left promiscuous mode
[  426.137072][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.423195][   T29] audit: type=1400 audit(2000000014.940:1442): avc:  denied  { ioctl } for  pid=11553 comm="syz.8.1437" path="socket:[45551]" dev="sockfs" ino=45551 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  426.447895][    C1] vkms_vblank_simulate: vblank timer overrun
[  426.477140][T11563] ERROR: device name not specified.
[  426.545664][T11564] SET target dimension over the limit!
[  426.657622][  T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.669880][  T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.680353][  T161] bond0 (unregistering): Released all slaves
[  427.132866][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  427.148126][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  427.156497][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  427.164978][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  427.175464][T11556] ipvlan0: entered promiscuous mode
[  427.180972][T11556] ipvlan0: entered allmulticast mode
[  427.186401][T11556] veth0_vlan: entered allmulticast mode
[  427.194263][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  427.207540][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  427.237725][T11550] [U] ã
[  427.879502][T11591] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  428.435036][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034de1800: 0x00000: (8) Duplicate sequence number (and software is not able to recover)
[  428.448705][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069ed8000: 0x00000: (8) Duplicate sequence number (and software is not able to recover)
[  428.462216][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888034de0800: 0x00000: (8) Duplicate sequence number (and software is not able to recover)
[  428.476884][ T5865] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  428.483090][T11599] tmpfs: Unknown parameter 'çid'
[  428.627634][ T5865] usb 6-1: Using ep0 maxpacket: 16
[  428.658749][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.690996][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.714605][  T161] hsr_slave_0: left promiscuous mode
[  428.721984][   T29] audit: type=1400 audit(2000000017.230:1443): avc:  denied  { read write } for  pid=11603 comm="syz.8.1447" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  428.746568][    C1] vkms_vblank_simulate: vblank timer overrun
[  428.763323][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  428.786061][  T161] hsr_slave_1: left promiscuous mode
[  428.791544][ T5865] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  428.809797][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.821714][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.832335][  T161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.843691][   T29] audit: type=1400 audit(2000000017.230:1444): avc:  denied  { open } for  pid=11603 comm="syz.8.1447" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  428.868159][    C1] vkms_vblank_simulate: vblank timer overrun
[  428.875371][  T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.884314][ T5865] usb 6-1: config 0 descriptor??
[  428.909552][  T161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.955692][  T161] veth1_macvtap: left promiscuous mode
[  428.971981][  T161] veth0_macvtap: left promiscuous mode
[  428.980245][  T161] veth1_vlan: left promiscuous mode
[  428.985566][  T161] veth0_vlan: left promiscuous mode
[  429.241605][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  429.255902][   T54] Bluetooth: hci2: command tx timeout
[  429.337130][ T5865] shield 0003:0955:7214.0043: unknown main item tag 0x0
[  429.363191][ T5865] shield 0003:0955:7214.0043: unknown main item tag 0x0
[  429.383440][ T5865] shield 0003:0955:7214.0043: unknown main item tag 0x0
[  429.406339][ T5865] shield 0003:0955:7214.0043: unknown main item tag 0x0
[  429.417440][    T9] usb 9-1: Using ep0 maxpacket: 16
[  429.424048][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.425124][ T5865] shield 0003:0955:7214.0043: unknown main item tag 0x0
[  429.435201][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.452867][ T5865] input: HID 0955:7214 Haptics as /devices/virtual/input/input70
[  429.465663][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  429.473353][ T5865] shield 0003:0955:7214.0043: Registered Thunderstrike controller
[  429.486606][    T9] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  429.502750][ T5865] shield 0003:0955:7214.0043: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  429.515238][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.537435][    T9] usb 9-1: config 0 descriptor??
[  429.587384][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  429.721762][   T25] shield 0003:0955:7214.0043: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  429.736421][ T5865] usb 6-1: USB disconnect, device number 47
[  429.742827][   T25] shield 0003:0955:7214.0043: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  429.764581][   T25] shield 0003:0955:7214.0043: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  429.785130][   T25] shield 0003:0955:7214.0043: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  430.355813][T11613] Falling back ldisc for ttyprintk.
[  431.164053][T11627] netlink: 'syz.8.1454': attribute type 10 has an invalid length.
[  431.197406][   T25] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  431.223129][  T161] team0 (unregistering): Port device team_slave_1 removed
[  431.293221][    T9] usbhid 9-1:0.0: can't add hid device: -71
[  431.300326][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  431.309937][    T9] usb 9-1: USB disconnect, device number 15
[  431.327230][  T161] team0 (unregistering): Port device team_slave_0 removed
[  431.337791][ T5141] Bluetooth: hci2: command tx timeout
[  431.370822][   T25] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  431.383761][   T25] usb 6-1: config 0 has no interface number 0
[  431.405719][   T25] usb 6-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30
[  431.428077][   T25] usb 6-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  431.474464][   T25] usb 6-1: config 0 interface 49 has no altsetting 0
[  431.992817][T11627] syz_tun: entered promiscuous mode
[  432.019032][T11627] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  432.048558][T11631] sch_fq: defrate 2 ignored.
