last executing test programs:

18m36.132383042s ago: executing program 32 (id=485):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r5=>0x0)
sendmsg$alg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
sendmmsg$alg(r4, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="58750f688dc16a224a6d5986eff155d3ec074b015dcbc52cc97c07111a5efe96965e24476c1ef251eade7dcfe4bf39a6ec59fe90c3a452d1fdbdbfddcab97db52a29caf89a14605ba29a04ec924416dfe08b0767c5ec69b1837a2b603d1ce779cef0211f61f7d3a92c7583a897662f32a338f81612b43f9e8fd3814584bb3b670e21af0773112161bdcbb38bd89ad2795002039e6441a1e4ca8825229c55ef8b7c56ee78867b707d91ca53024f6bfafac372a3ecc2596e77f8325e04f311e928b5fc88a0b2e13ba2f0543d42183fbcce11daa582", 0xd4}, {0x0}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c", 0x47}, {&(0x7f0000000c00)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f4886642ca34d7d96eb8bb5dc6d2e753eb60f68b8462127502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf0240d2d56af0b9b552bdbc2aaf509556b22e6ee04911b793f394fbc2842019b1ee70bb3336a594016d97fd81e4ed49e192e627a723ed47c1653cbb6a0800099d67c1623444d5fdb7c0b111aaec599ee041d3f46b", 0xa1}], 0x4}], 0x1, 0x0)
io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0xfdef}])
io_submit(r5, 0x7, &(0x7f0000000e00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x2, r2, &(0x7f0000000480)="3f0331aa0f9b750e3f058d07051b1b8b3f508ce47d423122f77501735e99a057e851171fd445e193b0b8e26cbd446fba551bbd117cb8404096db714c3f6cd524c927d4c29be22d8508274bdf88e0a347983b9d138c210efdfa5a0937bde80b82901cf25dbfeca14449aa88ff36d4e46e84db3c1598b64fb60191fcf4a76d11ceee57c387d1a828aa69d512759de6626a33f082a4fe962005f6a778f7546110d79dcc1737e073b66c31da2531adfca13fbff408f7667c063510b088f51fbd26e39271eb5f7c887f65726fd7e6ea1159df8ee76d0ed2f2e19fecf98f5c145de27c2c3b3d88c0984f156fb638d171b1c5a7a9ec093c9a16", 0xf6, 0x8, 0x0, 0x2, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000380)="405f38a7328b9b484576f484634cb4c67c9efbe115d9533b2c47b3fc20e58879fa129a7803b7dcf446e887ee9b75a6aa99417bef6ce01804fcfc165f8862a85555fe00b5e0ae06168bd0ba8dd84039", 0x4f, 0x80000000, 0x0, 0x0, r1}, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x28, 0xffffffffffffffff, &(0x7f0000000740)="7adf575809de22c1e24f4ebb3c79270ca5025c59d72b59f0bbcb5098093efd4c4274cebb2d56009c6e29998fdbb5291fbdd33fe90a6354f9878eb99574c5f267ecc42f2ef46b0409e95603e64d19160ee0b42d66aa0ca918bccba1b6d9f94e4156feb79f303693b6ec6096194c5cf9c9e00e871f32fc6260b27a953194e19dd9f2d7451281007c2dbe2a59805f46683adfb5c5b84ea36e87674d055f938600ebfc0dcef34dadb2a01ca23fe3d3471274f692953f616c2337412693f78b73bbb7e4ccd8f5e64aeb0015d37f8a", 0xcc, 0x7, 0x0, 0x0, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="c74863", 0x3, 0x1fffc000, 0x0, 0x2, r1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f0000000900)="9de6cb5afc678a44fc9c74c2f5e635f3405e2ae998efa577b2817e2d8342300341e5645d33f73eac945b59f0edb8245a7de8be6fdacd62e75de3fdf7d6be6dea95c08a2cbbd120dbdd78fadd1e9b392bcc15466410cd0cd740ba5bda25fbd1463fa13441d8982a0ca4ae94ec5f1bdc59db650420c5d88585d3e3614c9d39371f5cb68120d052be9ff61f7329be2dad8dd5e089b95079b3eed6c1668a228439e3f9c35428a0063a739bca7f08481ae6f07e748c0d75ca1d574cb497f6259c35419036c9ddc11f9e858e2824c75727d71c80d3c00d0de1b18ea6dea8ef9f172c5bc9c9", 0xe2, 0x7, 0x0, 0x2}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000d40)="a30e554e4e50b305d5abb55bf284fd7bdd1ac24c94f44a8aee3bea3fdd0dfdd378f092d229c7543c2a4119ed55720c06ac31bf4a04c26103311db5a165a5d1bf4cc8a647413eb6ecdc1a98a1bc3950fc0454c7772237375026360e57047b651e", 0x60, 0x0, 0x0, 0x3, r1}])

12m10.626255933s ago: executing program 33 (id=1493):
setfsuid(0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x7000000)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
chroot(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)

12m7.680228886s ago: executing program 34 (id=1504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})

12m4.077720134s ago: executing program 5 (id=1511):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

12m3.819769049s ago: executing program 5 (id=1513):
eventfd(0x0)
syz_emit_vhci(0x0, 0x0)

12m2.638301952s ago: executing program 5 (id=1515):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

12m1.858216939s ago: executing program 35 (id=1515):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

11m19.996722608s ago: executing program 36 (id=1580):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000700)={0x2, {0x0, 0x9, 0x2, 0x100}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000001000611158000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close(r7)

11m17.636259802s ago: executing program 37 (id=1593):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})

6m49.554589021s ago: executing program 2 (id=2211):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005010000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0xfffffffd, 0xe, 0x1bf, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
gettid()
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001800)={0x0, 0xda3b, 0x6})
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)

6m48.219265232s ago: executing program 2 (id=2214):
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x204200)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x801, 0x400000, 0x0, 'queue0\x00', 0x5})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x101000, 0x2, 0x2}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}})
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121142, 0x125)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)

6m48.12018715s ago: executing program 9 (id=2215):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

6m46.90765028s ago: executing program 2 (id=2217):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readv(r3, 0x0, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f00000000c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0x106, 0xa, 0x2, 0x0, @void, @value}, 0x28)
syz_open_dev$evdev(0x0, 0x2, 0x822b01)

6m43.225079017s ago: executing program 9 (id=2226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e4000000260001000000000000000000d40000800c000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50464dad7f2a778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086c"], 0xe4}], 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
sendto$inet(r7, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r7, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=<r8=>r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050003000000140004"], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r8], 0x48)

6m43.101968838s ago: executing program 2 (id=2228):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

6m42.703296128s ago: executing program 4 (id=2229):
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0x8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x4, 0x8, 0x10000006})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfb6})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}]})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x7})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18011f00000875d6234435f0aa70fccc54ecdfbb15f76b35db94d560fd04519243ece93a539c0178f3e0e362229948395d9abf97a3f14a520360a20b9a044fbc79054c0ca2e11d8ab02b525a2a3814b005f503be9ee8519e22e2212b4ac7920e3cec43030f1d438a2fcb0bbdf228b82f8dc24f250a0a1190747f28af07271375e3cedfce7257c36f0eb6b42cc6961cb356f8395ee7cd28963c4aefa0961d3eb4f88e1f8d35f19750f83985c351bde60a6604e7f579bb332533bbb1793d345e30bb963b9b8c4c8f8fa365a3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f00008b5000/0x1000)=nil)
r6 = memfd_create(&(0x7f0000000300)='\x00', 0x5)
open_by_handle_at(r6, 0x0, 0x80000)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="ddc0b81bf19c00c3c744240000100000c74424022400008700c7442406000000040f011c240f080f21f8351000000f0f23f8f30f43ceea0db1f934a900660f38820bf30f2c3b0f01d1b9f80a00000f3266bad004d2ac45a345a3004000003200", 0x60}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

6m42.698430168s ago: executing program 2 (id=2230):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, 0xfffffffffffffffe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
read(r4, 0x0, 0x0)
r5 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x52, @empty, @mcast1, 0x0, 0x8000, 0x101}})
openat$vnet(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)

6m42.078674132s ago: executing program 9 (id=2231):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r2, 0x0, 0x14)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500ce00", @ANYBLOB="e6331426f747c6f0dc411e3fc9340126c2b27c2e94d78bfd59faa0e68eb68b73b516bfb75d024de9d08bb6a1872f2164cd47eba7262f520849e35ccfa43c524575f26b376211ea6f23e86c06f1c01c82aed6f3583706096100ce402a5822731d4b7d424d8766a219be199f4799f12838ce9c1b7f1755ba9789e09aeff01e7e5ceeedd4b93548807a03fa4bf056feb391455a60ef00a6a139e94e8f69f40829c40c2552f80a109547e2ad0a0dc04a3891f2eb5c8068", @ANYBLOB="671f3db8113d96f7a3315cf025c32d0eb7b0ea2e686794caa9ac29b97434c902d92f18b28eb972648fd240b587002f50259ca65ddc6ef33734ff5ad15016cc936c69395f541edfbed6f7a7d6ba925005ea14b47a2ce69866b35716a4eb9342fc4ae6918fbe40d51444423aafd47486255b28056ca7c3604d279be1293ee8d97c1192139410eccdb7326ac2e1c78977cb3bedbb6d94b0570cb0d219ea409a9e2c92d2e44fa5848e690eed4b83eb64a0cbe8ad1088ef", @ANYBLOB="83b966fc9d3dcfb3bdc15a1126c8ebf501ae365273940994a2767a"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000002c00)={0x0, 0xfffffffffffffd65, &(0x7f0000002bc0)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e00", @ANYBLOB="f7", @ANYRESOCT], 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x6)
socket$inet6(0xa, 0x1, 0x0)
r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xe1da, 0x800}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)

6m40.918440783s ago: executing program 4 (id=2236):
r0 = socket(0x2a, 0x800000003, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x7, &(0x7f00003d8000/0x1000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x8, 0x48, 0x1, 0x16})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}})
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x68, 0x0, 0x0, 0x0, &(0x7f0000833000/0x3000)=nil, 0x3000, 0x16})
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040)
ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000300))

6m40.795193369s ago: executing program 2 (id=2237):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0xa000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)

6m39.750038844s ago: executing program 38 (id=2237):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0xa000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)

6m39.327648937s ago: executing program 9 (id=2240):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

6m38.969262931s ago: executing program 9 (id=2241):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
getrlimit(0x1, &(0x7f00000001c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unshare(0x4000280)
landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000a6a000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

6m37.695403109s ago: executing program 4 (id=2244):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
r4 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0)

6m36.363418676s ago: executing program 9 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0xfffffff9, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000440)}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x10, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0xfffffffc}}}}}}, 0x0)
connect$inet6(r2, 0x0, 0x0)
writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000540)}], 0x1)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0xffffffffffffffc0, 0x100000, 0x6, 0x5, 0xfffffffc, 0x5})
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38f3a, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x48}}, 0x0)

6m36.030302284s ago: executing program 39 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0xfffffff9, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000440)}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x10, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0xfffffffc}}}}}}, 0x0)
connect$inet6(r2, 0x0, 0x0)
writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000540)}], 0x1)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0xffffffffffffffc0, 0x100000, 0x6, 0x5, 0xfffffffc, 0x5})
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38f3a, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x48}}, 0x0)

6m36.013930526s ago: executing program 4 (id=2250):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

6m34.749468647s ago: executing program 4 (id=2253):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f00000000c0))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="26d1b3", 0x3, 0x40040, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0x106, 0xa, 0x2, 0x0, @void, @value}, 0x28)
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6m32.329926425s ago: executing program 4 (id=2260):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0xe81ef1d73062b24e, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6m31.266831881s ago: executing program 40 (id=2260):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0xe81ef1d73062b24e, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5m50.352958148s ago: executing program 5 (id=2261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, 0x0)
setreuid(0x0, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

5m49.901245063s ago: executing program 5 (id=2325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000080)="66baa0000f2318c744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0xc9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5m48.711515061s ago: executing program 5 (id=2330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8b5, 0x0, 0xfffffffc, 0x4, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x80000001, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000001, 0x3, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x534f, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x649, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0xbfb, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2ea9ebb1]}, 0x45c)
readv(0xffffffffffffffff, &(0x7f0000001900)=[{0x0}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x40)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
close(r1)

5m48.285158792s ago: executing program 41 (id=2330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8b5, 0x0, 0xfffffffc, 0x4, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x80000001, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000001, 0x3, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x534f, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x649, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0xbfb, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2ea9ebb1]}, 0x45c)
readv(0xffffffffffffffff, &(0x7f0000001900)=[{0x0}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x40)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
close(r1)

5m34.849618914s ago: executing program 3 (id=2351):
syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
io_uring_setup(0x2ba3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)

5m33.50018364s ago: executing program 3 (id=2353):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000080)="66baa0000f2318c744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0xc9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5m33.015535497s ago: executing program 3 (id=2355):
io_uring_setup(0x1782, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x2, 0x36})
syz_open_dev$cec(0x0, 0x0, 0x8240)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39)

5m31.254561591s ago: executing program 3 (id=2359):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
getrlimit(0x1, &(0x7f00000001c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unshare(0x4000280)
landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000a6a000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000005000/0x4000)=nil)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024})
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x2)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000002c0))

5m28.209990132s ago: executing program 3 (id=2362):
fcntl$notify(0xffffffffffffffff, 0x402, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

5m26.57370399s ago: executing program 3 (id=2365):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0x4, 0x0, 0x5}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x3784, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pipe(0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000001580)=""/209, 0xd1}, {&(0x7f0000001680)=""/241, 0xf1}, {&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x7)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000007, 0x11, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)

5m11.276490178s ago: executing program 42 (id=2365):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0x4, 0x0, 0x5}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x3784, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pipe(0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000001580)=""/209, 0xd1}, {&(0x7f0000001680)=""/241, 0xf1}, {&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x7)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000007, 0x11, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)

13.695972766s ago: executing program 8 (id=2985):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x2)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0))

11.58441311s ago: executing program 7 (id=2990):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000031400000011228d0000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x18)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6, 0x4034, 0x401, 0xfe, 0x7fffffffffffffff, 0xffffffffffffffff})

10.89598269s ago: executing program 7 (id=2993):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x3, 0x8000000003c)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400ddfff088244500"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)
socket(0x11, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r6)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000540)="09575aa354c71888929a01e2ffff", 0xe)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000740)={0x2, 0x2, 0x1, {0x2, @vbi={0x3, 0x7, 0x89, 0x34565559, [0x5, 0xfffffff5], [0x5, 0x5], 0x2}}, 0x1})

