last executing test programs:

6m4.627700878s ago: executing program 1 (id=744):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
prlimit64(0x0, 0x5, &(0x7f0000000180)={0x8369, 0x7de}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname(r0, 0x0, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x402000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
write$dsp(r4, &(0x7f0000002000), 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0)
close(0xffffffffffffffff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x8, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}})

6m2.832762994s ago: executing program 1 (id=747):
r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x1000)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40002)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @broadcast}, &(0x7f0000000040)=0xc)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r5, &(0x7f0000001400)=""/4108, 0x100c, 0x7)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x800, 0x12)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r8, &(0x7f0000000940)=[{&(0x7f0000000200)='\f', 0x1}], 0x1)
writev(r7, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)

6m2.201766814s ago: executing program 1 (id=750):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
prlimit64(0x0, 0x5, &(0x7f0000000180)={0x8369, 0x7de}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname(r0, 0x0, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x402000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
write$dsp(r4, &(0x7f0000002000), 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0)
r6 = socket(0x11, 0x5, 0x0)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c)

6m0.123411455s ago: executing program 1 (id=754):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

5m59.801105081s ago: executing program 1 (id=756):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

5m59.477809975s ago: executing program 1 (id=758):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000680))
openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000000000002fe, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x10)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [], [0x7, 0x0, 0x0, 0x80]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x7f, 0xb5})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, [<r10=>0x0]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={r10})
close_range(r0, 0xffffffffffffffff, 0x0)

5m58.770806032s ago: executing program 32 (id=758):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000680))
openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000000000002fe, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x10)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [], [0x7, 0x0, 0x0, 0x80]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x7f, 0xb5})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, [<r10=>0x0]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={r10})
close_range(r0, 0xffffffffffffffff, 0x0)

2m31.587614733s ago: executing program 2 (id=1214):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

2m30.105367437s ago: executing program 2 (id=1220):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000900004fa1005e9ee3372866da7f6c00000000000040000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4fc100000100"/28], 0x50)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800", @ANYRES32, @ANYBLOB="0000000000000000009a0e26f02000000000000000000000fc2a83e206fbc3ba78ef871ae92e4011a38baff159db60660000000000000200b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000063000004000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})

2m27.882993719s ago: executing program 2 (id=1226):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
mq_open(0x0, 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

2m26.547067947s ago: executing program 2 (id=1227):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

2m24.669816106s ago: executing program 2 (id=1233):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

2m24.125640227s ago: executing program 2 (id=1235):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
socket(0x15, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xacab)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

2m23.292016688s ago: executing program 33 (id=1235):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
socket(0x15, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xacab)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

17.320104503s ago: executing program 6 (id=1498):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300"/104], 0xa8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

15.551085284s ago: executing program 6 (id=1502):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
socket(0x15, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

13.231101112s ago: executing program 4 (id=1506):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
prlimit64(0x0, 0x5, &(0x7f0000000180)={0x8369, 0x7de}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname(r0, 0x0, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x402000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
write$dsp(r4, &(0x7f0000002000), 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0)
r6 = socket(0x11, 0x5, 0x0)
close(r6)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x8, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}})

12.075846472s ago: executing program 6 (id=1510):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

10.450402656s ago: executing program 5 (id=1513):
fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0)
brk(0x400000ffc000)
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0)
r3 = inotify_init1(0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c)
r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
inotify_add_watch(r3, 0x0, 0x2000434)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]})

10.276278554s ago: executing program 0 (id=1514):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
prlimit64(0x0, 0x5, &(0x7f0000000180)={0x8369, 0x7de}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x402000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
write$dsp(r4, &(0x7f0000002000), 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0)
r6 = socket(0x11, 0x5, 0x0)
close(r6)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x8, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}})

9.699817891s ago: executing program 4 (id=1515):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

9.596955864s ago: executing program 3 (id=1516):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
socket(0x15, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

8.340503449s ago: executing program 5 (id=1517):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/136], 0xa8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

8.332438751s ago: executing program 0 (id=1518):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001140)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0xd12}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0)
shutdown(r3, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)

8.275461029s ago: executing program 4 (id=1519):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r5=>0xffffffffffffffff})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, <r8=>0xffffffffffffffff})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
setrlimit(0x9, 0x0)
close_range(r3, r8, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000})

7.332061096s ago: executing program 0 (id=1520):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000edb000/0x3000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040))
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r5, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

7.213557215s ago: executing program 3 (id=1521):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

6.390900862s ago: executing program 4 (id=1522):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, 0x0, 0x0, 0x40448c0)
shutdown(r0, 0x1)

6.368076792s ago: executing program 6 (id=1523):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000edb000/0x3000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r5, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

6.303294406s ago: executing program 5 (id=1524):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket(0x1e, 0x5, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x2000757)
ftruncate(r0, 0x6000000)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000080))
copy_file_range(r2, 0x0, r0, &(0x7f0000000140)=0x100, 0x3, 0x0)
r3 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x10002f03, 0x5, 0x6, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffa, 0x9, 0xc, 0x1001, 0x9, 0x3, 0xffff, 0x6, 0x7fe000, 0x40000009, 0x830, 0x30000, 0x10007, 0x2, 0x7fe, 0xe2df, 0x2, 0xd, 0x7, 0x3, 0x4, 0x5, 0x70f]})
r4 = fsmount(0xffffffffffffffff, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x21)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x24, 0x2)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
inotify_init1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)

6.266091877s ago: executing program 3 (id=1525):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

6.224208021s ago: executing program 4 (id=1526):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000edb000/0x3000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r5, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

6.15089196s ago: executing program 5 (id=1527):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(0x0, 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

4.608456886s ago: executing program 0 (id=1528):
fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0)
brk(0x400000ffc000)
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0)
inotify_init1(0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c)
r4 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]})

4.567600577s ago: executing program 5 (id=1529):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280), 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0xffffffffffffff45)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
sendmmsg$unix(r2, 0x0, 0x0, 0x4040880)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r5)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b04"], 0x14}}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r7, 0x0, 0x0, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x408d4)

4.105734091s ago: executing program 3 (id=1530):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4.024060851s ago: executing program 6 (id=1531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0)
shutdown(r3, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)

3.812683619s ago: executing program 4 (id=1532):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r2 = socket$pptp(0x18, 0x1, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r3 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
link(0x0, 0x0)
r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x200}, 0x18, 0x0)
landlock_restrict_self(r5, 0x5)
pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00')
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCDELRT(r2, 0x890c, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()

3.05779998s ago: executing program 6 (id=1533):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r5=>0xffffffffffffffff})
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, <r8=>0xffffffffffffffff})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc})
close_range(r3, r8, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)

2.256182798s ago: executing program 3 (id=1534):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0)
shutdown(r3, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)

2.106863242s ago: executing program 0 (id=1535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001140)='io_uring_task_add\x00', 0xffffffffffffffff, 0x0, 0xd12}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0)
shutdown(r3, 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)

728.049293ms ago: executing program 3 (id=1536):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

513.506612ms ago: executing program 0 (id=1537):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