[  432.099717][T11566] chnl_net:caif_netlink_parms(): no params data found
[  432.181777][   T29] audit: type=1400 audit(2000000020.700:1445): avc:  denied  { append } for  pid=11636 comm="syz.8.1457" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  432.300675][T11566] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.330141][T11566] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.361220][T11566] bridge_slave_0: entered allmulticast mode
[  432.376675][T11566] bridge_slave_0: entered promiscuous mode
[  432.398848][T11566] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.405980][T11566] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.417407][T11566] bridge_slave_1: entered allmulticast mode
[  432.430131][T11566] bridge_slave_1: entered promiscuous mode
[  432.480565][T11650] netlink: 'syz.8.1459': attribute type 1 has an invalid length.
[  432.518491][T11566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.544764][T11566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.832823][T11566] team0: Port device team_slave_0 added
[  433.051598][T11566] team0: Port device team_slave_1 added
[  433.205455][T11566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.241955][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.297014][T11566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.376566][T11566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.411450][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.448535][ T5141] Bluetooth: hci2: command tx timeout
[  433.455549][T11566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.552056][T11669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11669 comm=syz.7.1464
[  433.570820][T11566] hsr_slave_0: entered promiscuous mode
[  433.577951][T11566] hsr_slave_1: entered promiscuous mode
[  433.644183][T11671] sp0: Synchronizing with TNC
[  433.737477][  T973] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  433.758246][    T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  434.297423][    T9] usb 1-1: Using ep0 maxpacket: 16
[  434.304959][  T973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.305509][   T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  434.317506][  T973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.337376][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.354257][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.364056][  T973] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  434.379186][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.381826][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  434.401190][   T25] usb 6-1: config 0 descriptor??
[  434.407323][  T973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.416014][    T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  434.416455][T11566] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  434.430552][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.434211][   T25] usb 6-1: can't set config #0, error -71
[  434.440839][  T973] usb 9-1: config 0 descriptor??
[  434.448580][   T25] usb 6-1: USB disconnect, device number 48
[  434.459759][T11566] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  434.471948][T11670] [U] è`
[  434.475566][    T9] usb 1-1: config 0 descriptor??
[  434.497723][T11566] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  434.515890][T11566] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  434.636450][T11679] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1467'.
[  434.682475][   T29] audit: type=1400 audit(2000000023.200:1446): avc:  denied  { write } for  pid=11664 comm="syz.8.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  434.685205][T11566] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.780123][T11566] 8021q: adding VLAN 0 to HW filter on device team0
[  434.794017][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.801099][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.815520][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.822640][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.987740][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  434.994816][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.004298][    T9] shield 0003:0955:7214.0045: unknown main item tag 0x0
[  435.027462][    T9] shield 0003:0955:7214.0045: unknown main item tag 0x0
[  435.034438][    T9] shield 0003:0955:7214.0045: unknown main item tag 0x0
[  435.041562][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.062857][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.072009][    T9] shield 0003:0955:7214.0045: unknown main item tag 0x0
[  435.083778][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.091081][    T9] shield 0003:0955:7214.0045: unknown main item tag 0x0
[  435.129461][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.140538][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input71
[  435.180016][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.186936][T11566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.195406][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.195515][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.203027][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.217543][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.224932][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.232373][  T973] gembird 0003:11FF:3331.0044: unknown main item tag 0x0
[  435.293857][T11697] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  435.507396][ T5141] Bluetooth: hci2: command tx timeout
[  435.791701][    T9] shield 0003:0955:7214.0045: Registered Thunderstrike controller
[  435.799673][    T9] shield 0003:0955:7214.0045: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  435.810515][  T973] gembird 0003:11FF:3331.0044: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0
[  435.880672][  T973] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  435.892159][    T9] usb 1-1: USB disconnect, device number 68
[  435.898213][  T973] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  435.921247][  T973] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  435.932696][  T973] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  436.042915][T11566] veth0_vlan: entered promiscuous mode
[  436.052609][T11566] veth1_vlan: entered promiscuous mode
[  436.088718][T11566] veth0_macvtap: entered promiscuous mode
[  436.108873][T11566] veth1_macvtap: entered promiscuous mode
[  436.122570][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.134104][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.144800][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.155300][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.165215][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.175858][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.186043][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.196485][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.206391][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.216896][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.226848][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.248892][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.265110][T11566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.290509][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.307937][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.324320][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.384689][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.394558][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.404984][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.414812][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.425241][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.435046][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.445454][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.455268][T11566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.465701][T11566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.476836][T11566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.486873][T11566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.495656][T11566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.504389][T11566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.513106][T11566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.525946][   T25] usb 9-1: USB disconnect, device number 16
[  436.759270][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.819118][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.272386][T11720] ptrace attach of "./syz-executor exec"[10842] was attempted by "./syz-executor exec"[11720]
[  437.285989][ T5115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.308272][ T5115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.328139][T11722] sp0: Synchronizing with TNC
[  438.168821][T11721] [U] è`
[  438.276324][   T29] audit: type=1400 audit(2000000026.790:1447): avc:  denied  { watch_sb } for  pid=11734 comm="syz.0.1480" path="/296" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  438.667368][ T5865] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  438.687760][   T25] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  438.818571][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.832540][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.843170][ T5865] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  438.852412][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.860596][   T25] usb 9-1: Using ep0 maxpacket: 16
[  438.867104][ T5865] usb 6-1: config 0 descriptor??