10.827568876s ago: executing program 0 (id=2994):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x54917000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c)
ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000007e9010000000000000000030000010900010073797a3100000000"], 0x20}}, 0x8000000)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r6)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9.083178782s ago: executing program 7 (id=2996):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0)

8.931519141s ago: executing program 0 (id=2997):
socket(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)

7.727968863s ago: executing program 0 (id=3000):
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000)
read$char_usb(r1, &(0x7f0000000380)=""/199, 0xc7)
eventfd2(0x45, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

7.707800198s ago: executing program 8 (id=3001):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f000000ef40)=0x7)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140))
socket$inet6(0xa, 0x5, 0x0)
listen(0xffffffffffffffff, 0x3)
socket$tipc(0x1e, 0x5, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
socket$inet6(0xa, 0x40000080806, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB])

6.542949346s ago: executing program 8 (id=3002):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
mknod(0x0, 0xc000, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x5f, 0x4)
connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x8, "4820c7523b7dbf3a546294abe1d36a3b"}, 0x18)
r2 = add_key$keyring(&(0x7f0000004f40), &(0x7f0000004f80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000003ec0)='dns_resolver\x00', 0x0, 0x0, 0x0, r2)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@mcast1, @in=@remote, 0x4e21, 0x40, 0x4e22, 0x8, 0x2, 0xa0, 0x20, 0x3c}, {0x4, 0x10, 0xffffffff, 0x8, 0x0, 0x5a3, 0x2, 0x2}, {0x4, 0x8, 0x1, 0x9}, 0x5, 0x6e6bbe, 0x2, 0x1, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0xc3}, 0x2, @in6=@local, 0x3500, 0x1, 0x1, 0x8, 0x6, 0xdb8a, 0x400}}, 0xe8)
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x88, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r3], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.251437896s ago: executing program 6 (id=3003):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000031400000011228d0000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x18)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6, 0x4034, 0x401, 0xfe, 0x7fffffffffffffff, 0xffffffffffffffff})

5.866251288s ago: executing program 1 (id=3004):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02", 0x1c)
r2 = accept$alg(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x0, 0x0)

5.399637744s ago: executing program 1 (id=3005):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
getpriority(0x0, 0x0)
r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12)

5.215871926s ago: executing program 6 (id=3006):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002340)={0x1224, r2, 0x600, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf3, 0x3, "68356ac1492dfceab0b92bbb747e87a6f78fb9c5a025df426b488c07f76bf2be4da60ef6fb76c8d9bbd587cc6078d6fefc653c6b4ec4a1dfaeb2c2893d91ad811da6f795d23b63e748baa936683e04fee349ad25e939e8081fbd996683c1e452d203cb85c43d2596470285a510127def5a86de427ce67b25be3f302f25abe565ec7ede3f8aecaa0943a84d39480b8f4456a0699c1fe2685f11816f978afc48c743f1279d22412c38aed4d13fe128f5f59d192ea8bb470185d44107462432e68bc9dfd2b23ef0b1ba6e3201dd8d0c49214fb4d4d4a230d88524b89ceb41251ee8fe2c46aebf4cab111c2cb9cd6d04f3"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa83}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffe5a4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9b4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1224}}, 0x4000)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2080)

5.168835734s ago: executing program 8 (id=3007):
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x82fa, 0x0, '\x00U\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

4.201742405s ago: executing program 1 (id=3008):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=0x0}})

4.092394639s ago: executing program 8 (id=3009):
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1049, &(0x7f00000003c0)={0x0, 0x463c, 0x26704, 0x4, 0x8002b1, 0x0, r0}, &(0x7f00000001c0), &(0x7f00000002c0))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x7fc)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

4.077927948s ago: executing program 0 (id=3010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'pim6reg1\x00', <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r8, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a180400aaaaaaaaaafd00000a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r7], 0x68}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])

4.003238794s ago: executing program 6 (id=3011):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0xa000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

3.691965718s ago: executing program 7 (id=3012):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f000000ef40)=0x7)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140))
socket$inet6(0xa, 0x5, 0x0)
listen(0xffffffffffffffff, 0x3)
socket$tipc(0x1e, 0x5, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
socket$inet6(0xa, 0x40000080806, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dy'])

3.234550741s ago: executing program 6 (id=3013):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0)
userfaultfd(0x80801)

2.623320973s ago: executing program 8 (id=3014):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
write$dsp(r4, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x7f4, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3a08}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x0, 0xc, 0x80db}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x300f538b}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20008010}, 0x7cf9a37aa126917b)
ioctl$SNDCTL_DSP_RESET(r4, 0x4d00, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @loopback}, 0x1c)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
ftruncate(r7, 0x51a9497)
socket(0x10, 0x3, 0x0)

2.587375083s ago: executing program 1 (id=3015):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000800)="1c0000001e005f03142000000000000000000000010000000000080008", 0x1d)

2.414756872s ago: executing program 0 (id=3016):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000031400000011228d0000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x18)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6, 0x4034, 0x401, 0xfe, 0x7fffffffffffffff, 0xffffffffffffffff})

1.399560995s ago: executing program 6 (id=3017):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

1.392720623s ago: executing program 7 (id=3018):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
connect$rxrpc(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf252800000005002e000f0000000c002d000200aaaaaaaaaaaa05002b000300000008000200", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40850)

323.395765ms ago: executing program 1 (id=3019):
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x82fa, 0x0, '\x00U\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

91.458707ms ago: executing program 0 (id=3020):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
flock(0xffffffffffffffff, 0x6)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa0201, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="650f01ca66b9800000c00f326635004000000f3066b8008000000f23d00f21f866352000000e0f23f865dee5f26f0faa66b9ef0800000f3266b9620a00000f320f22420f2337", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

62.939261ms ago: executing program 7 (id=3021):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x7f}, 'port0\x00', 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x1})

290.605µs ago: executing program 6 (id=3022):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
write$dsp(r4, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x7f4, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3a08}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x0, 0xc, 0x80db}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x300f538b}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20008010}, 0x7cf9a37aa126917b)
ioctl$SNDCTL_DSP_RESET(r4, 0x4d00, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @loopback}, 0x1c)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
ftruncate(r7, 0x51a9497)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x90)

0s ago: executing program 1 (id=3023):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0xa000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

kernel console output (not intermixed with test programs):