0s ago: executing program 5 (id=1538):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})

kernel console output (not intermixed with test programs):

apter (Artec T1 USB2.0)
[  541.119627][ T5936] usb 3-1: media controller created
[  541.142872][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  541.256866][T11106] dvb-usb: bulk message failed: -22 (2/0)
[  541.456033][T11111] netlink: 'syz.5.1066': attribute type 4 has an invalid length.
[  541.729898][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  541.747282][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  541.799098][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32
[  541.836218][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  542.396888][T11115] netlink: 'syz.3.1067': attribute type 4 has an invalid length.
[  542.517971][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  542.814278][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  542.858224][ T5936] dvb-usb: error while querying for an remote control event.
[  542.916022][T11121] netlink: 'syz.0.1069': attribute type 1 has an invalid length.
[  543.197066][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  543.207448][ T5936] dvb-usb: error while querying for an remote control event.
[  543.260897][T11128] overlayfs: failed lookup in lower (newroot/211, name='bus', err=-40): overlapping layers
[  543.276211][T11121] bond10: entered promiscuous mode
[  543.289108][T11121] 8021q: adding VLAN 0 to HW filter on device bond10
[  543.317323][ T5936] usb 3-1: USB disconnect, device number 10
[  543.429936][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  544.072541][T11143] netlink: 'syz.2.1071': attribute type 4 has an invalid length.
[  545.238194][T11154] netlink: 'syz.2.1074': attribute type 4 has an invalid length.
[  545.260859][T11150] netlink: 'syz.2.1074': attribute type 4 has an invalid length.
[  545.415156][T11156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.423795][T11156] batadv_slave_0: entered promiscuous mode
[  545.749431][ T5936] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  545.928463][ T5936] usb 5-1: Using ep0 maxpacket: 16
[  545.939438][ T5936] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  545.951159][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.989578][ T5936] usb 5-1: config 0 descriptor??
[  546.010493][ T5936] usb 5-1: interface 1 not found
[  546.288649][T11159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.368119][   T44] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  546.377369][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'.
[  546.386362][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'.
[  546.643005][   T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.678012][   T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  546.693773][   T44] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  546.710702][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.792645][   T44] usb 3-1: config 0 descriptor??
[  546.813956][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  546.823317][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  546.850843][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  546.941209][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  547.027073][T11169] dvb-usb: bulk message failed: -22 (2/0)
[  547.037788][   T44] usb 3-1: media controller created
[  547.046199][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  547.166685][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  547.236538][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  547.262654][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33
[  547.294003][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  547.495889][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  547.658061][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  547.668491][   T24] dvb-usb: error while querying for an remote control event.
[  547.872969][ T5936] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  547.918348][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  547.924357][  T978] dvb-usb: error while querying for an remote control event.
[  548.138651][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.181903][ T5936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  548.184101][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  548.206890][   T44] dvb-usb: error while querying for an remote control event.
[  548.388348][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  548.394198][   T44] dvb-usb: error while querying for an remote control event.
[  548.425703][ T5936] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  548.453739][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.526628][  T978] usb 5-1: USB disconnect, device number 11
[  548.558352][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  548.581177][   T44] dvb-usb: error while querying for an remote control event.
[  549.014109][T11195] netlink: 'syz.4.1085': attribute type 1 has an invalid length.
[  549.044000][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  549.049965][ T5936] usb 4-1: config 0 descriptor??
[  549.135585][T11197] overlayfs: failed lookup in lower (newroot/211, name='bus', err=-40): overlapping layers
[  549.506014][  T978] dvb-usb: error while querying for an remote control event.
[  549.639947][   T24] usb 3-1: USB disconnect, device number 11
[  549.656169][T11185] dvb-usb: bulk message failed: -22 (2/0)
[  549.703804][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  549.870336][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  549.903687][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  549.936475][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  549.959123][ T5936] usb 4-1: media controller created
[  549.965187][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  550.039115][T11202] overlayfs: failed lookup in lower (newroot/214, name='bus', err=-40): overlapping layers
[  550.266574][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  550.341854][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  550.373804][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34
[  550.461393][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  550.613541][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  550.643788][T11210] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  550.678613][ T5935] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  550.777968][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  550.783857][ T5936] dvb-usb: error while querying for an remote control event.
[  550.889995][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  550.907923][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  551.037983][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  551.043879][T10888] dvb-usb: error while querying for an remote control event.
[  551.075065][ T5935] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  551.163185][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.197454][ T5935] usb 5-1: config 0 descriptor??
[  551.227945][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  551.233695][   T10] dvb-usb: error while querying for an remote control event.
[  551.311272][ T5935] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  551.333737][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  551.333966][   T10] usb 4-1: USB disconnect, device number 13
[  551.358920][ T5935] dvb-usb: bulk message failed: -22 (3/0)
[  551.428347][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  551.459480][T10888] dvb-usb: error while querying for an remote control event.
[  551.495534][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1090'.
[  551.517996][T11205] dvb-usb: bulk message failed: -22 (2/0)
[  551.543815][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  551.578191][ T5935] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  551.729296][ T5935] usb 5-1: media controller created
[  551.776060][   T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  552.099705][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  552.111980][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  552.129796][ T5935] dvb-usb: bulk message failed: -22 (6/0)
[  552.155920][ T5935] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  552.220123][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35
[  552.296540][ T5935] dvb-usb: schedule remote query interval to 150 msecs.
[  552.314876][ T5935] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  552.369855][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.478220][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  552.483981][ T5935] dvb-usb: error while querying for an remote control event.
[  552.528016][   T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  552.669390][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  552.685608][ T5935] dvb-usb: error while querying for an remote control event.
[  552.685631][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  552.792762][   T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  552.862554][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.872924][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  552.879866][ T5935] dvb-usb: error while querying for an remote control event.
[  552.939726][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.019461][   T24] usb 3-1: config 0 descriptor??
[  553.060362][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  553.071690][   T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  553.093695][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  553.096146][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.121237][   T10] usb 4-1: config 0 descriptor??
[  553.138948][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  553.164069][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  553.174202][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  553.182785][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  553.195864][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  553.207704][   T10] usb 4-1: media controller created
[  553.228008][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  553.233810][ T5936] dvb-usb: error while querying for an remote control event.
[  553.253671][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  553.301036][T11220] dvb-usb: bulk message failed: -22 (2/0)
[  553.328361][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  553.353543][T11229] dvb-usb: bulk message failed: -22 (2/0)
[  553.398151][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  553.404698][ T5936] dvb-usb: error while querying for an remote control event.
[  553.492237][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  553.493314][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  553.511961][ T5936] usb 5-1: USB disconnect, device number 12
[  553.524981][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  553.546189][   T24] usb 3-1: media controller created
[  553.552326][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36
[  553.581033][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  553.924448][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  553.932786][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  553.967632][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  553.986408][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  554.089236][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  554.095711][   T10] dvb-usb: error while querying for an remote control event.
[  554.133182][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37
[  554.245599][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  554.271776][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  554.280780][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  554.286835][ T5935] dvb-usb: error while querying for an remote control event.
[  554.505419][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  554.509482][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  554.550167][   T10] dvb-usb: error while querying for an remote control event.
[  554.550340][   T24] dvb-usb: error while querying for an remote control event.
[  554.720533][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  554.726585][   T10] dvb-usb: error while querying for an remote control event.
[  554.811700][   T24] usb 3-1: USB disconnect, device number 12
[  554.949270][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  554.957983][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  554.964880][ T5935] dvb-usb: error while querying for an remote control event.