[  438.872720][   T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.883645][   T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.893808][   T25] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  438.908713][   T25] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  438.917811][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.927584][   T25] usb 9-1: config 0 descriptor??
[  439.147733][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  439.154231][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  439.391959][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.401074][   T25] shield 0003:0955:7214.0047: unknown main item tag 0x0
[  439.416330][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.423964][   T25] shield 0003:0955:7214.0047: unknown main item tag 0x0
[  439.431163][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.438122][   T25] shield 0003:0955:7214.0047: unknown main item tag 0x0
[  439.445166][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.452117][   T25] shield 0003:0955:7214.0047: unknown main item tag 0x0
[  439.460626][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.467535][   T25] shield 0003:0955:7214.0047: unknown main item tag 0x0
[  439.474568][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.482622][   T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input72
[  439.490528][ T5865] isku 0003:1E7D:319C.0046: unknown main item tag 0x0
[  439.508962][ T5865] isku 0003:1E7D:319C.0046: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  439.523621][   T25] shield 0003:0955:7214.0047: Registered Thunderstrike controller
[  439.540954][   T25] shield 0003:0955:7214.0047: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0
[  439.609353][   T25] usb 9-1: USB disconnect, device number 17
[  439.617165][ T5865] shield 0003:0955:7214.0047: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.630152][ T5865] shield 0003:0955:7214.0047: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.641447][ T5865] shield 0003:0955:7214.0047: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.654219][ T5865] shield 0003:0955:7214.0047: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  439.676526][    T9] usb 6-1: USB disconnect, device number 49
[  440.240723][   T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.720916][   T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.788307][   T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.862530][   T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.939585][   T35] bridge_slave_1: left allmulticast mode
[  440.945220][   T35] bridge_slave_1: left promiscuous mode
[  440.951415][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.959866][   T35] bridge_slave_0: left allmulticast mode
[  440.965500][   T35] bridge_slave_0: left promiscuous mode
[  440.971649][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.562382][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.744188][   T29] audit: type=1400 audit(2000000030.250:1448): avc:  denied  { setopt } for  pid=11757 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  441.793077][T11770] binder: 11766:11770 ioctl c0306201 20000600 returned -14
[  441.804476][T11770] overlayfs: failed to resolve './file0': -2
[  441.815492][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.824912][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  441.834666][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  441.842995][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  441.853308][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  441.858264][   T35] bond0 (unregistering): Released all slaves
[  441.877525][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  441.884794][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  441.972494][T11778] sp0: Synchronizing with TNC
[  442.136890][  T970] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  442.163114][T11771] chnl_net:caif_netlink_parms(): no params data found
[  442.330749][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.514545][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.713668][  T970] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  442.748017][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.775086][  T970] usb 6-1: config 0 descriptor??
[  442.792842][   T35] hsr_slave_0: left promiscuous mode
[  442.805551][T11777] [U] è`
[  442.815558][   T35] hsr_slave_1: left promiscuous mode
[  442.831643][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.845161][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.866030][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.874021][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.002457][   T35] veth1_macvtap: left promiscuous mode
[  443.037529][   T35] veth0_macvtap: left promiscuous mode
[  443.068310][   T35] veth1_vlan: left promiscuous mode
[  443.112544][   T35] veth0_vlan: left promiscuous mode
[  443.317550][  T970] hid (null): bogus close delimiter
[  443.429770][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1494'.
[  443.533528][  T970] usb 6-1: language id specifier not provided by device, defaulting to English
[  443.803669][   T35] team0 (unregistering): Port device team_slave_1 removed
[  443.843282][   T35] team0 (unregistering): Port device team_slave_0 removed
[  443.968552][   T54] Bluetooth: hci2: command tx timeout
[  443.971581][  T970] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0048/input/input73
[  444.061369][  T970] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0048/input/input74
[  444.079435][  T970] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0048/input/input75
[  444.123687][  T970] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0048/input/input76
[  444.171548][  T970] uclogic 0003:256C:006D.0048: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[  444.272437][T11789] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1494'.