810.416651][T13607] netlink: 198084 bytes leftover after parsing attributes in process `syz.4.1924'.
[  810.632916][T13606] netlink: 'syz.9.1923': attribute type 11 has an invalid length.
[  811.121586][ T5820] usb 9-1: Manufacturer: syz
[  811.132466][ T5820] hub 9-1:4.0: USB hub found
[  811.479362][ T5820] hub 9-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  812.834900][ T9689] usb 9-1: USB disconnect, device number 6
[  813.302707][T13650] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  813.311572][T13650] overlayfs: missing 'lowerdir'
[  815.688853][T13660] netlink: 'syz.6.1932': attribute type 9 has an invalid length.
[  817.672904][T13673] evm: overlay not supported
[  818.173496][T10064] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  818.217994][T13692] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  818.352965][T10064] usb 5-1: Using ep0 maxpacket: 32
[  818.381557][T10064] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.551361][T10064] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  818.594328][T10064] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  818.636060][T10064] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  818.698002][T10064] usb 5-1: Product: syz
[  818.717394][T10064] usb 5-1: Manufacturer: syz
[  819.105069][T13694] delete_channel: no stack
[  819.257353][T10064] hub 5-1:4.0: USB hub found
[  819.312710][T10064] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  820.354609][T11492] Bluetooth: hci0: connection err: -111
[  820.893125][ T5904] usb 5-1: USB disconnect, device number 12
[  821.743055][T10064] IPVS: starting estimator thread 0...
[  821.973981][T13751] IPVS: using max 20 ests per chain, 48000 per kthread
[  823.558890][T13762] netlink: 'syz.9.1952': attribute type 10 has an invalid length.
[  823.660968][T13762] syz_tun: entered promiscuous mode
[  823.687128][T13762] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  824.753649][T13776] delete_channel: no stack
[  825.058841][T13773] orangefs_mount: mount request failed with -4
[  825.403454][T13785] delete_channel: no stack
[  826.302927][ T9689] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  826.492760][ T9689] usb 7-1: Using ep0 maxpacket: 32
[  826.504338][ T9689] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.537973][ T9689] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.672203][ T9689] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  826.776463][ T9689] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  826.837884][ T9689] usb 7-1: Product: syz
[  826.842111][ T9689] usb 7-1: Manufacturer: syz
[  826.866864][ T9689] hub 7-1:4.0: USB hub found
[  827.164615][ T9689] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  827.353697][T11492] Bluetooth: hci3: unexpected event for opcode 0x1005
[  827.461913][T13824] syz.2.1965: attempt to access beyond end of device
[  827.461913][T13824] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  827.475000][T13824] exFAT-fs (nbd2): unable to read boot sector
[  827.481087][T13824] exFAT-fs (nbd2): failed to read boot sector
[  827.487556][T13824] exFAT-fs (nbd2): failed to recognize exfat type
[  827.647529][T13834] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  827.875578][T13839] netlink: 'syz.2.1967': attribute type 10 has an invalid length.
[  828.536317][T13848] bridge0: port 3(hsr_slave_1) entered blocking state
[  828.543211][T13848] bridge0: port 3(hsr_slave_1) entered disabled state
[  828.550089][T13848] hsr_slave_1: entered allmulticast mode
[  828.556437][T13848] hsr_slave_1: left allmulticast mode
[  829.228671][T13867] No such timeout policy "syz1"
[  829.243473][ T9689] usb 7-1: USB disconnect, device number 13
[  830.886769][T13887] hpfs: Bad magic ... probably not HPFS
[  833.274221][T13920] syz.8.1977: attempt to access beyond end of device
[  833.274221][T13920] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  833.287066][T13920] exFAT-fs (nbd8): unable to read boot sector
[  833.293210][T13920] exFAT-fs (nbd8): failed to read boot sector
[  833.299288][T13920] exFAT-fs (nbd8): failed to recognize exfat type
[  833.841510][T13925] netlink: 'syz.6.1979': attribute type 10 has an invalid length.
[  834.105513][T13925] syz_tun: entered promiscuous mode
[  834.116509][T13925] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  834.127759][T13931] serio: Serial port ttyS3
[  834.452709][ T5820] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  834.626581][ T5820] usb 9-1: device descriptor read/64, error -71
[  834.948841][ T5820] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  835.382744][ T5820] usb 9-1: device descriptor read/64, error -71
[  835.495788][ T5820] usb usb9-port1: attempt power cycle
[  835.904165][ T5820] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  836.122919][ T5820] usb 9-1: device descriptor read/8, error -71
[  836.321815][T13969] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  836.421693][ T5820] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  836.605830][ T5820] usb 9-1: device descriptor read/8, error -71
[  836.805142][T13971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1988'.
[  836.838518][ T5820] usb usb9-port1: unable to enumerate USB device
[  838.336961][T13996] netlink: 'syz.6.1992': attribute type 10 has an invalid length.
[  840.008596][T14026] No such timeout policy "syz1"
[  841.208340][T14040] netlink: 'syz.8.2000': attribute type 11 has an invalid length.
[  841.655638][T14049] syz.2.2003: attempt to access beyond end of device
[  841.655638][T14049] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  841.668705][T14049] exFAT-fs (nbd2): unable to read boot sector
[  841.674893][T14049] exFAT-fs (nbd2): failed to read boot sector
[  841.680965][T14049] exFAT-fs (nbd2): failed to recognize exfat type
[  842.208783][T14054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  842.813536][T14061] netlink: 'syz.2.2006': attribute type 10 has an invalid length.
[  846.687589][T14089] delete_channel: no stack
[  847.113191][ T5820] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  847.314361][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  847.333158][ T5820] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  847.420374][ T5820] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  847.477535][ T5820] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  847.532708][ T5820] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  847.589000][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0
[  847.608266][ T5820] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  847.632740][ T5820] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  847.651869][ T5820] usb 5-1: Product: syz
[  847.661643][ T5820] usb 5-1: Manufacturer: syz
[  847.682238][ T5820] usb 5-1: SerialNumber: syz
[  847.709232][ T5820] usb 5-1: config 0 descriptor??
[  847.725183][ T5820] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  847.758939][ T5820] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  847.997074][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  848.005660][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  848.016249][T14115] SET target dimension over the limit!
[  848.043093][T14128] netlink: 'syz.6.2020': attribute type 10 has an invalid length.
[  848.054312][    T9] usb 5-1: USB disconnect, device number 13
[  848.060596][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  848.106336][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  848.922889][    T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  849.081869][ T5904] libceph: connect (1)[c::]:6789 error -101
[  849.103786][    T9] usb 9-1: Using ep0 maxpacket: 8
[  849.119646][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  849.132850][    T9] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  849.166833][    T9] usb 9-1: config 179 has no interface number 0
[  849.184816][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  849.238385][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  849.294973][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  850.098671][T14144] ceph: No mds server is up or the cluster is laggy
[  850.144326][ T5904] libceph: connect (1)[c::]:6789 error -101
[  850.150396][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  850.163752][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  850.192245][    T9] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  850.271112][    T9] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  850.292809][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.339667][T14133] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  851.080880][T14160] delete_channel: no stack
[  851.363043][T10064] usb 9-1: USB disconnect, device number 11
[  851.363043][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  851.363178][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  852.072929][ T3076] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  852.231771][T14188] netlink: 'syz.9.2032': attribute type 10 has an invalid length.
[  852.444924][ T3076] usb 7-1: device descriptor read/64, error -71
[  853.471057][T14180] delete_channel: no stack
[  853.590995][ T3076] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  853.756941][T11492] Bluetooth: hci3: connection err: -111
[  853.903333][ T3076] usb 7-1: device descriptor read/64, error -71
[  854.102032][ T3076] usb usb7-port1: attempt power cycle
[  855.243413][T14218] can0: slcan on ttyS3.
[  855.559807][ T3076] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  855.954423][T14220] can0 (unregistered): slcan off ttyS3.
[  856.062899][ T3076] usb 7-1: device not accepting address 16, error -71
[  856.860196][T14242] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  857.050890][T14227] delete_channel: no stack
[  858.852703][T14261] can0: slcan on ttyS3.
[  860.102981][T14275] netlink: 'syz.9.2045': attribute type 10 has an invalid length.
[  860.314767][T14262] can0 (unregistered): slcan off ttyS3.
[  861.654225][T11492] Bluetooth: hci1: command 0x0406 tx timeout
[  863.542250][T14319] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  863.552842][T14319] overlayfs: missing 'lowerdir'
[  864.403126][T14321] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  865.012157][T14324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  865.969127][T14348] netlink: 'syz.8.2062': attribute type 10 has an invalid length.
[  866.487280][T14357] bridge0: port 3(hsr_slave_1) entered blocking state
[  866.619324][T14357] bridge0: port 3(hsr_slave_1) entered disabled state
[  866.707290][T14357] hsr_slave_1: entered allmulticast mode
[  866.740794][T14357] hsr_slave_1: left allmulticast mode
[  867.180682][T14355] delete_channel: no stack
[  867.955266][T14384] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  868.066033][T14386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  868.074955][T14386] overlayfs: missing 'lowerdir'
[  868.711995][T11492] Bluetooth: Frame is too long (len 18, expected len 4)
[  869.639576][T14389] syz.8.2066 (14389) used greatest stack depth: 18392 bytes left
[  870.037959][T14397] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  870.396902][T14405] tipc: Started in network mode
[  870.402084][T14405] tipc: Node identity 7, cluster identity 4711
[  870.409042][T14405] tipc: Node number set to 7
[  870.417220][T14405] tipc: Cannot configure node identity twice
[  870.658645][T14404] netlink: 'syz.9.2069': attribute type 9 has an invalid length.
[  872.607786][T14428] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  872.616476][T14428] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  872.625035][T14428] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  874.886216][ T5820] libceph: connect (1)[c::]:6789 error -101
[  874.892286][ T5820] libceph: mon0 (1)[c::]:6789 connect error
[  875.067737][T14461] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  875.076526][T14461] overlayfs: missing 'lowerdir'
[  875.192428][T14454] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  875.664927][T14452] ceph: No mds server is up or the cluster is laggy
[  875.870120][T10064] libceph: connect (1)[c::]:6789 error -101
[  875.876665][T10064] libceph: mon0 (1)[c::]:6789 connect error
[  875.885133][T14466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  875.902682][T14466] netlink: 'syz.2.2084': attribute type 3 has an invalid length.
[  875.910429][T14466] netlink: 'syz.2.2084': attribute type 2 has an invalid length.
[  875.918231][T14466] netlink: 198084 bytes leftover after parsing attributes in process `syz.2.2084'.
[  877.211721][T10064] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  877.542752][T10064] usb 9-1: Using ep0 maxpacket: 32
[  877.577406][T10064] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  877.708185][T10064] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  877.878268][T10064] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  877.906358][T10064] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  878.010293][T10064] usb 9-1: config 0 interface 0 has no altsetting 0
[  878.040694][T10064] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  878.078103][T10064] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  878.096354][T14508] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2092'.
[  878.116519][T10064] usb 9-1: Product: syz
[  878.132904][T10064] usb 9-1: Manufacturer: syz
[  878.137539][T10064] usb 9-1: SerialNumber: syz
[  878.212922][T10064] usb 9-1: config 0 descriptor??
[  878.249192][T10064] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  878.303863][T10064] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  878.604790][T14469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.669189][T14469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.713115][T14469] SET target dimension over the limit!
[  878.774661][ T5904] usb 9-1: USB disconnect, device number 12
[  878.798475][ T5904] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  879.133022][T14523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  879.141879][T14523] overlayfs: missing 'lowerdir'
[  879.852793][ T3076] IPVS: starting estimator thread 0...
[  880.042898][T14526] IPVS: using max 22 ests per chain, 52800 per kthread
[  880.732689][T14534] can0: slcan on ttyS3.
[  881.532823][ T5872] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  881.737673][ T5872] usb 9-1: Using ep0 maxpacket: 32
[  881.774713][T14535] can0 (unregistered): slcan off ttyS3.
[  881.886811][ T5872] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  881.908102][ T5872] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  881.919869][ T5872] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  881.936557][ T5872] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  881.951082][ T5872] usb 9-1: config 0 interface 0 has no altsetting 0
[  882.069813][ T5872] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  882.870241][ T5872] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  882.894295][ T5872] usb 9-1: Product: syz
[  882.898839][ T5872] usb 9-1: Manufacturer: syz
[  882.957284][ T5872] usb 9-1: SerialNumber: syz
[  882.985323][ T5872] usb 9-1: config 0 descriptor??
[  883.008008][ T5872] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  883.050542][ T5872] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  883.812273][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.833001][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.874253][T14532] SET target dimension over the limit!
[  883.993366][ T5872] usb 9-1: USB disconnect, device number 13
[  883.999343][    C0] ldusb 9-1:0.0: usb_submit_urb failed (-19)
[  884.049069][ T5872] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  885.781390][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2110'.
[  886.349209][T14596] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  886.682837][T14612] can0: slcan on ttyS3.
[  887.323897][T14613] can0 (unregistered): slcan off ttyS3.
[  890.119073][T14651] netlink: 'syz.8.2115': attribute type 9 has an invalid length.
[  891.890113][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2124'.
[  893.081532][T14683] can0: slcan on ttyS3.
[  893.153330][T14683] can0 (unregistered): slcan off ttyS3.
[  894.732792][ T9689] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  894.882209][T14679] delete_channel: no stack
[  895.646454][ T9689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.666805][ T9689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  895.737886][ T9689] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  895.787015][ T9689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.826568][ T9689] usb 5-1: config 0 descriptor??
[  896.040494][ T9689] usbhid 5-1:0.0: can't add hid device: -71
[  896.057043][ T9689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  896.095466][ T5820] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  896.104115][ T9689] usb 5-1: USB disconnect, device number 14
[  896.450424][ T5820] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.474287][ T5820] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  896.655426][ T5820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.875603][ T5820] usb 9-1: config 0 descriptor??
[  896.910073][T14722] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  897.058291][ T5820] pwc: Askey VC010 type 2 USB webcam detected.
[  898.207907][ T5820] pwc: recv_control_msg error -32 req 02 val 2b00
[  898.266728][ T5820] pwc: recv_control_msg error -32 req 02 val 2700
[  898.296816][ T5820] pwc: recv_control_msg error -32 req 02 val 2c00
[  898.435714][ T5820] pwc: recv_control_msg error -32 req 04 val 1000
[  898.686244][ T5820] pwc: recv_control_msg error -32 req 04 val 1300
[  898.726246][T14756] netlink: 'syz.2.2139': attribute type 9 has an invalid length.
[  898.786510][ T5820] pwc: recv_control_msg error -32 req 04 val 1400
[  898.969359][T14757] can0: slcan on ttyS3.
[  898.984480][ T5820] pwc: recv_control_msg error -32 req 02 val 2000
[  898.997596][ T5820] pwc: recv_control_msg error -32 req 02 val 2100
[  899.020440][ T5820] pwc: recv_control_msg error -71 req 04 val 1500
[  899.056849][ T5820] pwc: recv_control_msg error -71 req 02 val 2500
[  899.084896][ T5820] pwc: recv_control_msg error -71 req 02 val 2400
[  899.265035][ T5820] pwc: recv_control_msg error -71 req 02 val 2600
[  899.282722][ T5820] pwc: recv_control_msg error -71 req 02 val 2900
[  899.302725][ T5820] pwc: recv_control_msg error -71 req 02 val 2800
[  899.313054][ T5820] pwc: recv_control_msg error -71 req 04 val 1100
[  899.323400][ T5820] pwc: recv_control_msg error -71 req 04 val 1200
[  899.354512][ T5820] pwc: Registered as video103.
[  900.013386][T14758] can0 (unregistered): slcan off ttyS3.
[  900.135613][ T5820] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input31
[  900.170824][ T5820] usb 9-1: USB disconnect, device number 14
[  900.654884][T14780] netlink: 'syz.9.2145': attribute type 9 has an invalid length.
[  903.502807][T12071] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  903.672425][T12071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.700999][T12071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  904.372725][T12071] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  904.384022][T12071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.505703][T12071] usb 3-1: config 0 descriptor??
[  904.851421][T12071] usbhid 3-1:0.0: can't add hid device: -71
[  904.879859][T12071] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  904.985346][T14823] netlink: 'syz.6.2154': attribute type 9 has an invalid length.
[  905.540287][T12071] usb 3-1: USB disconnect, device number 43
[  905.872298][T14833] can0: slcan on ttyS3.
[  905.944225][T14833] can0 (unregistered): slcan off ttyS3.
[  905.976487][T12071] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  906.118098][T14801] delete_channel: no stack
[  906.195665][T12071] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  906.226113][T12071] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  906.259573][T12071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.344132][T12071] usb 3-1: config 0 descriptor??
[  906.382229][T12071] pwc: Askey VC010 type 2 USB webcam detected.