[  555.206401][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  555.214462][ T5935] dvb-usb: error while querying for an remote control event.
[  555.269977][T11249] netlink: 'syz.4.1095': attribute type 1 has an invalid length.
[  555.306510][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  555.377971][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  555.383748][ T5935] dvb-usb: error while querying for an remote control event.
[  555.489606][T11249] bond12: entered promiscuous mode
[  555.495615][T11249] 8021q: adding VLAN 0 to HW filter on device bond12
[  555.505049][T11255] netlink: 'syz.0.1097': attribute type 4 has an invalid length.
[  555.524295][T11255] netlink: 'syz.0.1097': attribute type 4 has an invalid length.
[  555.579806][   T44] usb 4-1: USB disconnect, device number 14
[  555.877472][T11254] overlayfs: failed lookup in lower (newroot/214, name='bus', err=-40): overlapping layers
[  556.062342][   T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  556.947939][ T5936] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  557.578926][T11275] netlink: 'syz.0.1103': attribute type 4 has an invalid length.
[  557.700840][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  557.732990][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  557.743168][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  557.752275][ T5936] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  557.767379][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.833919][ T5936] usb 6-1: config 0 descriptor??
[  557.877960][   T10] usb 4-1: Using ep0 maxpacket: 16
[  557.978048][T11278] overlayfs: failed lookup in lower (newroot/215, name='bus', err=-40): overlapping layers
[  558.067092][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  558.078643][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.195477][T11277] netlink: 'syz.2.1104': attribute type 4 has an invalid length.
[  558.399868][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  558.411358][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  558.457411][   T10] usb 4-1: config 0 descriptor??
[  558.479383][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  558.565831][T11265] dvb-usb: bulk message failed: -22 (2/0)
[  558.628012][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  558.635423][   T10] usb 4-1: interface 1 not found
[  558.652557][ T5936] usb 6-1: media controller created
[  558.671453][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  558.861947][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.889913][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  558.898431][T10888] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  558.930920][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  558.963448][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'.
[  558.976035][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38
[  558.987959][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'.
[  559.249011][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  559.255990][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  559.341324][T10888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.361231][T10888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  559.386103][ T5936] usb 4-1: USB disconnect, device number 15
[  559.408416][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  559.415423][   T10] dvb-usb: error while querying for an remote control event.
[  559.426012][T10888] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  559.458066][T10888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.512958][T10888] usb 1-1: config 0 descriptor??
[  559.545222][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  559.577930][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  559.586943][   T10] dvb-usb: error while querying for an remote control event.
[  559.643218][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  559.660162][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  559.772440][   T10] usb 6-1: USB disconnect, device number 4
[  559.787931][   T44] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  559.821576][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  559.874111][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  559.905052][T10888] usb 1-1: media controller created
[  559.932917][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  560.025777][   T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.043707][   T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  560.078520][   T44] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  560.092471][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  560.115230][T11302] netlink: 'syz.3.1109': attribute type 1 has an invalid length.
[  560.127029][T11303] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  560.268268][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  560.281944][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39
[  560.339183][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.366721][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  560.395044][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  560.486491][T11306] overlayfs: failed lookup in lower (newroot/217, name='bus', err=-40): overlapping layers
[  560.672512][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  560.678313][   T10] dvb-usb: error while querying for an remote control event.
[  560.839030][   T44] usb 3-1: config 0 descriptor??
[  560.851354][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  560.857149][T10888] dvb-usb: error while querying for an remote control event.
[  560.890832][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  560.897441][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  560.921703][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  560.975589][T11302] bond14: entered promiscuous mode
[  560.985733][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  560.998786][   T44] usb 3-1: media controller created
[  561.016884][T11302] 8021q: adding VLAN 0 to HW filter on device bond14
[  561.044950][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  561.064595][T11294] dvb-usb: bulk message failed: -22 (2/0)
[  561.077945][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  561.084868][T10888] dvb-usb: error while querying for an remote control event.
[  561.487728][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  561.517716][T10888] dvb-usb: error while querying for an remote control event.
[  561.518292][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  561.685575][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  561.698001][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  561.703795][T10888] dvb-usb: error while querying for an remote control event.
[  561.759159][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40
[  561.784840][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  561.797886][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  561.917988][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  561.925353][T10888] dvb-usb: error while querying for an remote control event.
[  561.957915][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  561.963823][   T44] dvb-usb: error while querying for an remote control event.
[  562.147959][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  562.273108][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  562.284230][   T44] dvb-usb: error while querying for an remote control event.
[  562.284523][T10888] dvb-usb: error while querying for an remote control event.
[  562.460973][T10888] usb 1-1: USB disconnect, device number 10
[  562.468394][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  562.617980][   T44] dvb-usb: error while querying for an remote control event.
[  562.701833][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  562.708215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  562.718615][   T24] usb 3-1: USB disconnect, device number 13
[  562.900523][   T44] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  562.980440][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  563.187970][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  563.298041][   T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  563.527214][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  563.558681][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1113'.
[  563.586621][   T44] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  563.712519][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.846540][   T44] usb 5-1: config 0 descriptor??
[  563.872089][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  563.880922][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  563.952949][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  563.985737][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  564.012696][   T44] usb 5-1: media controller created
[  564.078102][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  564.115833][T11317] dvb-usb: bulk message failed: -22 (2/0)
[  564.230375][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  564.332917][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  564.770622][T11345] netlink: 'syz.5.1117': attribute type 1 has an invalid length.
[  564.782485][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41
[  564.897915][T10888] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  564.968705][T11348] overlayfs: failed lookup in lower (newroot/73, name='bus', err=-40): overlapping layers
[  565.261623][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  565.275204][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  565.519171][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  565.588741][   T44] dvb-usb: error while querying for an remote control event.
[  565.600435][T11345] bond8: entered promiscuous mode
[  565.605877][T11345] 8021q: adding VLAN 0 to HW filter on device bond8
[  565.747350][T10888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.762103][T10888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  565.784044][T10888] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  565.803330][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.813524][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  565.819530][   T44] dvb-usb: error while querying for an remote control event.
[  565.856415][T10888] usb 4-1: config 0 descriptor??
[  565.971002][   T44] usb 5-1: USB disconnect, device number 13
[  566.005511][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  566.076900][   T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  566.098769][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  566.126316][T11352] netlink: 'syz.5.1119': attribute type 1 has an invalid length.
[  566.136862][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  566.199929][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  566.201371][T11352] bond9: entered promiscuous mode
[  566.207014][T10888] usb 4-1: media controller created
[  566.229339][T11352] 8021q: adding VLAN 0 to HW filter on device bond9
[  566.367593][T11342] dvb-usb: bulk message failed: -22 (2/0)
[  566.381665][T11362] overlayfs: missing 'lowerdir'
[  566.604201][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  567.005238][T11352] overlayfs: failed lookup in lower (newroot/74, name='bus', err=-40): overlapping layers
[  567.017009][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  567.163907][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  567.190904][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42
[  567.210166][T11370] overlayfs: missing 'lowerdir'
[  567.258823][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  567.266015][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  567.471089][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  567.476951][T10888] dvb-usb: error while querying for an remote control event.
[  567.658023][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  567.667939][T10888] dvb-usb: error while querying for an remote control event.
[  567.819024][T10888] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  567.842546][   T24] usb 4-1: USB disconnect, device number 16
[  567.856534][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  568.147685][T10888] usb 6-1: Using ep0 maxpacket: 16
[  568.169743][T10888] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  568.188415][T10888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.214002][T10888] usb 6-1: config 0 descriptor??