[  444.424978][T11771] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.591762][T11771] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.610831][T11771] bridge_slave_0: entered allmulticast mode
[  444.617794][T11771] bridge_slave_0: entered promiscuous mode
[  444.625977][T11771] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.653256][T11771] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.442576][T11771] bridge_slave_1: entered allmulticast mode
[  445.449681][T11771] bridge_slave_1: entered promiscuous mode
[  445.743720][T11771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.009804][T11771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.044390][T11808] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  446.054609][T11806] tmpfs: Bad value for 'mpol'
[  446.063234][ T5868] usb 6-1: reset high-speed USB device number 50 using dummy_hcd
[  446.071722][ T5141] Bluetooth: hci2: command tx timeout
[  446.115209][T11771] team0: Port device team_slave_0 added
[  446.122772][T11771] team0: Port device team_slave_1 added
[  446.176410][   T29] audit: type=1400 audit(2000000034.690:1449): avc:  denied  { read } for  pid=11810 comm="syz.0.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  446.248884][T11771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.255846][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.297136][T11771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.333198][T11771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.340839][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.368713][T11771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.409335][T11771] hsr_slave_0: entered promiscuous mode
[  446.410013][T11771] hsr_slave_1: entered promiscuous mode
[  446.501399][ T5868] usb 6-1: device descriptor read/64, error -71
[  446.537418][  T970] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  446.687652][  T970] usb 9-1: Using ep0 maxpacket: 16
[  446.705957][  T970] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8
[  446.716706][  T970] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  446.727249][  T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.736074][  T970] usb 9-1: Product: syz
[  446.740352][  T970] usb 9-1: Manufacturer: syz
[  446.748325][  T970] usb 9-1: SerialNumber: syz
[  446.753901][ T5868] usb 6-1: reset high-speed USB device number 50 using dummy_hcd
[  446.764829][  T970] usb 9-1: config 0 descriptor??
[  446.768091][ T5868] usb 6-1: device reset changed ep0 maxpacket size!
[  446.774584][  T970] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  446.785966][    T9] usb 6-1: USB disconnect, device number 50
[  446.790376][  T970] usb 9-1: Detected FT232R
[  446.855647][T11771] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  446.869350][T11771] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  446.877980][T11771] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  446.886439][T11771] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  446.890829][T11827] loop2: detected capacity change from 0 to 7
[  446.915258][T11827]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  446.927495][T11827] loop2: partition table partially beyond EOD, truncated
[  446.946252][T11827] loop2: p1 size 6333 extends beyond EOD, truncated
[  446.964685][T11771] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.988716][    T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  447.010813][T11771] 8021q: adding VLAN 0 to HW filter on device team0
[  447.058150][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.065236][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.069784][   T29] audit: type=1400 audit(2000000035.580:1450): avc:  denied  { create } for  pid=11831 comm="syz.7.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  447.076228][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.100316][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.129715][   T29] audit: type=1400 audit(2000000035.650:1451): avc:  denied  { ioctl } for  pid=11831 comm="syz.7.1506" path="socket:[48168]" dev="sockfs" ino=48168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  447.158200][    T9] usb 6-1: Using ep0 maxpacket: 32
[  447.166883][    T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  447.176042][    T9] usb 6-1: config 0 has no interface number 0
[  447.265360][T11832] ieee802154 phy0 wpan0: encryption failed: -22
[  447.323628][T11838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.332063][T11838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.355685][    T9] usb 6-1: config 0 interface 12 has no altsetting 0
[  447.371349][    T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  447.386974][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.399643][T11838] veth0_to_team: entered promiscuous mode
[  447.405376][T11838] veth0_to_team: entered allmulticast mode
[  447.408897][   T29] audit: type=1400 audit(2000000035.650:1452): avc:  denied  { write } for  pid=11831 comm="syz.7.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  447.416902][    T9] usb 6-1: Product: syz
[  447.436167][    T9] usb 6-1: Manufacturer: syz
[  447.440818][    T9] usb 6-1: SerialNumber: syz
[  447.482723][    T9] usb 6-1: config 0 descriptor??
[  447.502253][    T9] f81534 6-1:0.12: required endpoints missing
[  447.601579][T11771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.004769][ T5868] usb 6-1: USB disconnect, device number 51
[  448.129465][ T5141] Bluetooth: hci2: command tx timeout
[  448.631569][T11771] veth0_vlan: entered promiscuous mode
[  448.664704][T11771] veth1_vlan: entered promiscuous mode
[  448.819993][T11862] syzkaller0: entered promiscuous mode
[  448.844344][T11862] syzkaller0: entered allmulticast mode
[  448.891259][T11771] veth0_macvtap: entered promiscuous mode
[  448.909396][T11771] veth1_macvtap: entered promiscuous mode
[  449.666301][  T970] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  449.687358][  T970] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71
[  449.696793][  T970] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  449.711920][  T970] usb 9-1: USB disconnect, device number 18
[  449.719724][  T970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  449.729302][  T970] ftdi_sio 9-1:0.0: device disconnected
[  449.756644][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.774523][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.785085][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.785620][T11874] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  449.801206][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.814285][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.815127][T11874] cramfs: wrong magic
[  449.830862][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.843088][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.856095][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.866379][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.883547][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.893599][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.904349][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.915562][T11771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.925709][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.936284][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.946744][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.967456][    T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  449.981751][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.991979][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.002546][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.012574][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.023101][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.033292][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.044428][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.055028][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.066354][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.076914][T11771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.087744][T11771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.096457][T11771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.105264][T11771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.114338][T11771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.127503][  T970] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  450.149966][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.177347][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  450.186389][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.195939][ T7308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.211803][ T5141] Bluetooth: hci2: command tx timeout
[  450.216108][ T7308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.220232][    T9] usb 1-1: config 0 descriptor??