[  907.576650][T12071] pwc: recv_control_msg error -32 req 02 val 2b00
[  907.603640][T12071] pwc: recv_control_msg error -32 req 02 val 2700
[  907.655730][T12071] pwc: recv_control_msg error -32 req 02 val 2c00
[  907.686857][T12071] pwc: recv_control_msg error -32 req 04 val 1000
[  907.696462][T12071] pwc: recv_control_msg error -32 req 04 val 1300
[  907.705174][T12071] pwc: recv_control_msg error -32 req 04 val 1400
[  907.712348][T12071] pwc: recv_control_msg error -32 req 02 val 2000
[  907.720009][T12071] pwc: recv_control_msg error -32 req 02 val 2100
[  907.728293][T12071] pwc: recv_control_msg error -71 req 04 val 1500
[  907.838810][T12071] pwc: recv_control_msg error -71 req 02 val 2500
[  907.848328][T12071] pwc: recv_control_msg error -71 req 02 val 2400
[  907.863113][T12071] pwc: recv_control_msg error -71 req 02 val 2600
[  907.871666][T12071] pwc: recv_control_msg error -71 req 02 val 2900
[  907.904674][T12071] pwc: recv_control_msg error -71 req 02 val 2800
[  908.602974][T12071] pwc: recv_control_msg error -71 req 04 val 1100
[  908.612814][T12071] pwc: recv_control_msg error -71 req 04 val 1200
[  908.620175][T12071] pwc: Registered as video103.
[  908.631542][T12071] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32
[  908.659938][T12071] usb 3-1: USB disconnect, device number 44
[  910.791941][T12071] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  911.157489][T12071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.221496][T12071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.292945][T12071] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  911.302027][T12071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.326342][T12071] usb 5-1: config 0 descriptor??
[  911.643032][T14887] can0: slcan on ttyS3.
[  912.474408][T14887] can0 (unregistered): slcan off ttyS3.
[  912.662831][ T5911] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  912.770367][T14895] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2167'.
[  912.845532][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  912.887508][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  912.898304][ T5911] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  912.909481][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.964322][ T5911] usb 7-1: config 0 descriptor??
[  913.268530][ T5911] usbhid 7-1:0.0: can't add hid device: -71
[  914.080466][T12071] usbhid 5-1:0.0: can't add hid device: -71
[  914.512814][T12071] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  914.533606][ T5911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  914.576472][T12071] usb 5-1: USB disconnect, device number 15
[  914.639274][ T5911] usb 7-1: USB disconnect, device number 18
[  916.166983][ T9689] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  918.517544][ T9689] usb 5-1: device descriptor read/all, error -71
[  919.422943][ T9689] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  919.684235][ T9689] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  919.910427][ T9689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.922160][ T9689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  919.941622][ T9689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  919.956380][ T9689] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  920.299009][ T9689] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  920.307349][T12071] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  920.307863][ T9689] usb 5-1: Manufacturer: syz
[  920.322406][ T9689] usb 5-1: config 0 descriptor??
[  920.494775][T12071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.571407][T12071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.626312][T12071] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  920.637203][T12071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.669219][T12071] usb 3-1: config 0 descriptor??
[  920.833989][T14942] delete_channel: no stack
[  920.893233][ T9689] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  920.900703][ T9689] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[  920.910424][T14967] orangefs_mount: mount request failed with -4
[  920.939208][ T9689] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  921.574370][T11091] usb 5-1: USB disconnect, device number 17
[  921.692795][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  921.852973][    T9] usb 9-1: Using ep0 maxpacket: 8
[  921.868095][    T9] usb 9-1: unable to read config index 0 descriptor/start: -61
[  921.885538][    T9] usb 9-1: can't read configurations, error -61
[  922.042941][    T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  922.212946][    T9] usb 9-1: Using ep0 maxpacket: 8
[  922.346841][    T9] usb 9-1: unable to read config index 0 descriptor/start: -61
[  922.524136][T15015] No such timeout policy "syz1"
[  922.537104][T12071] usbhid 3-1:0.0: can't add hid device: -71
[  922.613475][    T9] usb 9-1: can't read configurations, error -61
[  922.659132][T12071] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  922.880179][    T9] usb usb9-port1: attempt power cycle
[  922.908392][T12071] usb 3-1: USB disconnect, device number 45
[  923.669432][    T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  923.717859][    T9] usb 9-1: Using ep0 maxpacket: 8
[  923.743475][    T9] usb 9-1: unable to read config index 0 descriptor/start: -61
[  924.202772][    T9] usb 9-1: can't read configurations, error -61
[  924.342764][    T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  924.582846][    T9] usb 9-1: device not accepting address 18, error -71
[  924.670487][    T9] usb usb9-port1: unable to enumerate USB device
[  925.459862][T15046] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2195'.
[  925.469775][T15046] netlink: 'syz.4.2195': attribute type 1 has an invalid length.
[  927.605808][T15085] netlink: 'syz.9.2202': attribute type 11 has an invalid length.
[  928.454650][T12275] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  928.645258][ T5820] libceph: connect (1)[c::]:6789 error -101
[  928.651354][ T5820] libceph: mon0 (1)[c::]:6789 connect error
[  928.665523][T12275] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.687865][T12275] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.706083][T12275] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  928.729542][T15092] ceph: No mds server is up or the cluster is laggy
[  928.733958][T12275] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.770787][T12275] usb 9-1: config 0 descriptor??
[  929.392911][ T5874] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  930.443028][ T5874] usb 10-1: Using ep0 maxpacket: 8
[  931.409825][T12275] usbhid 9-1:0.0: can't add hid device: -71
[  931.422256][T12275] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  931.441015][T12275] usb 9-1: USB disconnect, device number 19
[  931.532223][ T5874] usb 10-1: unable to read config index 0 descriptor/start: -61
[  931.585462][ T5874] usb 10-1: can't read configurations, error -61
[  932.623643][ T5874] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  932.716897][    T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  932.892733][    T9] usb 7-1: Using ep0 maxpacket: 32
[  932.920452][    T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  932.938853][    T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  932.991740][    T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  933.396295][T15144] netlink: 'syz.8.2213': attribute type 11 has an invalid length.
[  934.062710][    T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  934.085160][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  934.097019][    T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  934.112676][    T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  934.122861][    T9] usb 7-1: Product: syz
[  934.127031][    T9] usb 7-1: Manufacturer: syz
[  934.141764][    T9] usb 7-1: SerialNumber: syz
[  934.182036][    T9] usb 7-1: config 0 descriptor??
[  934.195191][    T9] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  934.233089][    T9] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  934.544937][T15125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  934.562956][ T5874] usb 10-1: device descriptor read/64, error -71
[  934.573788][T15125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  934.673176][    T9] usb 7-1: USB disconnect, device number 19
[  934.683014][ T5874] usb usb10-port1: attempt power cycle
[  934.710616][    T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  935.042822][ T5874] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  935.104823][ T5874] usb 10-1: Using ep0 maxpacket: 32
[  935.111513][ T5874] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.152686][ T5874] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.191613][ T5874] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  935.220326][ T5874] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  935.229941][ T5874] usb 10-1: Product: syz
[  935.240896][ T5874] usb 10-1: Manufacturer: syz
[  935.275796][ T5874] hub 10-1:4.0: USB hub found
[  935.482984][ T5874] hub 10-1:4.0: 2 ports detected
[  937.249489][ T5911] usb 10-1: USB disconnect, device number 7
[  937.672990][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'.
[  938.440571][T15222] netlink: 'syz.9.2226': attribute type 11 has an invalid length.
[  939.332717][ T5874] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  939.582746][ T5874] usb 10-1: Using ep0 maxpacket: 32
[  939.602899][ T5874] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  939.622286][ T5874] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  939.683370][ T5874] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  939.718585][ T5874] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  939.754145][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  939.922481][ T5874] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  939.948102][ T5874] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  939.973863][ T5874] usb 10-1: Product: syz
[  939.978149][ T5874] usb 10-1: Manufacturer: syz
[  940.003108][ T5874] usb 10-1: SerialNumber: syz
[  940.025800][ T5874] usb 10-1: config 0 descriptor??
[  940.037595][T10210] bond0: (slave syz_tun): Releasing backup interface
[  940.041562][ T5874] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  940.079301][ T5874] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  940.395058][T15224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.464967][T15224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.658730][ T5820] usb 10-1: USB disconnect, device number 8
[  940.658876][    C0] ldusb 10-1:0.0: usb_submit_urb failed (-19)
[  941.140414][ T5820] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  941.279104][T15258] bridge0: port 3(hsr_slave_1) entered blocking state
[  941.286269][T15258] bridge0: port 3(hsr_slave_1) entered disabled state
[  941.293281][T15258] hsr_slave_1: entered allmulticast mode
[  941.300142][T15258] hsr_slave_1: left allmulticast mode
[  941.532066][T11836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.015635][T11836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.394681][T11836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.335795][T15282] slcan: can't register candev
[  943.340734][T15282] Falling back ldisc for ttyS3.
[  943.487620][T15272] bond0: (slave syz_tun): Releasing backup interface
[  943.769661][T10429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  944.037699][T15302] netlink: 'syz.4.2244': attribute type 9 has an invalid length.
[  944.476394][T10429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  944.516071][T10429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  944.528128][T10429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  944.544538][T10429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  944.553369][T10429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  944.727170][T11836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.349739][T11836] bridge_slave_1: left allmulticast mode
[  946.383540][T11836] bridge_slave_1: left promiscuous mode
[  946.425045][T15315] delete_channel: no stack
[  946.553189][T11836] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.595911][T11836] bridge_slave_0: left allmulticast mode
[  946.601819][T11836] bridge_slave_0: left promiscuous mode
[  946.602095][T11492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  946.634312][T11492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  946.638255][T11836] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.645028][T11492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  946.663080][T11492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  946.671276][T11492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  946.679376][T11492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  946.686864][T11492] Bluetooth: hci0: command tx timeout
[  948.146336][T15341] slcan: can't register candev
[  948.152423][T15341] Falling back ldisc for ttyS3.
[  948.291264][T15347] netlink: 'syz.8.2256': attribute type 10 has an invalid length.
[  948.414191][T11836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  948.428209][T11836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  948.440325][T11836] bond0 (unregistering): Released all slaves
[  948.532917][T10064] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  948.635423][T15297] chnl_net:caif_netlink_parms(): no params data found
[  948.763137][T10064] usb 7-1: Using ep0 maxpacket: 8
[  948.763264][ T5835] Bluetooth: hci4: command tx timeout
[  948.769936][T10064] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  948.775066][ T5835] Bluetooth: hci0: command tx timeout
[  948.995532][T10064] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  949.006393][T10064] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  949.017904][T10064] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  949.031173][T10064] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  949.040426][T10064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.062912][T10064] usbtmc 7-1:16.0: bulk endpoints not found
[  949.154400][T15359] netlink: 'syz.8.2259': attribute type 9 has an invalid length.
[  949.818386][T15297] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.830688][T15297] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.846384][T15297] bridge_slave_0: entered allmulticast mode
[  949.854428][T15297] bridge_slave_0: entered promiscuous mode
[  950.018911][T11836] hsr_slave_0: left promiscuous mode
[  950.031775][T11836] hsr_slave_1: left promiscuous mode
[  950.043639][T11836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  950.051078][T11836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  950.061049][T11836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  950.079419][T11836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  950.136515][T11836] veth1_macvtap: left promiscuous mode
[  950.162848][T11836] veth0_macvtap: left promiscuous mode
[  950.169708][T11836] veth1_vlan: left promiscuous mode
[  950.230465][T11836] veth0_vlan: left promiscuous mode
[  950.238908][T15333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  950.249849][T15333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  950.257966][T15333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  950.266012][T15333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  950.273746][T15333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  950.281522][T15333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  950.505193][T15370] serio: Serial port ttyS3
[  950.845653][T15333] Bluetooth: hci0: command tx timeout
[  950.852809][ T5835] Bluetooth: hci4: command tx timeout
[  950.862763][ T5911] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  951.012924][T11836] team0 (unregistering): Port device team_slave_1 removed
[  951.012933][ T5911] usb 9-1: device descriptor read/64, error -71
[  951.072892][T11836] team0 (unregistering): Port device team_slave_0 removed
[  951.282766][ T5911] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  951.346648][T14892] usb 7-1: USB disconnect, device number 20
[  951.438518][ T5911] usb 9-1: device descriptor read/64, error -71
[  951.563030][ T5911] usb usb9-port1: attempt power cycle
[  951.902857][ T5911] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  951.927995][ T5911] usb 9-1: device descriptor read/8, error -71
[  952.209490][ T5911] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  952.278870][T15372] delete_channel: no stack
[  952.285754][ T5911] usb 9-1: device descriptor read/8, error -71
[  952.356555][T15297] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.362801][T15333] Bluetooth: hci2: command tx timeout
[  952.365007][T15297] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.408536][ T5911] usb usb9-port1: unable to enumerate USB device
[  952.416259][T15297] bridge_slave_1: entered allmulticast mode
[  952.423280][T15297] bridge_slave_1: entered promiscuous mode
[  952.618966][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  952.830385][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.957174][T15333] Bluetooth: hci0: command tx timeout
[  952.962400][ T5835] Bluetooth: hci4: command tx timeout
[  953.306381][T15297] team0: Port device team_slave_0 added
[  953.348801][T15330] chnl_net:caif_netlink_parms(): no params data found
[  953.381914][T15297] team0: Port device team_slave_1 added
[  953.425363][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  953.446928][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  953.557109][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  953.608584][T15385] netlink: 'syz.6.2266': attribute type 10 has an invalid length.
[  953.617513][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  953.627778][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  953.654322][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  953.707469][T11836] IPVS: stop unused estimator thread 0...
[  953.820751][T15297] hsr_slave_0: entered promiscuous mode
[  953.852029][T15297] hsr_slave_1: entered promiscuous mode
[  954.029002][T15330] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.036894][T15330] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.235290][T15330] bridge_slave_0: entered allmulticast mode
[  954.544075][ T5835] Bluetooth: hci2: command tx timeout
[  954.817726][T15330] bridge_slave_0: entered promiscuous mode
[  954.921324][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.060985][T15330] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.078144][T15330] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.083566][ T5835] Bluetooth: hci4: command tx timeout
[  955.085833][T15330] bridge_slave_1: entered allmulticast mode
[  955.103917][T15330] bridge_slave_1: entered promiscuous mode
[  955.165784][T15367] chnl_net:caif_netlink_parms(): no params data found
[  955.265788][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.448673][T15330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.494521][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.587610][T15408] netlink: 'syz.6.2270': attribute type 9 has an invalid length.
[  955.982406][T15330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  956.168972][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.242791][ T5872] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  956.336401][T15330] team0: Port device team_slave_0 added
[  956.415015][ T5872] usb 9-1: Using ep0 maxpacket: 8
[  956.436173][T15330] team0: Port device team_slave_1 added
[  956.453009][ T5872] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  956.480172][ T5872] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  956.526183][ T5872] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  956.570309][ T5872] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  956.594291][ T5872] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  956.609312][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.619392][ T5835] Bluetooth: hci2: command tx timeout
[  956.648448][ T5872] usbtmc 9-1:16.0: bulk endpoints not found