[  568.222299][T10888] usb 6-1: interface 1 not found
[  568.535797][T11372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.778917][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'.
[  568.947999][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'.
[  569.801446][   T24] usb 6-1: USB disconnect, device number 5
[  570.219261][T11402] netlink: 'syz.0.1128': attribute type 4 has an invalid length.
[  570.887556][T11409] netlink: 'syz.3.1130': attribute type 4 has an invalid length.
[  571.316961][T11412] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  571.347047][T11412] bond11: entered promiscuous mode
[  571.353464][T11412] 8021q: adding VLAN 0 to HW filter on device bond11
[  571.465746][T11418] overlayfs: missing 'lowerdir'
[  571.665697][T11421] overlayfs: failed lookup in lower (newroot/227, name='bus', err=-40): overlapping layers
[  572.519446][   T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  572.696915][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  572.711781][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  572.721644][   T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  572.772148][T11433] netlink: 'syz.4.1136': attribute type 1 has an invalid length.
[  572.998070][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.000003][T11433] bond13: entered promiscuous mode
[  573.039731][   T24] usb 4-1: config 0 descriptor??
[  573.069820][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  573.087395][T11433] 8021q: adding VLAN 0 to HW filter on device bond13
[  573.093724][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  573.112448][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  573.246096][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  573.318028][   T24] usb 4-1: media controller created
[  573.339997][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  573.353898][T11428] dvb-usb: bulk message failed: -22 (2/0)
[  573.383171][T11444] netlink: 'syz.5.1137': attribute type 1 has an invalid length.
[  573.467137][T11444] bond10: entered promiscuous mode
[  573.472779][T11444] 8021q: adding VLAN 0 to HW filter on device bond10
[  573.501641][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  573.687920][T11446] overlayfs: failed lookup in lower (newroot/77, name='bus', err=-40): overlapping layers
[  573.974588][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  573.986043][T11433] overlayfs: failed lookup in lower (newroot/221, name='bus', err=-40): overlapping layers
[  574.034693][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43
[  574.073423][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  574.097392][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  574.248427][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  574.254345][   T24] dvb-usb: error while querying for an remote control event.
[  574.269951][T11452] netlink: 'syz.5.1139': attribute type 1 has an invalid length.
[  574.286874][T11452] bond11: entered promiscuous mode
[  574.296955][T11452] 8021q: adding VLAN 0 to HW filter on device bond11
[  574.419806][T11456] overlayfs: failed lookup in lower (newroot/78, name='bus', err=-40): overlapping layers
[  574.427932][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  574.435798][   T24] dvb-usb: error while querying for an remote control event.
[  574.893589][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  574.900367][ T5976] dvb-usb: error while querying for an remote control event.
[  575.061191][   T24] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  575.077751][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  575.103294][ T5976] dvb-usb: error while querying for an remote control event.
[  575.267374][T11469] netlink: 'syz.5.1143': attribute type 1 has an invalid length.
[  575.284481][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.304087][T11469] bond12: entered promiscuous mode
[  575.310900][T11469] 8021q: adding VLAN 0 to HW filter on device bond12
[  575.347009][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  575.353438][ T5976] dvb-usb: error while querying for an remote control event.
[  575.389696][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  575.456236][   T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  575.551271][T11471] overlayfs: failed lookup in lower (newroot/79, name='bus', err=-40): overlapping layers
[  575.568378][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  575.575550][ T5976] dvb-usb: error while querying for an remote control event.
[  575.738097][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  575.774540][ T5976] dvb-usb: error while querying for an remote control event.
[  575.787950][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.858926][   T24] usb 3-1: config 0 descriptor??
[  575.911231][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  575.930154][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  575.955910][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  575.968251][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  575.973993][ T5976] dvb-usb: error while querying for an remote control event.
[  575.992449][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  576.007327][   T24] usb 3-1: media controller created
[  576.036692][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  576.102391][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  576.127769][T10888] usb 4-1: USB disconnect, device number 17
[  576.138296][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  576.163432][T11460] dvb-usb: bulk message failed: -22 (2/0)
[  576.177092][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44
[  576.310481][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  576.338029][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  576.823435][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  576.832447][   T24] dvb-usb: error while querying for an remote control event.
[  577.097966][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  577.103893][ T5976] dvb-usb: error while querying for an remote control event.
[  577.466506][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  577.472744][ T5976] dvb-usb: error while querying for an remote control event.
[  577.621336][T11490] overlayfs: missing 'lowerdir'
[  577.670597][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  577.677500][ T5976] dvb-usb: error while querying for an remote control event.
[  577.825859][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  577.830164][ T5976] usb 3-1: USB disconnect, device number 14
[  577.847978][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  577.853906][ T5890] dvb-usb: error while querying for an remote control event.
[  578.018128][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  578.260502][   T24] dvb-usb: error while querying for an remote control event.
[  578.313284][ T5976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  578.647976][T10888] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  578.827960][T10888] usb 4-1: Using ep0 maxpacket: 16
[  578.989183][T10888] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  579.031405][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.117854][T10888] usb 4-1: config 0 descriptor??
[  579.287028][T10888] usb 4-1: interface 1 not found
[  579.544893][T11491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  579.640106][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'.
[  579.723494][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'.
[  580.285756][ T5976] usb 4-1: USB disconnect, device number 18
[  580.927803][T11520] netlink: 'syz.0.1154': attribute type 4 has an invalid length.
[  581.118008][T11524] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  581.429889][T11528] netlink: 'syz.4.1157': attribute type 1 has an invalid length.
[  581.446988][T11528] bond14: entered promiscuous mode
[  581.452527][T11528] 8021q: adding VLAN 0 to HW filter on device bond14
[  581.610472][T11531] overlayfs: failed lookup in lower (newroot/225, name='bus', err=-40): overlapping layers
[  582.677021][T11550] netlink: 'syz.4.1161': attribute type 1 has an invalid length.
[  582.821517][T11550] bond15: entered promiscuous mode
[  582.868334][T11550] 8021q: adding VLAN 0 to HW filter on device bond15
[  583.503083][T11554] overlayfs: failed lookup in lower (newroot/226, name='bus', err=-40): overlapping layers
[  583.756903][  T978] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  583.967923][  T978] usb 6-1: Using ep0 maxpacket: 16
[  583.980481][  T978] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  583.989769][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.060563][  T978] usb 6-1: config 0 descriptor??
[  584.094964][  T978] usb 6-1: interface 1 not found
[  584.176128][T11562] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  584.203256][T11562] bond12: entered promiscuous mode
[  584.209485][T11562] 8021q: adding VLAN 0 to HW filter on device bond12
[  584.361438][T11556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.396003][T11566] netlink: 'syz.4.1165': attribute type 4 has an invalid length.
[  584.475317][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'.
[  584.484870][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'.
[  584.570302][T11569] overlayfs: failed lookup in lower (newroot/228, name='bus', err=-40): overlapping layers
[  585.349388][ T5936] usb 6-1: USB disconnect, device number 6
[  585.517955][T10888] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  585.568747][ T5935] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  585.728166][ T5935] usb 5-1: Using ep0 maxpacket: 16
[  585.745813][T11581] netlink: 'syz.2.1168': attribute type 4 has an invalid length.
[  585.782039][ T5935] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  585.788064][  T978] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  585.791300][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.807973][T10888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.818354][T10888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  585.833707][ T5935] usb 5-1: config 0 descriptor??
[  585.843434][T10888] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  585.861081][ T5935] usb 5-1: interface 1 not found
[  585.870453][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.900522][T10888] usb 4-1: config 0 descriptor??
[  585.918883][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  585.934789][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  585.956934][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  585.958013][  T978] usb 1-1: Using ep0 maxpacket: 16
[  585.980009][  T978] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  585.989372][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.003343][  T978] usb 1-1: config 0 descriptor??
[  586.009527][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  586.031765][T10888] usb 4-1: media controller created
[  586.036296][  T978] usb 1-1: interface 1 not found
[  586.131553][T11573] dvb-usb: bulk message failed: -22 (2/0)
[  586.143835][T11576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.154854][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  586.196199][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  586.207045][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'.
[  586.216683][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'.
[  586.234728][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  586.332554][T11589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.384925][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45
[  586.439596][  T978] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  586.742007][  T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.755860][  T978] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  586.994391][  T978] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  587.070594][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.070934][ T5935] usb 1-1: USB disconnect, device number 11
[  587.104558][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  587.104965][  T978] usb 6-1: config 0 descriptor??
[  587.123719][T11594] overlayfs: missing 'lowerdir'
[  587.129487][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  587.164825][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  587.287927][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  587.293680][T10888] dvb-usb: error while querying for an remote control event.
[  587.369657][T11586] dvb-usb: bulk message failed: -22 (2/0)