[  450.239159][ T7308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.247223][ T7308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.289641][  T970] usb 9-1: Using ep0 maxpacket: 32
[  450.326661][  T970] usb 9-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4
[  450.336025][  T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.345310][  T970] usb 9-1: Product: syz
[  450.353456][  T970] usb 9-1: Manufacturer: syz
[  450.357414][ T5895] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  450.358099][  T970] usb 9-1: SerialNumber: syz
[  450.372460][  T970] usb 9-1: config 0 descriptor??
[  450.519084][ T5895] usb 6-1: config 0 has an invalid interface number: 46 but max is 8
[  450.527441][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  450.536321][ T5895] usb 6-1: config 0 has no interface number 0
[  450.542525][ T5895] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  450.555040][ T5895] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  450.564146][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.572216][ T5895] usb 6-1: Product: syz
[  450.576386][ T5895] usb 6-1: Manufacturer: syz
[  450.581031][ T5895] usb 6-1: SerialNumber: syz
[  450.587474][ T5895] usb 6-1: config 0 descriptor??
[  450.593054][T11881] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  450.602859][ T5895] ums-karma 6-1:0.46: USB Mass Storage device detected
[  450.623692][  T970] usb 9-1: USB disconnect, device number 19
[  450.655383][    T9] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor
[  450.666065][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0049/input/input77
[  450.679536][ T5895] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5
[  450.739955][    T9] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  450.816265][   T29] audit: type=1400 audit(2000000039.330:1453): avc:  denied  { getopt } for  pid=11880 comm="syz.5.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  450.851687][  T970] usb 6-1: USB disconnect, device number 52
[  451.005601][   T29] audit: type=1400 audit(2000000039.520:1454): avc:  denied  { read } for  pid=11884 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  451.209727][T11886] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1518'.
[  451.341569][   T29] audit: type=1400 audit(2000000039.860:1455): avc:  denied  { shutdown } for  pid=11887 comm="syz.8.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  451.591313][  T970] usb 1-1: USB disconnect, device number 69
[  451.591901][    C0] keytouch 0003:0926:3333.0049: usb_submit_urb(ctrl) failed: -19
[  451.890228][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1520'.
[  451.936713][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1520'.
[  452.085636][   T29] audit: type=1400 audit(2000000040.590:1456): avc:  denied  { read write } for  pid=10842 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  452.142313][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.174054][   T29] audit: type=1400 audit(2000000040.590:1457): avc:  denied  { open } for  pid=10842 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  452.198492][   T29] audit: type=1400 audit(2000000040.600:1458): avc:  denied  { ioctl } for  pid=10842 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
Connection to 10.128.1.46 closed by remote host.
Stopping sshd: OK
[  452.482262][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5483)
[  452.581377][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Stopping network: [  452.659417][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.796089][   T11] bridge_slave_1: left allmulticast mode
[  452.802823][   T29] audit: type=1400 audit(2000000041.310:1459): avc:  denied  { read write } for  pid=11914 comm="ip" path="/dev/console" dev="rootfs" ino=64 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  452.837421][   T11] bridge_slave_1: left promiscuous mode
[  452.843114][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.861432][   T11] bridge_slave_0: left allmulticast mode
[  452.867092][   T11] bridge_slave_0: left promiscuous mode
[  452.874642][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.174381][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.184336][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.195439][   T11] bond0 (unregistering): Released all slaves
[  453.259276][   T29] audit: type=1400 audit(2000000041.780:1460): avc:  denied  { map_create } for  pid=11921 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  453.310721][T11924] input: syz0 as /devices/virtual/input/input78
[  453.348776][   T29] audit: type=1400 audit(2000000041.820:1461): avc:  denied  { read write } for  pid=11922 comm="syz.0.1521" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  453.486982][   T29] audit: type=1400 audit(2000000041.820:1462): avc:  denied  { open } for  pid=11922 comm="syz.0.1521" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  453.510674][    C0] vkms_vblank_simulate: vblank timer overrun
[  454.147707][   T29] audit: type=1400 audit(2000000041.830:1463): avc:  denied  { create } for  pid=11922 comm="syz.0.1521" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  454.225861][   T29] audit: type=1400 audit(2000000041.830:1464): avc:  denied  { map } for  pid=11922 comm="syz.0.1521" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  454.568363][T11950] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1528'.