[  956.658299][T15367] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.677028][T15367] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.692283][T15367] bridge_slave_0: entered allmulticast mode
[  956.702418][T15367] bridge_slave_0: entered promiscuous mode
[  956.730501][T15367] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.738494][T15367] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.746237][T15367] bridge_slave_1: entered allmulticast mode
[  956.753523][T15367] bridge_slave_1: entered promiscuous mode
[  956.761733][T15330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  956.769033][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  956.802549][T15330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  956.838469][T15330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  956.858472][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  956.884671][T15330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  956.915212][T15367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  956.943851][T15367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.012183][T15367] team0: Port device team_slave_0 added
[  957.048047][T15330] hsr_slave_0: entered promiscuous mode
[  957.054990][T15330] hsr_slave_1: entered promiscuous mode
[  957.060901][T15330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  957.082882][T15330] Cannot create hsr debugfs directory
[  957.089481][T15367] team0: Port device team_slave_1 added
[  957.141399][T15367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  957.152724][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  957.211043][T15367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  957.260301][T15367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  957.272516][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  957.306473][T15367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.407308][T15367] hsr_slave_0: entered promiscuous mode
[  957.414209][T15367] hsr_slave_1: entered promiscuous mode
[  957.420349][T15367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  957.428619][T15367] Cannot create hsr debugfs directory
[  958.377789][   T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.410698][ T5904] usb 9-1: USB disconnect, device number 24
[  958.719038][ T5835] Bluetooth: hci2: command tx timeout
[  958.738356][   T35] bridge0: port 3(netdevsim2) entered disabled state
[  959.129332][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): left allmulticast mode
[  959.153460][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): left promiscuous mode
[  959.163701][   T35] bridge0: port 3(netdevsim2) entered disabled state
[  959.175447][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.277176][   T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.484235][   T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.631788][T15459] netlink: 'syz.6.2277': attribute type 10 has an invalid length.
[  960.590464][T15464] slcan: can't register candev
[  960.595742][T15464] Falling back ldisc for ttyS3.
[  961.981758][   T35] bridge_slave_1: left allmulticast mode
[  961.991358][   T35] bridge_slave_1: left promiscuous mode
[  962.124895][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.184205][   T35] bridge_slave_0: left allmulticast mode
[  962.189899][   T35] bridge_slave_0: left promiscuous mode
[  962.218805][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.292209][   T35] bridge_slave_1: left allmulticast mode
[  962.324629][   T35] bridge_slave_1: left promiscuous mode
[  962.330359][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.391978][   T35] bridge_slave_0: left allmulticast mode
[  962.402135][   T35] bridge_slave_0: left promiscuous mode
[  962.408127][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.415287][T15532] syz.6.2284: attempt to access beyond end of device
[  965.415287][T15532] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  965.488957][T15532] exFAT-fs (nbd6): unable to read boot sector
[  965.495893][T15532] exFAT-fs (nbd6): failed to read boot sector
[  965.502497][T15532] exFAT-fs (nbd6): failed to recognize exfat type
[  966.170553][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  966.197205][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  966.214352][   T35] bond0 (unregistering): Released all slaves
[  966.498876][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  966.515039][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  966.540400][   T35] bond0 (unregistering): Released all slaves
[  967.170726][T15297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  967.233477][T15556] netlink: 'syz.8.2288': attribute type 10 has an invalid length.
[  967.245595][T15297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  967.466640][T15297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  967.490685][T15297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  967.804241][   T35] hsr_slave_0: left promiscuous mode
[  967.823744][   T35] hsr_slave_1: left promiscuous mode
[  967.845700][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.865018][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  967.892054][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  967.909984][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  967.923608][   T35] hsr_slave_0: left promiscuous mode
[  967.930241][   T35] hsr_slave_1: left promiscuous mode
[  967.941100][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.948692][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  967.961388][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  967.969867][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  968.062368][   T35] veth1_macvtap: left promiscuous mode
[  968.082184][   T35] veth0_macvtap: left promiscuous mode
[  968.092313][   T35] veth1_vlan: left promiscuous mode
[  968.108400][   T35] veth0_vlan: left promiscuous mode
[  968.125639][   T35] veth1_macvtap: left promiscuous mode
[  968.139026][   T35] veth0_macvtap: left promiscuous mode
[  968.153365][   T35] veth1_vlan: left promiscuous mode
[  968.163935][   T35] veth0_vlan: left promiscuous mode
[  969.232397][T15563] slcan: can't register candev
[  969.237342][T15563] Falling back ldisc for ttyS3.
[  970.610248][   T35] team0 (unregistering): Port device team_slave_1 removed
[  970.658334][   T35] team0 (unregistering): Port device team_slave_0 removed
[  971.911430][T15581] syz.6.2294: attempt to access beyond end of device
[  971.911430][T15581] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  971.967786][T15581] exFAT-fs (nbd6): unable to read boot sector
[  972.011105][T15581] exFAT-fs (nbd6): failed to read boot sector
[  972.043928][T15581] exFAT-fs (nbd6): failed to recognize exfat type
[  972.127750][   T35] team0 (unregistering): Port device team_slave_1 removed
[  972.254507][   T35] team0 (unregistering): Port device team_slave_0 removed
[  973.762363][T15297] 8021q: adding VLAN 0 to HW filter on device bond0
[  973.811283][T15297] 8021q: adding VLAN 0 to HW filter on device team0
[  973.847242][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.854412][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  973.885073][T11836] bridge0: port 2(bridge_slave_1) entered blocking state
[  973.892192][T11836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  974.647766][T15602] input: syz0 as /devices/virtual/input/input36
[  975.431337][T15297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  975.590167][   T35] IPVS: stop unused estimator thread 0...
[  975.600898][T15297] veth0_vlan: entered promiscuous mode
[  975.624058][   T35] IPVS: stop unused estimator thread 0...
[  975.645998][T15297] veth1_vlan: entered promiscuous mode
[  975.672722][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  975.761291][T15297] veth0_macvtap: entered promiscuous mode
[  975.790835][T15297] veth1_macvtap: entered promiscuous mode
[  975.833480][T15330] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  975.849147][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  975.871356][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  975.892271][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  975.902552][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  975.902781][ T5911] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  975.921575][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  975.931595][ T5911] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  975.943847][T15297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  975.951149][T15330] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  975.958787][ T5911] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  975.972313][T15330] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  975.981792][ T5911] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  976.005036][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0
[  976.021940][ T5911] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  976.055448][T15330] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  976.064166][ T5911] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  976.083330][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.097800][ T5911] usb 7-1: Product: syz
[  976.101988][ T5911] usb 7-1: Manufacturer: syz
[  976.107147][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.117327][ T5911] usb 7-1: SerialNumber: syz
[  976.131166][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.180667][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.199035][T15297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  976.227332][T15297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  976.236801][ T5911] usb 7-1: config 0 descriptor??
[  976.258920][T15297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  976.269945][ T5911] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  976.280643][ T5911] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  976.283496][T15297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  976.310479][T15297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  976.470127][T15367] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  976.862184][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  977.025948][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  977.262765][T15367] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  977.277140][T12071] usb 7-1: USB disconnect, device number 21
[  977.277140][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  977.335807][T15367] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  977.414666][T12071] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  977.528843][T15330] 8021q: adding VLAN 0 to HW filter on device bond0
[  977.705077][T15367] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  978.265256][T15673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  978.528292][T15673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  978.605504][T15330] 8021q: adding VLAN 0 to HW filter on device team0
[  978.655606][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.662755][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.707958][T15678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  978.708770][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.722936][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.740568][T15678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  978.930973][T15690] netlink: 'syz.6.2303': attribute type 10 has an invalid length.
[  979.082924][T15367] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.270713][T15367] 8021q: adding VLAN 0 to HW filter on device team0
[  980.117967][T15700] syz.8.2302: attempt to access beyond end of device
[  980.117967][T15700] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  980.131737][T15700] exFAT-fs (nbd8): unable to read boot sector
[  980.159390][T15663] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.166559][T15663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  980.192072][T15700] exFAT-fs (nbd8): failed to read boot sector
[  980.447568][T15663] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.454834][T15663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  980.626582][T15700] exFAT-fs (nbd8): failed to recognize exfat type
[  980.693548][T15705] siw: device registration error -23
[  981.440727][T15330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.599438][T15330] veth0_vlan: entered promiscuous mode
[  981.629302][T15330] veth1_vlan: entered promiscuous mode
[  981.724841][T15330] veth0_macvtap: entered promiscuous mode
[  981.810751][T15330] veth1_macvtap: entered promiscuous mode
[  982.679371][T15367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  982.725381][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.797747][T15737] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  982.799697][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.900002][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  983.062682][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  983.072542][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  983.232765][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  983.276408][T15330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  983.411511][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  983.493781][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  983.517275][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  983.538043][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  983.562998][T15330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  983.592875][T15330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  983.617492][T15330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  983.639271][T15330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  983.676441][T15330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  983.692515][T15330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  983.701831][T15330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  983.911781][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.944968][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  984.185950][T15663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  984.209830][T15663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  985.016460][T15367] veth0_vlan: entered promiscuous mode
[  985.068428][T15367] veth1_vlan: entered promiscuous mode
[  985.169034][T15367] veth0_macvtap: entered promiscuous mode
[  985.191386][T15367] veth1_macvtap: entered promiscuous mode
[  985.223713][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  985.242033][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.382964][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  985.393499][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.407581][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  986.143514][T15781] netlink: 'syz.6.2313': attribute type 10 has an invalid length.
[  986.172693][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  986.182531][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  986.282818][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  986.294050][T15367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  986.304222][T15779] bridge0: port 3(hsr_slave_1) entered blocking state
[  986.311073][T15779] bridge0: port 3(hsr_slave_1) entered disabled state
[  986.318145][T15779] hsr_slave_1: entered allmulticast mode
[  986.326013][T15779] hsr_slave_1: left allmulticast mode
[  987.146636][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  987.170751][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.201250][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  987.242845][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.273633][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  987.341260][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.368957][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  987.419324][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.463379][T15367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  987.593773][T15367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  987.630304][T15367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  987.656754][T15367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  987.702910][T15367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  989.276031][T12559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  989.303241][T12559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  989.798906][T11557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  989.881705][T11557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  990.922198][T15831] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  991.064237][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'.
[  991.349177][T15842] bridge0: port 3(hsr_slave_1) entered blocking state
[  991.356535][T15842] bridge0: port 3(hsr_slave_1) entered disabled state
[  991.364520][T15842] hsr_slave_1: entered allmulticast mode
[  991.377410][T15842] hsr_slave_1: left allmulticast mode
[  992.024284][T15843] netlink: 'syz.8.2324': attribute type 10 has an invalid length.
[  992.454771][T15678] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.713274][T15678] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.177263][T15678] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.972313][T15870] can0: slcan on ttyS3.
[  994.054854][T15871] can0 (unregistered): slcan off ttyS3.
[  994.257523][T15678] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.847968][T15333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  995.966328][T15333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  995.982086][T15333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  995.991541][T15333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  995.999249][T15333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  996.006683][T15333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  996.127895][T14892] libceph: connect (1)[c::]:6789 error -101
[  996.801413][T14892] libceph: mon0 (1)[c::]:6789 connect error
[  996.849225][T15892] ceph: No mds server is up or the cluster is laggy
[  997.830619][T15907] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  997.838894][T15907] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  997.847406][T15907] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  998.042883][T15333] Bluetooth: hci2: command tx timeout
[  998.914913][T15917] netlink: 'syz.6.2339': attribute type 10 has an invalid length.
[  998.948465][T15678] bridge_slave_1: left allmulticast mode
[  998.993207][T15678] bridge_slave_1: left promiscuous mode
[  998.999029][T15678] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.074778][T15919] fuse: Unknown parameter 'user_id00000000000000000000'
[  999.089248][T15678] bridge_slave_0: left allmulticast mode
[  999.239747][T15678] bridge_slave_0: left promiscuous mode
[  999.278045][T15678] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.652698][T15928] syz.0.2341: attempt to access beyond end of device
[  999.652698][T15928] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  999.665658][T15928] exFAT-fs (nbd0): unable to read boot sector
[  999.671780][T15928] exFAT-fs (nbd0): failed to read boot sector
[  999.678039][T15928] exFAT-fs (nbd0): failed to recognize exfat type
[ 1000.166449][T15333] Bluetooth: hci2: command tx timeout
[ 1002.451634][T15333] Bluetooth: hci2: command tx timeout
[ 1002.538644][T15943] slcan: can't register candev
[ 1002.543626][T15943] Falling back ldisc for ttyS3.
[ 1003.791527][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'.
[ 1004.379539][ T9689] libceph: connect (1)[c::]:6789 error -101
[ 1004.531971][T15333] Bluetooth: hci2: command tx timeout
[ 1004.601792][ T9689] libceph: mon0 (1)[c::]:6789 connect error
[ 1004.819214][ T9689] libceph: connect (1)[c::]:6789 error -101
[ 1004.862210][ T9689] libceph: mon0 (1)[c::]:6789 connect error
[ 1005.167657][T15958] ceph: No mds server is up or the cluster is laggy
[ 1005.175066][T14892] libceph: connect (1)[c::]:6789 error -101
[ 1005.181113][T14892] libceph: mon0 (1)[c::]:6789 connect error
[ 1006.123424][T14892] libceph: connect (1)[c::]:6789 error -101
[ 1006.139851][T14892] libceph: mon0 (1)[c::]:6789 connect error