[  587.387488][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  587.415474][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  587.498068][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  587.503817][ T5935] dvb-usb: error while querying for an remote control event.
[  587.530251][T10888] usb 4-1: USB disconnect, device number 19
[  587.613726][T11598] netlink: 'syz.2.1173': attribute type 1 has an invalid length.
[  587.632747][T11599] overlayfs: missing 'lowerdir'
[  587.879795][T11598] bond13: entered promiscuous mode
[  587.885302][T11598] 8021q: adding VLAN 0 to HW filter on device bond13
[  587.927232][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  588.203938][  T978] usb 6-1: media controller created
[  588.221234][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  588.316458][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  588.356604][ T5936] usb 5-1: USB disconnect, device number 14
[  588.393699][T11598] overlayfs: failed lookup in lower (newroot/231, name='bus', err=-40): overlapping layers
[  588.420337][T11608] netlink: 'syz.4.1175': attribute type 1 has an invalid length.
[  588.428456][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  588.439587][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46
[  588.544961][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  588.643442][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  588.646278][T11608] bond16: entered promiscuous mode
[  588.668408][T11608] 8021q: adding VLAN 0 to HW filter on device bond16
[  588.697160][T11616] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  588.805968][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  588.811875][  T978] dvb-usb: error while querying for an remote control event.
[  588.957018][T11610] overlayfs: failed lookup in lower (newroot/229, name='bus', err=-40): overlapping layers
[  589.206874][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  589.212722][  T978] dvb-usb: error while querying for an remote control event.
[  589.229870][T11616] bond15: entered promiscuous mode
[  589.246654][T11616] 8021q: adding VLAN 0 to HW filter on device bond15
[  589.367939][ T5936] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  589.378076][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  589.383819][  T978] dvb-usb: error while querying for an remote control event.
[  589.755406][T11616] overlayfs: failed lookup in lower (newroot/228, name='bus', err=-40): overlapping layers
[  589.847943][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  589.853706][  T978] dvb-usb: error while querying for an remote control event.
[  589.906081][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.966562][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  590.000725][ T5936] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  590.036609][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  590.041139][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  590.077950][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.125965][  T978] dvb-usb: error while querying for an remote control event.
[  590.145503][T11629] netlink: 'syz.3.1179': attribute type 1 has an invalid length.
[  590.145621][ T5936] usb 3-1: config 0 descriptor??
[  590.162448][ T5935] usb 6-1: USB disconnect, device number 7
[  590.186853][T11631] netlink: 'syz.5.1180': attribute type 1 has an invalid length.
[  590.217384][T11631] bond13: entered promiscuous mode
[  590.223013][T11631] 8021q: adding VLAN 0 to HW filter on device bond13
[  590.242487][ T5935] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  590.340716][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  590.350339][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  590.357446][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  590.373898][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  590.382620][ T5936] usb 3-1: media controller created
[  590.402810][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  590.430633][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  590.446593][T11631] overlayfs: failed lookup in lower (newroot/86, name='bus', err=-40): overlapping layers
[  590.529189][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  590.609355][T11634] overlayfs: failed lookup in lower (newroot/229, name='bus', err=-40): overlapping layers
[  590.834255][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.844445][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  590.906905][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  590.916479][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  590.925832][T11620] dvb-usb: bulk message failed: -22 (2/0)
[  590.934513][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47
[  590.947936][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.003498][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  591.122742][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  591.131322][   T10] usb 5-1: config 0 descriptor??
[  591.549311][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  591.555052][ T5936] dvb-usb: error while querying for an remote control event.
[  591.585587][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  591.596478][T11630] dvb-usb: bulk message failed: -22 (2/0)
[  591.614451][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  591.636948][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  591.727529][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  591.744601][T11648] netlink: 'syz.3.1184': attribute type 1 has an invalid length.
[  591.759913][   T10] usb 5-1: media controller created
[  591.787909][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  591.873940][ T5935] dvb-usb: error while querying for an remote control event.
[  591.884364][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.904485][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  591.919485][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  591.933346][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48
[  591.965285][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  591.973563][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  591.985003][T11645] overlayfs: failed lookup in lower (newroot/239, name='bus', err=-40): overlapping layers
[  592.037931][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  592.043750][   T10] dvb-usb: error while querying for an remote control event.
[  592.057955][T11648] bond16: entered promiscuous mode
[  592.117140][T11648] 8021q: adding VLAN 0 to HW filter on device bond16
[  592.128168][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  592.134031][   T10] dvb-usb: error while querying for an remote control event.
[  592.240707][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  592.252392][   T10] dvb-usb: error while querying for an remote control event.
[  592.393500][T11651] overlayfs: failed lookup in lower (newroot/230, name='bus', err=-40): overlapping layers
[  592.444116][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  592.603619][   T10] dvb-usb: error while querying for an remote control event.
[  592.611612][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  592.617350][ T5936] dvb-usb: error while querying for an remote control event.
[  592.798991][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  592.804776][ T5936] dvb-usb: error while querying for an remote control event.
[  592.839306][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  592.845864][ T5936] dvb-usb: error while querying for an remote control event.
[  592.918027][ T5976] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  593.150443][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  593.156183][   T10] dvb-usb: error while querying for an remote control event.
[  593.163635][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  593.187990][ T5936] dvb-usb: error while querying for an remote control event.
[  593.310555][ T5976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.346049][ T5976] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  593.346302][T11663] overlayfs: failed lookup in lower (newroot/231, name='bus', err=-40): overlapping layers
[  593.584510][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  593.614170][   T10] dvb-usb: error while querying for an remote control event.
[  593.621831][ T5976] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  593.626723][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  593.639824][T10888] usb 3-1: USB disconnect, device number 15
[  593.679388][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.698592][ T5936] dvb-usb: error while querying for an remote control event.
[  593.743493][ T5976] usb 1-1: config 0 descriptor??
[  594.005791][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  594.012131][   T10] dvb-usb: error while querying for an remote control event.
[  594.027011][T11667] overlayfs: failed lookup in lower (newroot/233, name='bus', err=-40): overlapping layers
[  594.176902][ T5976] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  594.183711][ T5976] dvb-usb: bulk message failed: -22 (3/0)
[  594.187889][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  594.191824][ T5976] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  594.197976][   T10] dvb-usb: error while querying for an remote control event.
[  594.345624][ T5976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  594.352808][ T5976] usb 1-1: media controller created
[  594.824666][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  594.830546][   T10] dvb-usb: error while querying for an remote control event.
[  594.872204][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  594.978635][ T5976] dvb-usb: bulk message failed: -22 (6/0)
[  595.000001][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  595.005883][ T5936] dvb-usb: error while querying for an remote control event.
[  595.094995][ T5976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  595.278037][   T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  595.318261][ T5976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49
[  595.354786][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  595.365548][ T5936] dvb-usb: error while querying for an remote control event.
[  595.384803][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  595.388104][ T5890] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  595.477053][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.490123][ T5976] dvb-usb: schedule remote query interval to 150 msecs.
[  595.491136][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  595.497084][ T5976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  595.626300][ T5935] usb 5-1: USB disconnect, device number 15
[  595.632642][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  595.641138][ T5936] dvb-usb: error while querying for an remote control event.
[  595.656968][   T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  595.669053][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.726348][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  595.738122][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  595.746763][ T5976] dvb-usb: error while querying for an remote control event.
[  595.753638][ T5935] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  595.767288][ T5890] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  595.775370][   T10] usb 4-1: config 0 descriptor??
[  595.817565][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  595.826498][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  595.837170][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  595.850536][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.861376][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  595.876648][   T10] usb 4-1: media controller created
[  595.987515][ T5976] dvb-usb: bulk message failed: -22 (1/0)
[  596.005158][ T5976] dvb-usb: error while querying for an remote control event.
[  596.013578][ T5890] usb 6-1: config 0 descriptor??
[  596.035864][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  596.056646][ T5890] usb 6-1: interface 1 not found
[  596.065316][T11676] dvb-usb: bulk message failed: -22 (2/0)
[  596.117206][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  596.197886][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  596.203653][ T5890] dvb-usb: error while querying for an remote control event.
[  596.224739][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  596.253388][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50