[  454.581061][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  454.591992][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  454.606154][T11952] No such timeout policy "syz0"
OK
[  454.655540][T10842] bond0: (slave syz_tun): Releasing backup interface
[  454.655681][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  454.910505][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  454.919810][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
Stopping iptable[  454.927067][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
s: OK
Stopping system message bus: [  455.205622][   T11] hsr_slave_0: left promiscuous mode
[  455.251679][   T11] hsr_slave_1: left promiscuous mode
[  455.334822][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.350997][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.459305][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.494863][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.566580][   T11] veth1_macvtap: left promiscuous mode
[  455.577013][   T11] veth0_macvtap: left promiscuous mode
[  455.610664][   T11] veth1_vlan: left promiscuous mode
[  455.626088][   T11] veth0_vlan: left promiscuous mode
done
[  455.820339][T10730] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  456.004988][T10730] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.035046][T10730] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  456.075676][T10730] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  456.090159][T10730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
killall: udevd: no process kille[  456.109110][T10730] usb 1-1: Product: syz
d
[  456.128899][T10730] usb 1-1: Manufacturer: syz
[  456.133559][T10730] usb 1-1: SerialNumber: syz
[  456.138626][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  456.149979][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  456.165131][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  456.173847][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  456.182395][ T5141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  456.189776][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  456.198352][T10730] usb 1-1: config 0 descriptor??
Stopping klogd: start-stop-daemon: warning: killing process 5179: No such process
FAIL
Stopping acpid: [  456.362043][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  456.362060][   T29] audit: type=1400 audit(2000000044.880:1514): avc:  denied  { write } for  pid=5175 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.390921][   T29] audit: type=1400 audit(2000000044.880:1515): avc:  denied  { remove_name } for  pid=5175 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.413617][   T29] audit: type=1400 audit(2000000044.880:1516): avc:  denied  { unlink } for  pid=5175 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  456.515405][   T29] audit: type=1400 audit(2000000045.030:1517): avc:  denied  { create } for  pid=11978 comm="syz.7.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  456.687406][   T11] team0 (unregistering): Port device team_slave_1 removed
[  456.724166][   T11] team0 (unregistering): Port device team_slave_0 removed
[  456.996075][T11964] netlink: 'syz.0.1529': attribute type 1 has an invalid length.
[  457.008019][T11964] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1529'.
[  457.010197][ T5141] Bluetooth: hci1: command tx timeout
[  457.206840][T11945] chnl_net:caif_netlink_parms(): no params data found
[  457.235790][T11971] chnl_net:caif_netlink_parms(): no params data found
[  457.417929][T12001] block device autoloading is deprecated and will be removed.
[  457.438776][T11945] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.454610][T11945] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.462860][T11945] bridge_slave_0: entered allmulticast mode
[  457.473798][T11945] bridge_slave_0: entered promiscuous mode
OK
[  457.496010][T11971] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.507967][T11971] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.516781][T11971] bridge_slave_0: entered allmulticast mode
[  457.528737][T11971] bridge_slave_0: entered promiscuous mode
[  457.553520][T11945] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.575466][T11945] bridge0: port 2(bridge_slave_1) entered disabled state
Stopping syslogd: [  457.585829][T11945] bridge_slave_1: entered allmulticast mode
[  457.608603][T11945] bridge_slave_1: entered promiscuous mode
[  457.618166][T11971] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.635770][T11971] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.643072][T11971] bridge_slave_1: entered allmulticast mode
[  457.656530][T11971] bridge_slave_1: entered promiscuous mode
[  457.726118][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
OK
[  457.751308][   T29] audit: type=1400 audit(2000000046.270:1518): avc:  denied  { create } for  pid=12006 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  457.784752][   T29] audit: type=1400 audit(2000000046.290:1519): avc:  denied  { ioctl } for  pid=12006 comm="syz.5.1535" path="socket:[48706]" dev="sockfs" ino=48706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  457.811994][   T29] audit: type=1400 audit(2000000046.290:1520): avc:  denied  { bpf } for  pid=12006 comm="syz.5.1535" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  457.838865][   T29] audit: type=1400 audit(2000000046.290:1521): avc:  denied  { perfmon } for  pid=12006 comm="syz.5.1535" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  457.860042][   T29] audit: type=1400 audit(2000000046.300:1522): avc:  denied  { prog_run } for  pid=12006 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  457.894342][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
umount: can't remount debugfs re[  457.907093][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
ad-only
[  457.936999][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.963024][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.979314][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.017366][  T973] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  458.075970][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.101086][T11971] team0: Port device team_slave_0 added
[  458.116740][T11945] team0: Port device team_slave_0 added
[  458.124349][ T5895] usb 1-1: USB disconnect, device number 70
[  458.174320][T11945] team0: Port device team_slave_1 added
[  458.199105][  T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.218794][T11971] team0: Port device team_slave_1 added
[  458.225840][  T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.243655][  T973] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  458.265756][  T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.287621][ T5141] Bluetooth: hci2: command tx timeout
[  458.304487][  T973] usb 6-1: config 0 descriptor??
[  458.327332][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.389625][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'.
[  458.399524][T12015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1536'.