[ 1007.757394][T15987] fuse: Bad value for 'fd'
[ 1007.941503][T15678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1007.961606][T15678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1007.980035][T15678] bond0 (unregistering): Released all slaves
[ 1008.116405][T15886] chnl_net:caif_netlink_parms(): no params data found
[ 1008.508199][T15994] can0: slcan on ttyS3.
[ 1008.672916][T15996] can0 (unregistered): slcan off ttyS3.
[ 1014.385889][T15886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.423798][T15886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.451528][T15886] bridge_slave_0: entered allmulticast mode
[ 1014.467016][T15886] bridge_slave_0: entered promiscuous mode
[ 1014.500838][T15886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.508988][T15886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.519728][T15886] bridge_slave_1: entered allmulticast mode
[ 1014.529896][T15886] bridge_slave_1: entered promiscuous mode
[ 1014.925178][T16058] fuse: Bad value for 'fd'
[ 1015.376022][T15886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1015.723989][T15678] hsr_slave_0: left promiscuous mode
[ 1016.302156][T16072] netlink: 'syz.3.2365': attribute type 10 has an invalid length.
[ 1016.486723][T15678] hsr_slave_1: left promiscuous mode
[ 1016.919920][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1017.004492][T15678] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1017.392472][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1017.410418][T15678] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1017.468792][T15678] veth1_macvtap: left promiscuous mode
[ 1017.475863][T15678] veth0_macvtap: left promiscuous mode
[ 1017.481600][T15678] veth1_vlan: left promiscuous mode
[ 1017.499552][T15678] veth0_vlan: left promiscuous mode
[ 1018.158418][T16094] blktrace: Concurrent blktraces are not allowed on loop17
[ 1018.168612][T16094] blktrace: Concurrent blktraces are not allowed on loop17
[ 1019.443806][T16100] block device autoloading is deprecated and will be removed.
[ 1022.416886][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2378'.
[ 1022.928758][T16130] Invalid source name
[ 1022.936385][T16130] UBIFS error (pid: 16130): cannot open "ubifs", error -22
[ 1023.177180][T16132] fuse: Bad value for 'fd'
[ 1023.539180][T15678] team0 (unregistering): Port device team_slave_1 removed
[ 1023.922197][T15678] team0 (unregistering): Port device team_slave_0 removed
[ 1026.167945][T16151] blktrace: Concurrent blktraces are not allowed on loop17
[ 1026.176632][T16151] blktrace: Concurrent blktraces are not allowed on loop17
[ 1033.155324][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1033.384579][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1033.394393][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1033.402334][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1033.410163][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1033.422878][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1034.953103][T14892] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1035.172979][T14892] usb 1-1: Using ep0 maxpacket: 8
[ 1035.219118][T14892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1035.316734][T14892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1035.394149][T14892] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[ 1035.404934][T14892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.417016][T14892] usb 1-1: Product: syz
[ 1035.421207][T14892] usb 1-1: Manufacturer: syz
[ 1035.428068][T15886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1035.447361][T14892] usb 1-1: SerialNumber: syz
[ 1035.467839][T14892] usb 1-1: config 0 descriptor??
[ 1035.482763][ T5835] Bluetooth: hci5: command tx timeout
[ 1035.614111][T16072] syz_tun: entered promiscuous mode
[ 1035.622030][T16072] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1036.453268][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2400'.
[ 1037.123893][T15886] team0: Port device team_slave_0 added
[ 1037.857190][ T5835] Bluetooth: hci5: command tx timeout
[ 1037.959414][T15886] team0: Port device team_slave_1 added
[ 1039.128559][T15886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1039.133921][    T8] usb 1-1: USB disconnect, device number 36
[ 1039.156799][T15886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.182741][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1039.291653][T15886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1039.313754][T15886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1039.320890][T15886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.382194][T15886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1039.629564][T16072] bond0: (slave syz_tun): Releasing backup interface
[ 1039.894720][ T5835] Bluetooth: hci5: command tx timeout
[ 1041.484425][T15886] hsr_slave_0: entered promiscuous mode
[ 1041.537215][T15886] hsr_slave_1: entered promiscuous mode
[ 1041.583322][T15886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1041.646592][T15886] Cannot create hsr debugfs directory
[ 1041.999601][ T5835] Bluetooth: hci5: command tx timeout
[ 1042.808240][T16194] chnl_net:caif_netlink_parms(): no params data found
[ 1044.210282][T15678] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.170478][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.170478][T16314] loop8: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1045.184541][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.184541][T16314] loop8: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1045.197775][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1045.212230][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.212230][T16314] loop8: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1045.226352][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1045.236091][T16314] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1045.243977][T16314] UDF-fs: Scanning with blocksize 512 failed
[ 1045.251975][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.251975][T16314] loop8: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1045.265456][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.265456][T16314] loop8: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1045.278680][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1045.288926][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.288926][T16314] loop8: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1045.302202][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1045.315732][T16314] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1045.323892][T16314] UDF-fs: Scanning with blocksize 1024 failed
[ 1045.332558][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.332558][T16314] loop8: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1045.346185][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.346185][T16314] loop8: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1045.359564][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1045.369943][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.369943][T16314] loop8: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1045.383339][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1045.393150][T16314] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1045.400899][T16314] UDF-fs: Scanning with blocksize 2048 failed
[ 1045.412541][T16314] syz.8.2416: attempt to access beyond end of device
[ 1045.412541][T16314] loop8: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1045.426312][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1045.436798][T16314] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1045.446585][T16314] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1045.454376][T16314] UDF-fs: Scanning with blocksize 4096 failed
[ 1045.460515][T16314] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1)
[ 1046.901581][T15678] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.962598][T16194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.989678][T16194] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.012539][T16194] bridge_slave_0: entered allmulticast mode
[ 1047.031577][T16194] bridge_slave_0: entered promiscuous mode
[ 1048.425639][T15678] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.512334][T16194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.542876][T16194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.550122][T16194] bridge_slave_1: entered allmulticast mode
[ 1048.643331][T16194] bridge_slave_1: entered promiscuous mode
[ 1048.794106][T15678] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.068012][T16194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1049.406156][T16194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1049.901346][T16194] team0: Port device team_slave_0 added
[ 1049.982399][T16194] team0: Port device team_slave_1 added
[ 1050.587616][T16194] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1050.635099][T16194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1050.669472][T16194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1050.682401][T16194] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1050.821980][T16194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1051.791277][T16194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1052.182123][T15678] bridge_slave_1: left allmulticast mode
[ 1052.194380][T15678] bridge_slave_1: left promiscuous mode
[ 1052.201839][T15678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.229173][T15678] bridge_slave_0: left allmulticast mode
[ 1052.240217][T15678] bridge_slave_0: left promiscuous mode
[ 1052.254564][T15678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.596360][T15333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1053.598717][T15678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1053.613401][    T8] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1053.628538][T15333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1053.637112][T15333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1053.646178][T15333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1053.646473][T15678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1053.665856][T15333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1053.667361][T15678] bond0 (unregistering): Released all slaves
[ 1053.681273][T15333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1053.782845][    T8] usb 9-1: Using ep0 maxpacket: 32
[ 1053.804837][    T8] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.815175][    T8] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1053.828408][    T8] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1053.835569][    T8] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1053.844858][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.856099][    T8] usb 9-1: config 0 descriptor??
[ 1054.302198][T16194] hsr_slave_0: entered promiscuous mode
[ 1054.304361][    T8] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[ 1054.308582][T16194] hsr_slave_1: entered promiscuous mode
[ 1054.329971][T16194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1054.339421][T16194] Cannot create hsr debugfs directory
[ 1054.385740][    T8] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -38
[ 1054.537341][    T8] usb 9-1: USB disconnect, device number 25
[ 1055.722927][ T5835] Bluetooth: hci4: command tx timeout
[ 1055.945442][T15678] hsr_slave_0: left promiscuous mode
[ 1055.954544][T15678] hsr_slave_1: left promiscuous mode
[ 1055.965581][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1055.980660][T15678] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1055.989076][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1055.996932][T15678] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1056.022136][T15678] veth1_macvtap: left promiscuous mode
[ 1056.028005][T15678] veth0_macvtap: left promiscuous mode
[ 1056.034438][T15678] veth1_vlan: left promiscuous mode
[ 1056.039920][T15678] veth0_vlan: left promiscuous mode
[ 1057.166476][T15678] team0 (unregistering): Port device team_slave_1 removed
[ 1057.321953][T15678] team0 (unregistering): Port device team_slave_0 removed
[ 1058.082351][ T5835] Bluetooth: hci4: command tx timeout
[ 1058.593815][ T9689] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1058.764426][ T9689] usb 1-1: Using ep0 maxpacket: 32
[ 1058.785846][ T9689] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1058.803841][ T9689] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1058.826839][ T9689] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1058.846515][ T9689] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1058.859841][ T9689] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1058.881513][ T9689] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1058.901594][ T9689] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1058.917577][ T9689] usb 1-1: Product: syz
[ 1058.921803][ T9689] usb 1-1: Manufacturer: syz
[ 1058.927158][ T9689] usb 1-1: SerialNumber: syz
[ 1058.935294][ T9689] usb 1-1: config 0 descriptor??
[ 1058.944075][ T9689] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1058.956320][ T9689] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1059.441352][ T9689] usb 1-1: USB disconnect, device number 37
[ 1059.447354][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[ 1060.229692][ T5835] Bluetooth: hci4: command tx timeout
[ 1060.748182][ T9689] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[ 1061.183486][T16434] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2449'.
[ 1061.784288][T16437] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1062.449042][ T5835] Bluetooth: hci4: command tx timeout
[ 1063.238648][T16378] chnl_net:caif_netlink_parms(): no params data found
[ 1063.997327][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'.
[ 1064.059787][T16378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.068252][T16378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.077214][T16378] bridge_slave_0: entered allmulticast mode
[ 1064.089098][T16378] bridge_slave_0: entered promiscuous mode
[ 1064.205953][T16457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1064.214699][T16457] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1064.234212][T16457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1064.242227][T16457] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1064.399121][T16378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.413206][T16378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.499885][T16378] bridge_slave_1: entered allmulticast mode
[ 1064.638503][T16378] bridge_slave_1: entered promiscuous mode
[ 1064.806274][T16378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1064.925752][T16378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1065.000409][T16378] team0: Port device team_slave_0 added
[ 1065.035693][T16378] team0: Port device team_slave_1 added
[ 1065.210840][T16378] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.221006][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.252582][T16378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.274330][T16378] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.281478][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.339278][T16378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.028581][T16194] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1066.124018][T16194] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1066.362940][T16194] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1066.399039][T16194] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1066.493973][T16476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2459'.
[ 1066.939718][T15333] Bluetooth: hci0: command 0x0406 tx timeout
[ 1067.237476][T16378] hsr_slave_0: entered promiscuous mode
[ 1067.414290][T16378] hsr_slave_1: entered promiscuous mode
[ 1067.420423][T16378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1067.429961][T16378] Cannot create hsr debugfs directory
[ 1068.603439][T16493] No such timeout policy "syz1"
[ 1069.578713][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'.
[ 1069.593610][T15678] bridge_slave_1: left allmulticast mode
[ 1069.599280][T15678] bridge_slave_1: left promiscuous mode
[ 1069.607740][T15678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.643242][T15678] bridge_slave_0: left allmulticast mode
[ 1069.649049][T15678] bridge_slave_0: left promiscuous mode
[ 1069.659589][T15678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.418141][T15678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.430090][T15678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1070.441073][T15678] bond0 (unregistering): Released all slaves
[ 1071.305287][T16515] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2470'.
[ 1071.973343][T15678] hsr_slave_0: left promiscuous mode
[ 1072.150331][T15678] hsr_slave_1: left promiscuous mode
[ 1072.197647][T15678] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1072.232396][T15678] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1072.778591][T15678] team0 (unregistering): Port device team_slave_1 removed
[ 1072.901073][T15678] team0 (unregistering): Port device team_slave_0 removed
[ 1073.211578][T16524] slcan: can't register candev
[ 1073.217732][T16524] Falling back ldisc for ttyS3.
[ 1073.400529][T16194] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1073.489055][T16194] 8021q: adding VLAN 0 to HW filter on device team0
[ 1073.524268][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.531457][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1073.589197][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.596397][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1074.681163][T16378] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1074.936344][T16539] No such timeout policy "syz1"
[ 1075.483968][T16378] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1075.549783][T16378] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1075.908483][T16378] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1076.128059][T16378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.220836][T16549] can0: slcan on ttyS3.
[ 1076.863192][T16549] can0 (unregistered): slcan off ttyS3.
[ 1076.867303][T16378] 8021q: adding VLAN 0 to HW filter on device team0
[ 1077.084868][T15663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.091994][T15663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1077.148072][T15663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.155277][T15663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1077.202816][ T5872] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1077.362044][T16194] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1077.425940][T16558] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2479'.
[ 1078.164572][ T5872] usb 1-1: Using ep0 maxpacket: 8
[ 1078.175237][ T5872] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1078.214777][ T5872] usb 1-1: can't read configurations, error -61
[ 1078.256237][T16194] veth0_vlan: entered promiscuous mode
[ 1078.963336][ T5872] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1078.963469][T16563] can0: slcan on ttyS3.
[ 1079.012315][T16194] veth1_vlan: entered promiscuous mode
[ 1079.044112][T16569] can0 (unregistered): slcan off ttyS3.
[ 1079.208734][ T5872] usb 1-1: Using ep0 maxpacket: 8
[ 1079.522955][T16194] veth0_macvtap: entered promiscuous mode
[ 1079.550356][T16194] veth1_macvtap: entered promiscuous mode
[ 1080.429470][T16378] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1080.451610][T16194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1080.498590][T16194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1080.666607][T16194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1080.677685][T16194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1080.741999][T16596] No such timeout policy "syz1"