[  596.303551][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  596.336803][T11680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.350275][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  596.476771][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  596.486469][ T5890] dvb-usb: error while querying for an remote control event.
[  596.494825][  T978] usb 1-1: USB disconnect, device number 12
[  596.506797][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'.
[  596.514219][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  596.521427][ T5936] dvb-usb: error while querying for an remote control event.
[  596.522286][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'.
[  596.703259][  T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  596.758662][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  596.927396][   T10] dvb-usb: error while querying for an remote control event.
[  597.196494][ T5976] usb 6-1: USB disconnect, device number 8
[  597.339495][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  597.345276][ T5935] dvb-usb: error while querying for an remote control event.
[  597.428245][  T978] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  597.599208][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  597.679907][  T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.713561][ T5935] dvb-usb: error while querying for an remote control event.
[  597.721047][  T978] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  597.765902][  T978] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  597.787383][ T5935] usb 4-1: USB disconnect, device number 20
[  597.816498][ T5935] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  597.924755][T11704] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  597.966104][T11704] bond14: entered promiscuous mode
[  597.990882][T11704] 8021q: adding VLAN 0 to HW filter on device bond14
[  598.016513][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.043230][  T978] usb 1-1: config 0 descriptor??
[  598.090352][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  598.096968][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  598.362780][T11704] overlayfs: failed lookup in lower (newroot/236, name='bus', err=-40): overlapping layers
[  598.503135][T11709] netlink: 'syz.3.1197': attribute type 1 has an invalid length.
[  598.862977][T11709] bond17: entered promiscuous mode
[  598.871503][T11709] 8021q: adding VLAN 0 to HW filter on device bond17
[  599.050299][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  599.082745][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  599.098062][  T978] usb 1-1: media controller created
[  599.159220][T11695] dvb-usb: bulk message failed: -22 (2/0)
[  599.269410][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  599.462701][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  599.484032][T11709] overlayfs: failed lookup in lower (newroot/233, name='bus', err=-40): overlapping layers
[  599.575384][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  599.646472][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51
[  599.730074][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  599.756541][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  599.766347][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  599.911183][T11724] netlink: 'syz.4.1202': attribute type 1 has an invalid length.
[  599.919659][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  599.971381][  T978] dvb-usb: error while querying for an remote control event.
[  600.197904][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  600.203687][  T978] dvb-usb: error while querying for an remote control event.
[  600.242281][T11724] bond17: entered promiscuous mode
[  600.250538][T11724] 8021q: adding VLAN 0 to HW filter on device bond17
[  600.568433][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  600.716323][  T978] dvb-usb: error while querying for an remote control event.
[  600.729179][T11724] overlayfs: failed lookup in lower (newroot/233, name='bus', err=-40): overlapping layers
[  600.855683][T11733] overlayfs: failed lookup in lower (newroot/234, name='bus', err=-40): overlapping layers
[  601.161302][  T978] usb 1-1: USB disconnect, device number 13
[  601.967111][  T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  602.298078][ T5936] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  602.519769][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  602.598763][ T5936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  602.648237][ T5936] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  602.772919][  T978] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  602.827989][   T24] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  602.943565][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.050339][ T5936] usb 4-1: config 0 descriptor??
[  603.099100][  T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  603.109535][  T978] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  603.126360][  T978] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  603.223349][T11765] netlink: 'syz.2.1209': attribute type 4 has an invalid length.
[  603.296138][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.319688][  T978] usb 1-1: config 0 descriptor??
[  603.329845][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  603.407366][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  603.408084][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  603.423308][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  603.445044][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  603.494288][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  603.512119][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  603.529163][  T978] usb 1-1: media controller created
[  603.568216][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  603.570942][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  603.596961][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  603.756262][   T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  603.785455][T11751] dvb-usb: bulk message failed: -22 (2/0)
[  603.945512][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.961605][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  603.968996][ T5936] usb 4-1: media controller created
[  603.995356][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  604.011145][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  604.086773][T11768] overlayfs: failed lookup in lower (newroot/94, name='bus', err=-40): overlapping layers
[  604.336075][   T24] usb 5-1: config 0 descriptor??
[  604.338289][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  604.378348][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  604.382723][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  604.450834][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input52
[  604.464335][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  604.472189][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  604.497498][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  604.507463][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  604.510375][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53
[  604.602306][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  604.622859][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  604.638526][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  604.741718][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  604.778222][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  604.784202][ T5936] dvb-usb: error while querying for an remote control event.
[  604.842777][  T978] dvb-usb: error while querying for an remote control event.
[  604.856420][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  604.865540][T11761] dvb-usb: bulk message failed: -22 (2/0)
[  604.871907][   T24] usb 5-1: media controller created
[  604.941834][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  604.958553][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  604.964312][T10888] dvb-usb: error while querying for an remote control event.
[  604.975313][ T5936] usb 4-1: USB disconnect, device number 21
[  605.008145][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  605.013960][  T978] dvb-usb: error while querying for an remote control event.
[  605.124601][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  605.130844][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  605.143330][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  605.201481][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54
[  605.268323][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  605.274223][  T978] dvb-usb: error while querying for an remote control event.
[  605.292212][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  605.301452][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  605.399315][ T5890] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  605.447415][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  605.457915][   T24] dvb-usb: error while querying for an remote control event.
[  605.470369][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  605.476098][   T24] dvb-usb: error while querying for an remote control event.
[  605.567989][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  605.582458][ T5890] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  605.612188][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.627971][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  605.635402][   T24] dvb-usb: error while querying for an remote control event.
[  605.650459][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  605.673089][  T978] dvb-usb: error while querying for an remote control event.
[  605.764883][ T5890] usb 6-1: config 0 descriptor??
[  605.828122][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  605.891438][  T978] dvb-usb: error while querying for an remote control event.
[  605.899176][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  605.905921][ T5890] usb 6-1: interface 1 not found
[  605.931307][   T24] dvb-usb: error while querying for an remote control event.
[  606.063445][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.107971][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  606.115849][   T24] dvb-usb: error while querying for an remote control event.
[  606.123349][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  606.137932][ T5890] dvb-usb: error while querying for an remote control event.
[  606.156000][T10888] usb 1-1: USB disconnect, device number 14
[  606.195156][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1212'.
[  606.241216][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1212'.
[  606.319361][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  606.319614][   T10] usb 6-1: USB disconnect, device number 9
[  606.325128][ T5890] dvb-usb: error while querying for an remote control event.
[  606.382321][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  606.391754][ T5890] usb 5-1: USB disconnect, device number 16
[  606.407480][T11790] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  606.484273][ T5890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  606.496471][T11790] bond12: entered promiscuous mode
[  606.508291][T11790] 8021q: adding VLAN 0 to HW filter on device bond12
[  606.520155][T11796] netlink: 'syz.4.1216': attribute type 1 has an invalid length.
[  606.597172][T11796] bond18: entered promiscuous mode
[  606.603196][T11796] 8021q: adding VLAN 0 to HW filter on device bond18
[  606.716306][T11792] overlayfs: failed lookup in lower (newroot/243, name='bus', err=-40): overlapping layers
[  607.451879][T11801] netlink: 'syz.5.1218': attribute type 1 has an invalid length.
[  607.525829][T11801] bond14: entered promiscuous mode
[  607.531603][T11801] 8021q: adding VLAN 0 to HW filter on device bond14
[  607.724947][T11812] netlink: 'syz.4.1221': attribute type 1 has an invalid length.
[  607.893521][T11815] overlayfs: failed lookup in lower (newroot/237, name='bus', err=-40): overlapping layers
[  608.245498][   T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  608.566153][T11819] overlayfs: failed lookup in lower (newroot/96, name='bus', err=-40): overlapping layers
[  608.880099][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.893656][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  608.905714][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  608.917917][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.088353][   T10] usb 1-1: config 0 descriptor??