[  458.417364][   T29] audit: type=1400 audit(2000000046.900:1523): avc:  denied  { create } for  pid=12012 comm="syz.0.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  458.895832][  T973] usbhid 6-1:0.0: can't add hid device: -71
[  458.902305][  T973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  458.912607][  T973] usb 6-1: USB disconnect, device number 53
[  458.913112][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.931169][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.957190][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.992352][T11971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.024670][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read[  459.057246][T11971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
-only
umount: can't remount /dev/root read-only
The system is going down NOW!
[  459.147321][ T5141] Bluetooth: hci1: command tx timeout
Sent SIGTERM to all processes
[  459.162792][T11971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.191786][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.287972][T11971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.321024][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.357704][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.436543][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.568481][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  459.638000][   T11] bridge_slave_1: left allmulticast mode
[  459.643660][   T11] bridge_slave_1: left promiscuous mode
[  459.667611][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.676210][   T11] bridge_slave_0: left allmulticast mode
[  459.695784][   T11] bridge_slave_0: left promiscuous mode
[  459.713590][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.188239][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.201895][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.215954][   T11] bond0 (unregistering): Released all slaves
[  460.282809][ T7426] bond0: (slave syz_tun): Releasing backup interface
Sent SIGKILL to all processes
Requesting system poweroff
[  460.322225][   T11] tipc: Left network mode
[  460.513009][   T11] hsr_slave_0: left promiscuous mode
[  460.520204][   T11] hsr_slave_1: left promiscuous mode
[  460.525847][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.533483][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.543023][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.551501][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.565566][   T11] veth1_macvtap: left promiscuous mode
[  460.571067][   T11] veth0_macvtap: left promiscuous mode
[  460.576543][   T11] veth1_vlan: left promiscuous mode
[  460.581791][   T11] veth0_vlan: left promiscuous mode
[  460.876169][   T11] team0 (unregistering): Port device team_slave_1 removed
[  460.910143][   T11] team0 (unregistering): Port device team_slave_0 removed
[  461.578455][  T161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.641052][  T161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.700662][  T161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.769558][  T161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.850472][  T161] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.909849][  T161] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.963064][  T161] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.043564][  T161] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.111795][  T161] bridge_slave_1: left allmulticast mode
[  462.117486][  T161] bridge_slave_1: left promiscuous mode
[  462.123072][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.133173][  T161] bridge_slave_0: left allmulticast mode
[  462.138861][  T161] bridge_slave_0: left promiscuous mode
[  462.145373][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.156333][  T161] bridge_slave_1: left allmulticast mode
[  462.162211][  T161] bridge_slave_1: left promiscuous mode
[  462.167983][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.175820][  T161] bridge_slave_0: left allmulticast mode
[  462.181816][  T161] bridge_slave_0: left promiscuous mode
[  462.188387][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.198082][  T161] bridge_slave_1: left allmulticast mode
[  462.203714][  T161] bridge_slave_1: left promiscuous mode
[  462.209474][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.217112][  T161] bridge_slave_0: left allmulticast mode
[  462.222756][  T161] bridge_slave_0: left promiscuous mode
[  462.228491][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.236597][  T161] bridge_slave_1: left allmulticast mode
[  462.242288][  T161] bridge_slave_1: left promiscuous mode
[  462.249320][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.257148][  T161] bridge_slave_0: left allmulticast mode
[  462.262953][  T161] bridge_slave_0: left promiscuous mode
[  462.268600][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.369631][T12016] ------------[ cut here ]------------
[  462.375310][T12016] Invalid notifier called!
[  462.375622][T12016] WARNING: CPU: 1 PID: 12016 at kernel/notifier.c:79 notifier_call_chain+0x395/0x410