[ 1081.453946][T16194] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1081.473682][T16194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1081.494100][T16194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1081.532896][T16194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1081.574506][T16194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1081.680932][T16194] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1082.064046][T16194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.112730][T16194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.149990][T16194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.158881][T16194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.375110][T15663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1082.423988][T15663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.553234][T15678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1082.573646][T15678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.695488][T16378] veth0_vlan: entered promiscuous mode
[ 1082.760110][T16378] veth1_vlan: entered promiscuous mode
[ 1083.055583][T16378] veth0_macvtap: entered promiscuous mode
[ 1083.389428][T16620] can0: slcan on ttyS3.
[ 1083.898861][T16378] veth1_macvtap: entered promiscuous mode
[ 1083.913011][T16621] can0 (unregistered): slcan off ttyS3.
[ 1084.129017][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1084.139657][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.151888][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1084.162504][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.200897][T16631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2489'.
[ 1084.246141][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1084.327220][ T5872] usb 1-1: device descriptor read/all, error -110
[ 1084.361185][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.381203][ T5872] usb usb1-port1: attempt power cycle
[ 1084.455278][T16378] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1084.580912][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1084.882468][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.892997][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1084.903811][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.916891][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1085.446332][ T5872] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1085.454556][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1085.484612][T16378] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1085.491995][ T5872] usb 1-1: device descriptor read/8, error -32
[ 1085.550888][T16378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.572503][T16378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.109232][T16378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.119459][T16378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.682826][ T5872] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1086.733261][ T5872] usb 1-1: device descriptor read/8, error -32
[ 1086.751350][T15673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.788787][T15673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.176130][ T5872] usb usb1-port1: unable to enumerate USB device
[ 1088.123041][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.152283][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.944436][T16680] can0: slcan on ttyS3.
[ 1090.183342][T16680] can0 (unregistered): slcan off ttyS3.
[ 1090.458055][T16696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1090.989127][T16678] delete_channel: no stack
[ 1091.453128][T16700] can0: slcan on ttyS3.
[ 1091.563408][T16700] can0 (unregistered): slcan off ttyS3.
[ 1091.639811][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'.
[ 1094.401563][T16757] netlink: 'syz.0.2513': attribute type 9 has an invalid length.
[ 1094.524408][T16763] can0: slcan on ttyS3.
[ 1094.572980][T16763] can0 (unregistered): slcan off ttyS3.
[ 1095.037081][T16753] delete_channel: no stack
[ 1096.837182][T16791] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1096.846072][T16791] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1096.854619][T16791] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1100.061512][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'.
[ 1100.145819][T16832] Invalid source name
[ 1100.149967][T16832] UBIFS error (pid: 16832): cannot open "ubifs", error -22
[ 1103.593837][T16861] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1105.832746][T15333] Bluetooth: hci0: command 0x0406 tx timeout
[ 1106.983933][T16901] delete_channel: no stack
[ 1107.428502][T16912] block device autoloading is deprecated and will be removed.
[ 1107.428555][T16914] block device autoloading is deprecated and will be removed.
[ 1110.270785][T16946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1110.340616][T16946] overlayfs: missing 'lowerdir'
[ 1110.933798][T16955] can0: slcan on ttyS3.
[ 1111.003600][T16955] can0 (unregistered): slcan off ttyS3.
[ 1111.198760][T11091] libceph: connect (1)[c::]:6789 error -101
[ 1111.215422][T11091] libceph: mon0 (1)[c::]:6789 connect error
[ 1111.503002][T11091] libceph: connect (1)[c::]:6789 error -101
[ 1111.525029][T11091] libceph: mon0 (1)[c::]:6789 connect error
[ 1112.097355][ T5872] libceph: connect (1)[c::]:6789 error -101
[ 1112.103562][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[ 1112.113502][T16961] ceph: No mds server is up or the cluster is laggy
[ 1112.562846][T16982] hpfs: Bad magic ... probably not HPFS
[ 1113.692824][T16985] delete_channel: no stack
[ 1116.279589][T17035] can0: slcan on ttyS3.
[ 1116.492898][T17039] can0 (unregistered): slcan off ttyS3.
[ 1119.450672][T17059] delete_channel: no stack
[ 1120.194827][T17067] delete_channel: no stack
[ 1124.491579][T17130] delete_channel: no stack
[ 1124.622257][T17146] overlayfs: failed to resolve './file1': -2
[ 1130.766413][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'.
[ 1131.110036][T17199] delete_channel: no stack
[ 1133.805931][T17248] serio: Serial port ttyS3
[ 1135.343042][ T3076] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[ 1138.091649][T17274] delete_channel: no stack
[ 1138.204510][T17290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2607'.
[ 1138.848026][T17293] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1139.192007][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2608'.
[ 1139.427367][T17311] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1139.435904][T17311] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1139.444423][T17311] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1140.086601][T17300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1140.209233][T17300] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.336908][T17300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1140.403041][T17300] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1141.692816][T17328] serio: Serial port ttyS3
[ 1142.372833][T12275] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[ 1142.532734][T12275] usb 1-1: device descriptor read/64, error -71
[ 1143.671146][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2617'.
[ 1143.771927][T12275] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 1143.791148][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2617'.
[ 1144.848940][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2622'.
[ 1144.883554][ T5872] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1145.028256][T17370] Invalid source name
[ 1145.032545][T17370] UBIFS error (pid: 17370): cannot open "ubifs", error -22
[ 1145.126926][ T5872] usb 8-1: Using ep0 maxpacket: 32
[ 1145.504072][ T5872] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[ 1145.532596][ T5872] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1145.586474][ T5872] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1145.628187][ T5872] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1145.694626][ T5872] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1145.748553][ T5872] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1145.763555][ T5872] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1145.772005][ T5872] usb 8-1: Product: syz
[ 1145.804620][ T5872] usb 8-1: Manufacturer: syz
[ 1145.809256][ T5872] usb 8-1: SerialNumber: syz
[ 1145.848699][ T5872] usb 8-1: config 0 descriptor??
[ 1145.893726][ T5872] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1147.074225][ T5872] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1147.156901][ T5872] usb 8-1: USB disconnect, device number 2
[ 1147.190025][ T5872] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[ 1148.684491][T17409] serio: Serial port ttyS3
[ 1149.033399][ T3076] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[ 1149.308237][ T3076] usb 1-1: device descriptor read/64, error -71
[ 1150.105982][ T3076] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[ 1150.171055][T17423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1150.179927][T17423] overlayfs: missing 'lowerdir'
[ 1150.296762][ T3076] usb 1-1: device descriptor read/64, error -71
[ 1150.349398][T17435] No such timeout policy "syz1"
[ 1150.413109][ T3076] usb usb1-port1: attempt power cycle
[ 1150.833004][ T3076] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 1150.877180][ T3076] usb 1-1: device descriptor read/8, error -71
[ 1151.332997][ T3076] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[ 1151.985009][ T3076] usb 1-1: device not accepting address 47, error -71
[ 1152.028445][ T3076] usb usb1-port1: unable to enumerate USB device
[ 1153.983358][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2638'.
[ 1156.855716][T17488] delete_channel: no stack
[ 1157.551369][T17516] serio: Serial port ttyS3
[ 1158.663775][T17492] netlink: 'syz.1.2644': attribute type 9 has an invalid length.
[ 1159.992769][T14892] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[ 1160.348303][T17519] delete_channel: no stack
[ 1160.872802][ T5872] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1161.064037][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1161.099388][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1161.505463][ T5872] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1161.523185][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.600540][ T5872] usb 1-1: config 0 descriptor??
[ 1162.020390][T17550] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2656'.
[ 1162.071674][T17550] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[ 1162.818072][T14892] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1163.183511][T17559] delete_channel: no stack
[ 1163.198418][ T5872] usbhid 1-1:0.0: can't add hid device: -71
[ 1163.259676][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1163.369627][ T5872] usb 1-1: USB disconnect, device number 48
[ 1164.273444][T17588] block device autoloading is deprecated and will be removed.
[ 1164.604539][T14892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1164.842853][T14892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1164.852721][T14892] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1165.051871][T14892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1165.073618][T14892] usb 7-1: config 0 descriptor??
[ 1165.192411][T17598] serio: Serial port ttyS3
[ 1166.913617][T10064] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1166.919460][T17600] delete_channel: no stack
[ 1169.063189][T14892] usb 7-1: can't set config #0, error -71
[ 1169.084666][T14892] usb 7-1: USB disconnect, device number 23
[ 1169.510133][T17640] autofs: Bad value for 'fd'
[ 1171.558355][T17645] delete_channel: no stack
[ 1171.899482][T17652] orangefs_mount: mount request failed with -4
[ 1172.713665][T15333] Bluetooth: hci4: command tx timeout
[ 1173.332755][T17679] can0: slcan on ttyS3.
[ 1173.584000][T17679] can0 (unregistered): slcan off ttyS3.
[ 1174.442751][T12275] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1174.522789][T15333] Bluetooth: hci5: command 0x0406 tx timeout
[ 1174.672395][T12275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1174.992114][T12275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1175.090506][T12275] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1175.099773][T12275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.113356][T12275] usb 2-1: config 0 descriptor??
[ 1175.506043][T17689] delete_channel: no stack
[ 1175.691931][T17701] No such timeout policy "syz1"
[ 1176.233554][T17709] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1176.830881][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2682'.
[ 1176.999343][T17719] Invalid source name
[ 1177.005176][T17719] UBIFS error (pid: 17719): cannot open "ubifs", error -22
[ 1178.106637][ T5835] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1178.422480][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2684'.
[ 1179.152238][T17744] can0: slcan on ttyS3.
[ 1180.173222][T17744] can0 (unregistered): slcan off ttyS3.
[ 1180.633017][T12275] usbhid 2-1:0.0: can't add hid device: -32
[ 1180.639054][T12275] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 1180.671030][T17751] autofs: Unknown parameter '0x0000000000000000'
[ 1180.682035][T14892] usb 2-1: USB disconnect, device number 32
[ 1182.039176][T17769] orangefs_mount: mount request failed with -4
[ 1184.277096][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'.
[ 1185.793522][T17814] can0: slcan on ttyS3.
[ 1187.399115][T17814] can0 (unregistered): slcan off ttyS3.
[ 1188.567161][T17838] can0: slcan on ttyS3.
[ 1188.803363][T17838] can0 (unregistered): slcan off ttyS3.
[ 1189.426009][T17856] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1189.749336][T12275] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1190.278772][T17863] serio: Serial port ttyS3
[ 1191.383033][T14892] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1191.739468][T17873] can0: slcan on ttyS3.
[ 1191.756618][T14892] usb 8-1: device descriptor read/64, error -71
[ 1191.934127][T17873] can0 (unregistered): slcan off ttyS3.
[ 1192.162942][T14892] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[ 1192.522835][T14892] usb 8-1: device descriptor read/64, error -71
[ 1192.754431][T14892] usb usb8-port1: attempt power cycle
[ 1193.777690][T17882] delete_channel: no stack
[ 1194.742810][T12275] usb 1-1: device descriptor read/all, error -71
[ 1194.804938][T17911] serio: Serial port ttyS3
[ 1195.173238][T14892] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[ 1195.563140][T14892] usb 2-1: device descriptor read/64, error -71
[ 1195.812799][T14892] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1195.984641][T14892] usb 2-1: device descriptor read/64, error -71
[ 1197.173264][T14892] usb usb2-port1: attempt power cycle
[ 1197.732838][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[ 1198.180078][T17941] serio: Serial port ttyS3
[ 1198.670405][T14892] usb usb2-port1: Cannot enable. Maybe the USB cable is bad?
[ 1198.984640][T14892] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[ 1199.055050][T14892] usb 2-1: device descriptor read/8, error -71
[ 1199.096461][T17948] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1199.105768][T17948] netlink: 'syz.0.2722': attribute type 3 has an invalid length.
[ 1199.114933][T17948] netlink: 'syz.0.2722': attribute type 2 has an invalid length.
[ 1199.122726][T17948] netlink: 198084 bytes leftover after parsing attributes in process `syz.0.2722'.
[ 1199.193166][T14892] usb usb2-port1: unable to enumerate USB device
[ 1202.891737][T14892] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1203.105038][T14892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1203.337407][T14892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1203.348189][T14892] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1203.357574][T14892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.377099][T14892] usb 9-1: config 0 descriptor??
[ 1203.590219][T14892] usbhid 9-1:0.0: can't add hid device: -71
[ 1203.632427][T14892] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1203.653106][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[ 1203.712889][T14892] usb 9-1: USB disconnect, device number 27
[ 1204.848455][T18019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1204.866741][T18019] netlink: 'syz.6.2735': attribute type 3 has an invalid length.
[ 1204.874602][T18019] netlink: 'syz.6.2735': attribute type 2 has an invalid length.
[ 1204.882340][T18019] netlink: 198084 bytes leftover after parsing attributes in process `syz.6.2735'.
[ 1204.948270][T18022] 9pnet_fd: Insufficient options for proto=fd
[ 1208.833809][T18029] can0: slcan on ttyS3.
[ 1209.084329][T18029] can0 (unregistered): slcan off ttyS3.
[ 1209.482767][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[ 1210.207080][T18083] hpfs: Bad magic ... probably not HPFS
[ 1210.522783][ T5904] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1210.684707][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1210.711246][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1210.751556][ T5904] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1210.773114][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.794844][ T5904] usb 8-1: config 0 descriptor??
[ 1211.018637][ T5904] usbhid 8-1:0.0: can't add hid device: -71
[ 1211.043547][ T5904] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1211.073902][ T5904] usb 8-1: USB disconnect, device number 7
[ 1212.527806][T18116] 9pnet_fd: Insufficient options for proto=fd
[ 1214.196826][T18121] delete_channel: no stack
[ 1216.281113][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[ 1217.242842][T18169] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2761'.
[ 1219.398925][T18186] 9pnet_fd: Insufficient options for proto=fd
[ 1222.251037][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2772'.
[ 1223.162799][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[ 1224.184913][T18248] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2777'.
[ 1227.589755][T18269] delete_channel: no stack
[ 1228.398787][ T5835] Bluetooth: hci4: command tx timeout
[ 1230.069850][T12275] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1231.139064][T12275] usb 8-1: Using ep0 maxpacket: 8
[ 1231.189850][T18316] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1233.178280][T12275] usb 8-1: device descriptor read/all, error -71
[ 1233.454963][T18309] delete_channel: no stack
[ 1233.939592][T18336] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[ 1233.948670][T18336] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[ 1233.957181][T18336] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[ 1234.550823][T18341] netlink: 'syz.7.2796': attribute type 11 has an invalid length.
[ 1236.061874][T18350] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2799'.
[ 1237.852825][T18374] serio: Serial port ttyS3
[ 1238.873094][T10064] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[ 1239.032882][T10064] usb 8-1: device descriptor read/64, error -71
[ 1239.362735][T12275] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1239.718374][T10064] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1239.933055][T10064] usb 8-1: device descriptor read/64, error -71
[ 1240.123963][T10064] usb usb8-port1: attempt power cycle
[ 1240.352932][T12275] usb 2-1: Using ep0 maxpacket: 8
[ 1240.562245][T12275] usb 2-1: device descriptor read/all, error -71
[ 1242.474637][T18412] netlink: 'syz.8.2808': attribute type 11 has an invalid length.
[ 1242.749568][T18415] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2812'.
[ 1244.071076][ T5835] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1246.092756][T18455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2818'.
[ 1246.186900][T11492] Bluetooth: hci2: command 0xfc11 tx timeout
[ 1246.193351][ T5835] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1247.994575][T18473] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2823'.
[ 1248.274126][T18483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1248.283520][T18483] netlink: 'syz.7.2822': attribute type 3 has an invalid length.
[ 1248.291304][T18483] netlink: 'syz.7.2822': attribute type 2 has an invalid length.
[ 1248.299092][T18483] netlink: 198084 bytes leftover after parsing attributes in process `syz.7.2822'.
[ 1249.513095][ T9689] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1250.572749][ T9689] usb 7-1: Using ep0 maxpacket: 8
[ 1250.737186][ T9689] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1250.768849][ T9689] usb 7-1: can't read configurations, error -61
[ 1250.920105][T18513] netlink: 'syz.8.2829': attribute type 9 has an invalid length.