[  609.167013][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  609.241080][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  609.403333][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  609.484310][T11829] overlayfs: missing 'lowerdir'
[  609.499662][T11816] dvb-usb: bulk message failed: -22 (2/0)
[  609.508953][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  609.517284][   T10] usb 1-1: media controller created
[  609.557564][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  609.899493][  T978] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  609.939877][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  610.095726][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  610.097128][T11838] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  610.137768][  T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  610.139935][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55
[  610.150128][  T978] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  610.194365][  T978] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  610.219235][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.227559][T11838] bond15: entered promiscuous mode
[  610.271544][  T978] usb 6-1: config 0 descriptor??
[  610.280520][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  610.288745][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  610.321032][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  610.335199][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  610.342680][  T978] usb 6-1: media controller created
[  610.350081][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  610.359145][T11838] 8021q: adding VLAN 0 to HW filter on device bond15
[  610.468725][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  610.468825][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  610.492526][T11831] dvb-usb: bulk message failed: -22 (2/0)
[  610.512289][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  610.570445][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  610.594638][T11840] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers
[  610.692411][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  610.707727][   T10] dvb-usb: error while querying for an remote control event.
[  610.745330][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56
[  610.889154][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  610.894959][   T10] dvb-usb: error while querying for an remote control event.
[  610.975286][   T10] usb 1-1: USB disconnect, device number 15
[  610.991046][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  611.030176][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  611.102517][T11845] netlink: 'syz.2.1227': attribute type 1 has an invalid length.
[  611.195018][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  611.201410][  T978] dvb-usb: error while querying for an remote control event.
[  611.289114][T11845] bond16: entered promiscuous mode
[  611.296239][T11845] 8021q: adding VLAN 0 to HW filter on device bond16
[  611.709334][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  611.747932][  T978] dvb-usb: error while querying for an remote control event.
[  612.031210][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  612.040410][  T978] dvb-usb: error while querying for an remote control event.
[  612.218724][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  612.229731][  T978] dvb-usb: error while querying for an remote control event.
[  612.365394][T11853] overlayfs: failed lookup in lower (newroot/243, name='bus', err=-40): overlapping layers
[  612.601341][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  612.607118][  T978] dvb-usb: error while querying for an remote control event.
[  612.797930][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  612.804927][  T978] dvb-usb: error while querying for an remote control event.
[  612.862496][  T978] usb 6-1: USB disconnect, device number 10
[  612.923941][  T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  613.118074][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  613.671317][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.927910][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  614.190643][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.252867][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.303799][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  614.328471][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  614.342204][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.505206][   T10] usb 1-1: config 0 descriptor??
[  614.984955][   T10] usb 1-1: can't set config #0, error -71
[  615.003019][   T10] usb 1-1: USB disconnect, device number 16
[  615.323423][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.669904][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  615.712087][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.753219][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  615.763225][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  615.777947][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  615.786565][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  615.795216][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  615.963146][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.054433][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  616.078019][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  616.087153][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.120889][   T10] usb 1-1: config 0 descriptor??
[  616.319414][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  616.346335][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  616.422843][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  616.494985][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  616.609101][T11892] dvb-usb: bulk message failed: -22 (2/0)
[  616.679834][T11905] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers
[  616.765929][   T10] usb 1-1: media controller created
[  616.913235][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  617.021616][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  617.027524][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  617.038503][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57
[  617.065565][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  617.099453][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  617.205048][T11913] overlayfs: missing 'lowerdir'
[  617.258247][ T5936] dvb-usb: bulk message failed: -22 (1/0)
[  617.265589][ T5936] dvb-usb: error while querying for an remote control event.
[  617.664621][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  617.674819][   T10] dvb-usb: error while querying for an remote control event.
[  617.802799][   T10] usb 1-1: USB disconnect, device number 17
[  617.888168][   T51] Bluetooth: hci2: command tx timeout
[  617.892987][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  618.071445][T11923] netlink: 'syz.0.1246': attribute type 1 has an invalid length.
[  618.175642][   T36] bond0 (unregistering): Released all slaves
[  618.440637][T11927] overlayfs: failed lookup in lower (newroot/247, name='bus', err=-40): overlapping layers
[  618.512250][   T36] bond1 (unregistering): Released all slaves
[  618.576575][T11929] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  618.759271][   T36] bond2 (unregistering): Released all slaves
[  618.972061][   T36] bond3 (unregistering): Released all slaves
[  619.054477][   T36] bond4 (unregistering): Released all slaves
[  619.133540][   T36] bond5 (unregistering): Released all slaves
[  619.230632][   T36] bond6 (unregistering): Released all slaves
[  619.315401][   T36] bond7 (unregistering): Released all slaves
[  619.420477][   T36] bond8 (unregistering): Released all slaves
[  619.684415][   T36] bond9 (unregistering): Released all slaves
[  620.038877][   T36] bond10 (unregistering): Released all slaves
[  620.044578][   T51] Bluetooth: hci2: command tx timeout
[  620.518891][   T36] bond11 (unregistering): Released all slaves
[  620.858888][   T36] bond12 (unregistering): Released all slaves
[  621.088273][   T36] bond13 (unregistering): Released all slaves
[  621.586963][   T36] bond14 (unregistering): Released all slaves
[  621.613163][T11964] netlink: 'syz.4.1252': attribute type 1 has an invalid length.
[  621.707903][   T36] bond15 (unregistering): Released all slaves
[  621.982666][T11966] overlayfs: failed lookup in lower (newroot/247, name='bus', err=-40): overlapping layers
[  622.127982][   T51] Bluetooth: hci2: command tx timeout
[  622.195434][   T36] bond16 (unregistering): Released all slaves
[  622.218549][T11923] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  622.325623][T11964] bond19: entered promiscuous mode
[  622.380345][T11964] 8021q: adding VLAN 0 to HW filter on device bond19
[  622.847933][   T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  623.280871][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.393052][T11897] chnl_net:caif_netlink_parms(): no params data found
[  623.547668][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  623.589393][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  623.599892][   T36] hsr_slave_0: left promiscuous mode
[  623.639820][   T36] hsr_slave_1: left promiscuous mode
[  623.667948][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.736271][   T10] usb 1-1: config 0 descriptor??
[  623.744199][   T36] veth1_macvtap: left promiscuous mode
[  623.751211][   T36] veth0_macvtap: left promiscuous mode
[  623.759064][   T36] veth1_vlan: left promiscuous mode
[  623.769942][   T36] veth0_vlan: left promiscuous mode
[  623.979023][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  623.985810][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  623.998529][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  624.090835][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  624.119604][   T10] usb 1-1: media controller created
[  624.129629][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  624.131801][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  624.144667][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  624.190841][T11977] dvb-usb: bulk message failed: -22 (2/0)
[  624.199959][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  624.213702][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  624.229256][   T51] Bluetooth: hci2: command tx timeout
[  624.318188][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58
[  624.495996][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  624.574477][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  624.696272][   T36] pim6reg (unregistering): left allmulticast mode
[  624.740835][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  624.753982][T10888] dvb-usb: error while querying for an remote control event.
[  625.078494][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  625.084339][   T10] dvb-usb: error while querying for an remote control event.
[  625.575248][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  625.581113][T10888] dvb-usb: error while querying for an remote control event.
[  625.658178][   T24] usb 1-1: USB disconnect, device number 18
[  625.713400][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  626.826015][T12028] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  627.698911][T12036] netlink: 'syz.0.1262': attribute type 1 has an invalid length.
[  628.018532][T12044] overlayfs: failed lookup in lower (newroot/251, name='bus', err=-40): overlapping layers
[  628.075264][T12045] netlink: 'syz.3.1264': attribute type 1 has an invalid length.
[  628.421553][T12047] overlayfs: failed lookup in lower (newroot/246, name='bus', err=-40): overlapping layers
[  628.841120][T12036] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  629.145130][T12054] netlink: 'syz.3.1266': attribute type 4 has an invalid length.
[  629.456560][T11897] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.484775][T11897] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.496713][T11897] bridge_slave_0: entered allmulticast mode
[  629.697973][T11897] bridge_slave_0: entered promiscuous mode
[  629.707576][T11897] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.717980][T11897] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.725309][T11897] bridge_slave_1: entered allmulticast mode
[  629.733825][T11897] bridge_slave_1: entered promiscuous mode