[  462.389711][T12016] Modules linked in:
[  462.393814][T12016] CPU: 1 UID: 0 PID: 12016 Comm: init Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[  462.404461][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  462.414591][T12016] RIP: 0010:notifier_call_chain+0x395/0x410
[  462.420610][T12016] Code: 00 44 89 f8 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 59 29 34 00 90 48 c7 c7 20 13 6c 8b e8 cc 72 f4 ff 90 <0f> 0b 90 90 e9 70 fd ff ff e8 3d 29 34 00 90 0f 0b 90 e9 2e fe ff
[  462.440303][T12016] RSP: 0018:ffffc90004647cc8 EFLAGS: 00010286
[  462.446356][T12016] RAX: 0000000000000000 RBX: ffff888031e198c8 RCX: ffffffff815a5159
[  462.454466][T12016] RDX: ffff88802dc22440 RSI: ffffffff815a5166 RDI: 0000000000000001
[  462.462511][T12016] RBP: 00000000fffffffd R08: 0000000000000001 R09: 0000000000000000
[  462.470603][T12016] R10: 0000000000000001 R11: fffffffffffd3f60 R12: dffffc0000000000
[  462.478656][T12016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  462.486602][T12016] FS:  00007f13447ad500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  462.496095][T12016] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  462.503072][T12016] CR2: 00007fa6b5077d60 CR3: 000000003564e000 CR4: 00000000003526f0
[  462.511122][T12016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  462.519207][T12016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  462.527172][T12016] Call Trace:
[  462.530585][T12016]  <TASK>
[  462.533499][T12016]  ? __warn+0xea/0x3c0
[  462.537709][T12016]  ? preempt_schedule_notrace+0x62/0xe0
[  462.543270][T12016]  ? notifier_call_chain+0x395/0x410
[  462.548705][T12016]  ? report_bug+0x3c0/0x580
[  462.553210][T12016]  ? handle_bug+0x54/0xa0
[  462.557593][T12016]  ? exc_invalid_op+0x17/0x50
[  462.562249][T12016]  ? asm_exc_invalid_op+0x1a/0x20
[  462.567407][T12016]  ? __warn_printk+0x199/0x350
[  462.572179][T12016]  ? __warn_printk+0x1a6/0x350
[  462.576944][T12016]  ? notifier_call_chain+0x395/0x410
[  462.582286][T12016]  ? notifier_call_chain+0x394/0x410
[  462.587673][T12016]  ? __pfx_bcache_reboot+0x10/0x10
[  462.592784][T12016]  blocking_notifier_call_chain+0x69/0xa0
[  462.598934][T12016]  kernel_power_off+0x1c/0xb0
[  462.603610][T12016]  __do_sys_reboot+0x376/0x3e0
[  462.608814][T12016]  ? __pfx___do_sys_reboot+0x10/0x10
[  462.614106][T12016]  ? xfd_validate_state+0x5d/0x180
[  462.619349][T12016]  do_syscall_64+0xcd/0x250
[  462.623854][T12016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.629774][T12016] RIP: 0033:0x7f13449068b4
[  462.634179][T12016] Code: f0 ff ff 73 01 c3 48 8b 0d 71 55 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 89 fa be 69 19 12 28 bf ad de e1 fe b8 a9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 45 55 0d 00 f7 d8 64 89 02 48 83
[  462.653803][T12016] RSP: 002b:00007fffa4d8cd98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a9
[  462.662237][T12016] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f13449068b4
[  462.670223][T12016] RDX: 000000004321fedc RSI: 0000000028121969 RDI: 00000000fee1dead
[  462.678211][T12016] RBP: 000000004321fedc R08: 0000000000000000 R09: 0000000000000000
[  462.686174][T12016] R10: 00007fffa4d8cd70 R11: 0000000000000246 R12: 0000000000000000
[  462.694193][T12016] R13: 00007fffa4d8cdf8 R14: 000055b3bf061169 R15: 00007f1344ae4a80
[  462.702338][T12016]  </TASK>
[  462.705335][T12016] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  462.712589][T12016] CPU: 1 UID: 0 PID: 12016 Comm: init Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[  462.722796][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  462.732824][T12016] Call Trace:
[  462.736078][T12016]  <TASK>
[  462.738984][T12016]  dump_stack_lvl+0x3d/0x1f0
[  462.743556][T12016]  panic+0x71d/0x800
[  462.747429][T12016]  ? __pfx_panic+0x10/0x10
[  462.751824][T12016]  ? show_trace_log_lvl+0x29d/0x3d0
[  462.757000][T12016]  ? check_panic_on_warn+0x1f/0xb0
[  462.762093][T12016]  ? notifier_call_chain+0x395/0x410
[  462.767371][T12016]  check_panic_on_warn+0xab/0xb0
[  462.772307][T12016]  __warn+0xf6/0x3c0
[  462.776184][T12016]  ? preempt_schedule_notrace+0x62/0xe0
[  462.781717][T12016]  ? notifier_call_chain+0x395/0x410
[  462.786992][T12016]  report_bug+0x3c0/0x580
[  462.791312][T12016]  handle_bug+0x54/0xa0
[  462.795456][T12016]  exc_invalid_op+0x17/0x50
[  462.799949][T12016]  asm_exc_invalid_op+0x1a/0x20
[  462.804789][T12016] RIP: 0010:notifier_call_chain+0x395/0x410
[  462.810698][T12016] Code: 00 44 89 f8 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 59 29 34 00 90 48 c7 c7 20 13 6c 8b e8 cc 72 f4 ff 90 <0f> 0b 90 90 e9 70 fd ff ff e8 3d 29 34 00 90 0f 0b 90 e9 2e fe ff
[  462.830291][T12016] RSP: 0018:ffffc90004647cc8 EFLAGS: 00010286
[  462.836344][T12016] RAX: 0000000000000000 RBX: ffff888031e198c8 RCX: ffffffff815a5159
[  462.844299][T12016] RDX: ffff88802dc22440 RSI: ffffffff815a5166 RDI: 0000000000000001
[  462.852253][T12016] RBP: 00000000fffffffd R08: 0000000000000001 R09: 0000000000000000
[  462.860211][T12016] R10: 0000000000000001 R11: fffffffffffd3f60 R12: dffffc0000000000
[  462.868165][T12016] R13: 0000000000000000 R14