[ 1251.605365][ T9689] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1252.240586][T18527] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1253.052918][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[ 1255.397979][T18554] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1255.407650][T18554] netlink: 'syz.7.2837': attribute type 3 has an invalid length.
[ 1255.415572][T18554] netlink: 'syz.7.2837': attribute type 2 has an invalid length.
[ 1255.423592][T18554] netlink: 198084 bytes leftover after parsing attributes in process `syz.7.2837'.
[ 1258.280716][T18578] siw: device registration error -23
[ 1259.017497][T11492] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1259.477794][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'.
[ 1259.530544][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2843'.
[ 1260.386290][T18599] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[ 1261.115080][T18588] Invalid source name
[ 1261.119113][T18588] UBIFS error (pid: 18588): cannot open "ubifs", error -22
[ 1264.189239][T18636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1264.630879][T18637] siw: device registration error -23
[ 1264.701049][T18641] block device autoloading is deprecated and will be removed.
[ 1265.631407][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2856'.
[ 1267.464437][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2861'.
[ 1268.522824][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[ 1270.562311][T18705] blktrace: Concurrent blktraces are not allowed on loop1
[ 1271.111738][T18688] netlink: 'syz.7.2860': attribute type 9 has an invalid length.
[ 1271.978750][T18720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1271.988097][T18720] netlink: 'syz.1.2869': attribute type 3 has an invalid length.
[ 1271.995921][T18720] netlink: 'syz.1.2869': attribute type 2 has an invalid length.
[ 1272.003718][T18720] netlink: 198084 bytes leftover after parsing attributes in process `syz.1.2869'.
[ 1272.540717][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2871'.
[ 1274.280982][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2874'.
[ 1275.132474][T18751] hpfs: Bad magic ... probably not HPFS
[ 1276.744770][T18764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2879'.
[ 1279.519184][T18797] No such timeout policy "syz1"
[ 1279.633187][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2884'.
[ 1281.709616][T18808] delete_channel: no stack
[ 1283.264816][T18826] bio_check_eod: 2 callbacks suppressed
[ 1283.264834][T18826] syz.7.2891: attempt to access beyond end of device
[ 1283.264834][T18826] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1283.285423][T18826] exFAT-fs (nbd7): unable to read boot sector
[ 1283.291586][T18826] exFAT-fs (nbd7): failed to read boot sector
[ 1283.297759][T18826] exFAT-fs (nbd7): failed to recognize exfat type
[ 1286.899982][T18868] delete_channel: no stack
[ 1288.747337][T18893] syz.6.2904: attempt to access beyond end of device
[ 1288.747337][T18893] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1288.760219][T18893] exFAT-fs (nbd6): unable to read boot sector
[ 1288.766474][T18893] exFAT-fs (nbd6): failed to read boot sector
[ 1288.772555][T18893] exFAT-fs (nbd6): failed to recognize exfat type
[ 1289.171804][T18903] can0: slcan on ttyS3.
[ 1289.932900][T18895] can0 (unregistered): slcan off ttyS3.
[ 1291.307609][T18924] netlink: 'syz.1.2911': attribute type 1 has an invalid length.
[ 1291.382524][T18924] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1291.799655][T18929] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1291.849187][T18929] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[ 1291.911372][T18929] bond1: (slave vti0): Error -95 calling set_mac_address
[ 1293.059084][T18943] blktrace: Concurrent blktraces are not allowed on loop17
[ 1296.147160][T18967] syz.0.2918: attempt to access beyond end of device
[ 1296.147160][T18967] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1296.159977][T18967] exFAT-fs (nbd0): unable to read boot sector
[ 1296.166128][T18967] exFAT-fs (nbd0): failed to read boot sector
[ 1296.172198][T18967] exFAT-fs (nbd0): failed to recognize exfat type
[ 1299.639193][ T5904] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1299.792796][ T5904] usb 9-1: device descriptor read/64, error -71
[ 1301.192816][ T5904] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1301.321901][T19023] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1301.330297][T19023] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1301.332737][ T5904] usb 9-1: device descriptor read/64, error -71
[ 1301.338844][T19023] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1301.483155][ T5904] usb usb9-port1: attempt power cycle
[ 1302.090447][T19033] syz.7.2934: attempt to access beyond end of device
[ 1302.090447][T19033] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1302.103428][T19033] exFAT-fs (nbd7): unable to read boot sector
[ 1302.109546][T19033] exFAT-fs (nbd7): failed to read boot sector
[ 1302.115705][T19033] exFAT-fs (nbd7): failed to recognize exfat type
[ 1303.425952][ T5904] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1303.488670][ T5904] usb 9-1: device descriptor read/8, error -71
[ 1307.822779][T14892] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1308.703849][T14892] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1308.722693][T14892] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1308.773050][T14892] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1308.821630][T14892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.884352][T19086] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1308.951813][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2945'.
[ 1309.523487][T14892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1310.788247][T12275] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1311.047869][T10064] IPVS: starting estimator thread 0...
[ 1311.524804][T19132] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1311.579063][T10064] usb 9-1: USB disconnect, device number 32
[ 1312.074873][T19140] siw: device registration error -23
[ 1312.639331][T12275] usb 1-1: device descriptor read/64, error -71
[ 1313.460828][T19137] delete_channel: no stack
[ 1313.929278][T19156] 9pnet_fd: Insufficient options for proto=fd
[ 1316.381573][T19178] No such timeout policy "syz1"
[ 1318.002812][ T5835] Bluetooth: hci0: unexpected event for opcode 0x1005
[ 1318.596261][T19190] bridge0: port 3(hsr_slave_1) entered blocking state
[ 1318.603165][T19190] bridge0: port 3(hsr_slave_1) entered disabled state
[ 1318.610722][T19190] hsr_slave_1: entered allmulticast mode
[ 1318.617797][T19190] hsr_slave_1: left allmulticast mode
[ 1318.726016][ T5872] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1319.176282][ T5872] usb 9-1: device descriptor read/64, error -71
[ 1319.392488][T19207] delete_channel: no stack
[ 1319.916046][ T5872] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1320.893157][ T5872] usb 9-1: device descriptor read/64, error -71
[ 1320.962970][T12275] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1321.192599][ T5872] usb usb9-port1: attempt power cycle
[ 1321.278315][T12275] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1321.307477][T19246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'.
[ 1322.234973][T12275] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1322.279121][T12275] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1322.337357][ T5872] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1322.367999][T12275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.491717][T19222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1322.506250][T12275] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1322.539765][ T5872] usb 9-1: device descriptor read/8, error -71
[ 1322.565982][T19253] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2974'.
[ 1322.693148][T19253] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2974'.
[ 1324.813799][T19274] blktrace: Concurrent blktraces are not allowed on loop13
[ 1324.821835][ T5872] usb 1-1: USB disconnect, device number 53
[ 1327.600306][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'.
[ 1328.848047][T19330] smc: net device caif0 applied user defined pnetid SYZ2
[ 1329.335836][T11492] Bluetooth: hci2: command 0xfc11 tx timeout
[ 1329.342395][ T5835] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1331.184139][T19357] input: syz0 as /devices/virtual/input/input39
[ 1333.273670][T19378] netlink: 'syz.7.2996': attribute type 9 has an invalid length.
[ 1334.501808][ T9689] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1334.702798][ T9689] usb 1-1: Using ep0 maxpacket: 32
[ 1334.876641][ T9689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1335.038176][ T9689] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1335.182792][ T9689] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1335.191416][ T9689] usb 1-1: Product: syz
[ 1335.196328][ T9689] usb 1-1: Manufacturer: syz
[ 1335.209472][ T9689] usb 1-1: SerialNumber: syz
[ 1335.251168][ T9689] usb 1-1: config 0 descriptor??
[ 1335.301358][T19383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1335.744790][T19399] blktrace: Concurrent blktraces are not allowed on loop13
[ 1336.070437][ T5872] usb 1-1: USB disconnect, device number 54
[ 1337.768575][T19428] siw: device registration error -23
[ 1340.772136][T19454] block device autoloading is deprecated and will be removed.
[ 1341.182160][T19467] ------------[ cut here ]------------
[ 1341.188154][T19467] WARNING: CPU: 0 PID: 19467 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a6/0x310
[ 1341.198227][T19467] Modules linked in:
[ 1341.202167][T19467] CPU: 0 UID: 0 PID: 19467 Comm: syz.0.3020 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[ 1341.213026][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1341.223214][T19467] RIP: 0010:folio_memcg+0x1a6/0x310
[ 1341.228439][T19467] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 95 6b 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 9b b8 b7 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff
[ 1341.248819][T19467] RSP: 0018:ffffc9000caa7038 EFLAGS: 00010283
[ 1341.255525][T19467] RAX: ffffffff820a0645 RBX: 0000000000000000 RCX: 0000000000080000
[ 1341.263691][T19467] RDX: ffffc900051f1000 RSI: 0000000000001ab9 RDI: 0000000000001aba
[ 1341.271681][T19467] RBP: 0000000000000000 R08: ffffffff820a0608 R09: 1ffffd4000286590
[ 1341.279730][T19467] R10: dffffc0000000000 R11: fffff94000286591 R12: ffffea0001432cb0
[ 1341.288069][T19467] R13: dffffc0000000000 R14: ffffea0001432c80 R15: ffff888029bc3a00
[ 1341.296145][T19467] FS:  00007fcd369f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1341.305184][T19467] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1341.311821][T19467] CR2: 0000000000000000 CR3: 0000000049b28000 CR4: 00000000003526f0
[ 1341.319908][T19467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003cc9
[ 1341.329275][T19467] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1341.337504][T19467] Call Trace:
[ 1341.340808][T19467]  <TASK>
[ 1341.344388][T19467]  ? __warn+0x165/0x4d0
[ 1341.348582][T19467]  ? folio_memcg+0x1a6/0x310
[ 1341.353722][T19467]  ? report_bug+0x2b3/0x500
[ 1341.358266][T19467]  ? folio_memcg+0x1a6/0x310
[ 1341.363203][T19467]  ? handle_bug+0x60/0x90
[ 1341.367571][T19467]  ? exc_invalid_op+0x1a/0x50
[ 1341.372361][T19467]  ? asm_exc_invalid_op+0x1a/0x20
[ 1341.377490][T19467]  ? folio_memcg+0x168/0x310
[ 1341.382099][T19467]  ? folio_memcg+0x1a5/0x310
[ 1341.386772][T19467]  ? folio_memcg+0x1a6/0x310
[ 1341.391386][T19467]  ? folio_memcg+0x1a5/0x310
[ 1341.396043][T19467]  workingset_activation+0x123/0x6b0
[ 1341.401350][T19467]  ? folio_mark_accessed+0x691/0xa40
[ 1341.406899][T19467]  folio_mark_accessed+0x73b/0xa40
[ 1341.412044][T19467]  ? folio_mark_accessed+0x2d2/0xa40
[ 1341.417439][T19467]  kvm_release_page_clean+0x9b/0xe0
[ 1341.422737][T19467]  kvm_tdp_page_fault+0x304/0x3a0
[ 1341.427793][T19467]  kvm_mmu_do_page_fault+0x577/0xb40
[ 1341.433189][T19467]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1341.439069][T19467]  kvm_mmu_page_fault+0x2d7/0xc50
[ 1341.444764][T19467]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[ 1341.450348][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1341.455729][T19467]  ? handle_ept_violation+0x35b/0x690
[ 1341.461132][T19467]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1341.466966][T19467]  vmx_handle_exit+0xfd8/0x1a10
[ 1341.471863][T19467]  vcpu_run+0x6e9e/0x8a90
[ 1341.476749][T19467]  ? vcpu_run+0x5d23/0x8a90
[ 1341.481373][T19467]  ? __pfx_vcpu_run+0x10/0x10
[ 1341.486151][T19467]  ? __local_bh_enable_ip+0x168/0x200
[ 1341.491552][T19467]  ? lockdep_hardirqs_on+0x99/0x150
[ 1341.496861][T19467]  ? __pfx_lock_acquire+0x10/0x10
[ 1341.501917][T19467]  ? fpu_swap_kvm_fpstate+0x82/0x460
[ 1341.507310][T19467]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1341.513114][T19467]  ? xfd_validate_state+0x6e/0x150
[ 1341.518257][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1341.523142][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1341.527935][T19467]  kvm_arch_vcpu_ioctl_run+0xa68/0x1940
[ 1341.533604][T19467]  ? kvm_arch_vcpu_ioctl_run+0x205/0x1940
[ 1341.539353][T19467]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1341.545466][T19467]  ? __pfx_lock_acquire+0x10/0x10
[ 1341.551133][T19467]  ? kvm_vcpu_ioctl+0xeaf/0x1020
[ 1341.556716][T19467]  ? __pfx_lock_release+0x10/0x10
[ 1341.561778][T19467]  ? do_raw_write_lock+0x148/0x4f0
[ 1341.566999][T19467]  ? __pfx_do_raw_write_lock+0x10/0x10
[ 1341.572495][T19467]  kvm_vcpu_ioctl+0x996/0x1020
[ 1341.577422][T19467]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1341.582722][T19467]  ? __asan_memset+0x23/0x50
[ 1341.587342][T19467]  ? smack_file_ioctl+0x35d/0x3b0
[ 1341.592392][T19467]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1341.597857][T19467]  ? __fget_files+0x2a/0x410
[ 1341.602476][T19467]  ? __fget_files+0x2a/0x410
[ 1341.607166][T19467]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1341.612397][T19467]  __se_sys_ioctl+0xf5/0x170
[ 1341.617103][T19467]  do_syscall_64+0xf3/0x230
[ 1341.621635][T19467]  ? clear_bhb_loop+0x35/0x90
[ 1341.626434][T19467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1341.632358][T19467] RIP: 0033:0x7fcd38b8d169
[ 1341.636862][T19467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1341.657191][T19467] RSP: 002b:00007fcd369f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1341.666237][T19467] RAX: ffffffffffffffda RBX: 00007fcd38da5fa0 RCX: 00007fcd38b8d169
[ 1341.674322][T19467] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 1341.682319][T19467] RBP: 00007fcd38c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1341.690403][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1341.698495][T19467] R13: 0000000000000000 R14: 00007fcd38da5fa0 R15: 00007ffca8d7c6e8
[ 1341.706587][T19467]  </TASK>
[ 1341.709731][T19467] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1341.717030][T19467] CPU: 0 UID: 0 PID: 19467 Comm: syz.0.3020 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[ 1341.727809][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1341.737876][T19467] Call Trace:
[ 1341.741167][T19467]  <TASK>
[ 1341.744109][T19467]  dump_stack_lvl+0x241/0x360
[ 1341.748807][T19467]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1341.754020][T19467]  ? __pfx__printk+0x10/0x10
[ 1341.758646][T19467]  ? vscnprintf+0x5d/0x90
[ 1341.762996][T19467]  panic+0x349/0x880
[ 1341.766924][T19467]  ? __warn+0x174/0x4d0
[ 1341.771093][T19467]  ? __pfx_panic+0x10/0x10
[ 1341.775527][T19467]  __warn+0x344/0x4d0
[ 1341.779505][T19467]  ? folio_memcg+0x1a6/0x310
[ 1341.784090][T19467]  report_bug+0x2b3/0x500
[ 1341.788415][T19467]  ? folio_memcg+0x1a6/0x310
[ 1341.793002][T19467]  handle_bug+0x60/0x90
[ 1341.797154][T19467]  exc_invalid_op+0x1a/0x50
[ 1341.801655][T19467]  asm_exc_invalid_op+0x1a/0x20
[ 1341.806503][T19467] RIP: 0010:folio_memcg+0x1a6/0x310
[ 1341.811697][T19467] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 95 6b 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 9b b8 b7 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff
[ 1341.831302][T19467] RSP: 0018:ffffc9000caa7038 EFLAGS: 00010283
[ 1341.837367][T19467] RAX: ffffffff820a0645 RBX: 0000000000000000 RCX: 0000000000080000
[ 1341.845332][T19467] RDX: ffffc900051f1000 RSI: 0000000000001ab9 RDI: 0000000000001aba
[ 1341.853293][T19467] RBP: 0000000000000000 R08: ffffffff820a0608 R09: 1ffffd4000286590
[ 1341.861260][T19467] R10: dffffc0000000000 R11: fffff94000286591 R12: ffffea0001432cb0
[ 1341.869228][T19467] R13: dffffc0000000000 R14: ffffea0001432c80 R15: ffff888029bc3a00
[ 1341.877200][T19467]  ? folio_memcg+0x168/0x310
[ 1341.881781][T19467]  ? folio_memcg+0x1a5/0x310
[ 1341.886366][T19467]  ? folio_memcg+0x1a5/0x310
[ 1341.890948][T19467]  workingset_activation+0x123/0x6b0
[ 1341.896227][T19467]  ? folio_mark_accessed+0x691/0xa40
[ 1341.901510][T19467]  folio_mark_accessed+0x73b/0xa40
[ 1341.906616][T19467]  ? folio_mark_accessed+0x2d2/0xa40
[ 1341.911896][T19467]  kvm_release_page_clean+0x9b/0xe0
[ 1341.917093][T19467]  kvm_tdp_page_fault+0x304/0x3a0
[ 1341.922113][T19467]  kvm_mmu_do_page_fault+0x577/0xb40
[ 1341.927400][T19467]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1341.933213][T19467]  kvm_mmu_page_fault+0x2d7/0xc50
[ 1341.938234][T19467]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[ 1341.943948][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1341.948706][T19467]  ? handle_ept_violation+0x35b/0x690
[ 1341.954071][T19467]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1341.959782][T19467]  vmx_handle_exit+0xfd8/0x1a10
[ 1341.964642][T19467]  vcpu_run+0x6e9e/0x8a90
[ 1341.968970][T19467]  ? vcpu_run+0x5d23/0x8a90
[ 1341.973519][T19467]  ? __pfx_vcpu_run+0x10/0x10
[ 1341.978188][T19467]  ? __local_bh_enable_ip+0x168/0x200
[ 1341.983553][T19467]  ? lockdep_hardirqs_on+0x99/0x150
[ 1341.988750][T19467]  ? __pfx_lock_acquire+0x10/0x10
[ 1341.993769][T19467]  ? fpu_swap_kvm_fpstate+0x82/0x460
[ 1341.999048][T19467]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1342.004781][T19467]  ? xfd_validate_state+0x6e/0x150
[ 1342.009901][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1342.014675][T19467]  ? rcu_is_watching+0x15/0xb0
[ 1342.019449][T19467]  kvm_arch_vcpu_ioctl_run+0xa68/0x1940
[ 1342.025011][T19467]  ? kvm_arch_vcpu_ioctl_run+0x205/0x1940
[ 1342.030732][T19467]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1342.036724][T19467]  ? __pfx_lock_acquire+0x10/0x10
[ 1342.041750][T19467]  ? kvm_vcpu_ioctl+0xeaf/0x1020
[ 1342.046689][T19467]  ? __pfx_lock_release+0x10/0x10
[ 1342.051707][T19467]  ? do_raw_write_lock+0x148/0x4f0
[ 1342.056816][T19467]  ? __pfx_do_raw_write_lock+0x10/0x10
[ 1342.062280][T19467]  kvm_vcpu_ioctl+0x996/0x1020
[ 1342.067063][T19467]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1342.072268][T19467]  ? __asan_memset+0x23/0x50
[ 1342.076855][T19467]  ? smack_file_ioctl+0x35d/0x3b0
[ 1342.081877][T19467]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1342.087251][T19467]  ? __fget_files+0x2a/0x410
[ 1342.091834][T19467]  ? __fget_files+0x2a/0x410
[ 1342.096419][T19467]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1342.101615][T19467]  __se_sys_ioctl+0xf5/0x170
[ 1342.106201][T19467]  do_syscall_64+0xf3/0x230
[ 1342.110704][T19467]  ? clear_bhb_loop+0x35/0x90
[ 1342.115380][T19467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.121267][T19467] RIP: 0033:0x7fcd38b8d169
[ 1342.125674][T19467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1342.145273][T19467] RSP: 002b:00007fcd369f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1342.153682][T19467] RAX: ffffffffffffffda RBX: 00007fcd38da5fa0 RCX: 00007fcd38b8d169
[ 1342.161650][T19467] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 1342.169618][T19467] RBP: 00007fcd38c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1342.177580][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1342.185540][T19467] R13: 0000000000000000 R14: 00007fcd38da5fa0 R15: 00007ffca8d7c6e8
[ 1342.193516][T19467]  </TASK>
[ 1342.196767][T19467] Kernel Offset: disabled
[ 1342.201155][T19467] Rebooting in 86400 seconds..