[  630.142773][T11897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.231284][T11897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.774322][T11897] team0: Port device team_slave_0 added
[  630.896247][T12096] pim6reg: entered allmulticast mode
[  631.015613][T12072] pim6reg: left allmulticast mode
[  631.214302][T11897] team0: Port device team_slave_1 added
[  631.368498][T11897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.468214][T11897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.514684][T11897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.536268][T11897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.543355][T11897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.571439][T11897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.757696][T11897] hsr_slave_0: entered promiscuous mode
[  631.812145][T11897] hsr_slave_1: entered promiscuous mode
[  634.348070][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  634.675478][   T10] usb 5-1: Using ep0 maxpacket: 16
[  634.870280][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  634.908730][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.958192][   T10] usb 5-1: config 0 descriptor??
[  635.016197][   T10] usb 5-1: interface 1 not found
[  635.283425][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'.
[  635.292715][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'.
[  635.332152][T11897] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  635.544081][T11897] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  636.188525][T11897] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  636.339042][T11897] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  636.533243][T12177] netlink: 'syz.0.1281': attribute type 1 has an invalid length.
[  637.080903][T12177] bond13: entered promiscuous mode
[  637.087137][T12177] 8021q: adding VLAN 0 to HW filter on device bond13
[  637.146252][T11897] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.390464][T12188] overlayfs: failed lookup in lower (newroot/257, name='bus', err=-40): overlapping layers
[  637.548866][T10888] usb 5-1: USB disconnect, device number 17
[  637.588982][T11897] 8021q: adding VLAN 0 to HW filter on device team0
[  637.639409][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.646552][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.707141][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.714347][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.832272][T11897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.674092][T11897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.637150][T11897] veth0_vlan: entered promiscuous mode
[  641.739376][T11897] veth1_vlan: entered promiscuous mode
[  641.798968][T12254] netlink: 'syz.0.1291': attribute type 1 has an invalid length.
[  641.823767][T12254] bond14: entered promiscuous mode
[  641.921062][T12254] 8021q: adding VLAN 0 to HW filter on device bond14
[  642.041072][T11897] veth0_macvtap: entered promiscuous mode
[  642.059283][T11897] veth1_macvtap: entered promiscuous mode
[  642.299805][T12269] overlayfs: failed lookup in lower (newroot/259, name='bus', err=-40): overlapping layers
[  642.497020][T12270] overlayfs: missing 'lowerdir'
[  642.514826][T11897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.571170][T11897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.590649][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.671899][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.777572][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.882361][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.126514][T12274] netlink: 'syz.5.1294': attribute type 1 has an invalid length.
[  643.587126][T12274] bond15: entered promiscuous mode
[  643.597115][T12274] 8021q: adding VLAN 0 to HW filter on device bond15
[  643.624692][T12282] overlayfs: failed lookup in lower (newroot/112, name='bus', err=-40): overlapping layers
[  644.015208][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.364645][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.600144][ T4464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.611720][ T4464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.521570][T12294] pim6reg: entered allmulticast mode
[  645.621502][T12299] netlink: 'syz.0.1298': attribute type 1 has an invalid length.
[  645.818389][T12299] bond15: entered promiscuous mode
[  645.846362][T12299] 8021q: adding VLAN 0 to HW filter on device bond15
[  646.564476][T12299] overlayfs: failed lookup in lower (newroot/261, name='bus', err=-40): overlapping layers
[  646.711677][T12297] pim6reg: entered allmulticast mode
[  646.772435][T12288] pim6reg: left allmulticast mode
[  648.481329][T12283] pim6reg: left allmulticast mode
[  650.720107][T12355] pim6reg: entered allmulticast mode
[  651.411317][T12344] pim6reg: left allmulticast mode
[  651.724880][T12368] netlink: 'syz.3.1308': attribute type 1 has an invalid length.
[  652.462222][T12368] bond18: entered promiscuous mode
[  652.472470][T12368] 8021q: adding VLAN 0 to HW filter on device bond18
[  653.687007][ T5890] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  654.050466][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.072346][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  654.076592][T12368] overlayfs: failed lookup in lower (newroot/258, name='bus', err=-40): overlapping layers
[  654.197859][ T5890] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  654.214467][T12404] netlink: 'syz.6.1314': attribute type 1 has an invalid length.
[  654.223425][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.247218][ T5890] usb 1-1: config 0 descriptor??
[  654.453049][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  654.484020][T12404] bond1: entered promiscuous mode
[  654.490046][T12404] 8021q: adding VLAN 0 to HW filter on device bond1
[  654.647475][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  654.872712][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  654.951610][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  655.054835][ T5890] usb 1-1: media controller created
[  655.079920][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  655.286078][T12404] overlayfs: failed lookup in lower (newroot/3, name='bus', err=-40): overlapping layers
[  655.298236][ T5890] dvb-usb: bulk message failed: -22 (6/0)
[  655.315919][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  655.349819][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59
[  655.383697][ T5890] dvb-usb: schedule remote query interval to 150 msecs.
[  655.417841][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  655.578211][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  655.584951][ T5890] dvb-usb: error while querying for an remote control event.
[  655.707200][ T5976] usb 1-1: USB disconnect, device number 19
[  656.414013][T12432] overlayfs: missing 'lowerdir'
[  656.668021][ T5976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  656.829232][T12441] netlink: 'syz.0.1318': attribute type 1 has an invalid length.
[  657.036352][T12441] bond16: entered promiscuous mode
[  657.085009][T12441] 8021q: adding VLAN 0 to HW filter on device bond16
[  657.450336][T12442] overlayfs: failed lookup in lower (newroot/265, name='bus', err=-40): overlapping layers
[  659.030891][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  659.308917][   T24] usb 5-1: Using ep0 maxpacket: 16
[  659.470037][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  659.507983][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.620379][T12495] netlink: 'syz.6.1324': attribute type 1 has an invalid length.
[  659.630622][   T24] usb 5-1: config 0 descriptor??
[  659.683474][T12495] bond2: entered promiscuous mode
[  659.693543][T12495] 8021q: adding VLAN 0 to HW filter on device bond2
[  659.751425][   T24] usb 5-1: interface 1 not found
[  659.988788][T12499] overlayfs: failed lookup in lower (newroot/6, name='bus', err=-40): overlapping layers
[  660.389161][T12484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.619690][T12529] overlayfs: missing 'lowerdir'
[  661.815019][T12521] pim6reg: entered allmulticast mode
[  661.829416][T12525] pim6reg: left allmulticast mode
[  662.025733][   T24] usb 5-1: USB disconnect, device number 18
[  662.365778][T12538] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  662.401227][T12538] bond17: entered promiscuous mode
[  662.406552][T12538] 8021q: adding VLAN 0 to HW filter on device bond17
[  663.735260][T12553] netlink: 'syz.3.1334': attribute type 1 has an invalid length.
[  663.856571][T12553] bond19: entered promiscuous mode
[  663.979465][T12553] 8021q: adding VLAN 0 to HW filter on device bond19
[  664.995038][T12558] overlayfs: failed lookup in lower (newroot/261, name='bus', err=-40): overlapping layers
[  666.668123][  T978] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  666.970000][  T978] usb 5-1: Using ep0 maxpacket: 16
[  666.999855][  T978] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  667.067876][ T5936] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  667.115259][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.125483][  T978] usb 5-1: config 0 descriptor??
[  667.133807][  T978] usb 5-1: interface 1 not found
[  667.710253][T12571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.798592][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.808935][ T5936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  667.819928][ T5936] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  667.833785][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.835397][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'.
[  667.911344][ T5936] usb 4-1: config 0 descriptor??
[  667.937884][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'.
[  668.128292][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  668.160346][ T5936] dvb-usb: bulk message failed: -22 (3/0)
[  668.170822][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  668.187914][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  668.195976][ T5936] usb 4-1: media controller created
[  668.210873][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  668.300197][T12575] dvb-usb: bulk message failed: -22 (2/0)
[  668.312367][ T5936] dvb-usb: bulk message failed: -22 (6/0)
[  668.323772][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  668.332151][T12602] netlink: 'syz.6.1343': attribute type 1 has an invalid length.
[  668.344037][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60
[  668.400990][T12602] bond3: entered promiscuous mode
[  668.409377][T12602] 8021q: adding VLAN 0 to HW filter on device bond3
[  668.416340][ T5936] dvb-usb: schedule remote query interval to 150 msecs.
[  668.426270][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  668.577861][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  668.589492][ T5936] usb 4-1: USB disconnect, device number 22
[  668.596457][ T5935] dvb-usb: error while querying for an remote control event.
[  668.799752][T12604] overlayfs: failed lookup in lower (newroot/11, name='bus', err=-40): overlapping layers
[  668.941494][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  669.167959][T12608] overlayfs: missing 'lowerdir'
[  669.254043][   T24] usb 5-1: USB disconnect, device number 19
[  670.747720][T12627] netlink: 'syz.5.1348': attribute type 1 has an invalid length.
[  670.819401][T12627] bond16: entered promiscuous mode
[  670.865643][T12627] 8021q: adding VLAN 0 to HW filter on device bond16
[  671.161599][T12629] overlayfs: failed lookup in lower (newroot/125, name='bus', err=-40): overlapping layers
[  671.813630][T12634] netlink: 'syz.6.1350': attribute type 1 has an invalid length.
[  672.139912][T12634] bond4: entered promiscuous mode
[  672.263564][T12634] 8021q: adding VLAN 0 to HW filter on device bond4
[  672.550031][T12641] overlayfs: failed lookup in lower (newroot/12, name='bus', err=-40): overlapping layers
[  672.736043][   T30] audit: type=1400 audit(1757151992.461:416): avc:  denied  { name_bind } for  pid=12630 comm="syz.3.1349" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  672.782933][T12648] overlayfs: missing 'lowerdir'
[  672.828057][   T30] audit: type=1400 audit(1757151992.461:417): avc:  denied  { mount } for  pid=12630 comm="syz.3.1349" name="/" dev="pstore" ino=2910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  673.523118][T12668] overlayfs: missing 'lowerdir'
[  676.134033][T12686] netlink: 'syz.5.1360': attribute type 1 has an invalid length.
[  676.175161][T12686] bond17: entered promiscuous mode
[  676.197071][T12686] 8021q: adding VLAN 0 to HW filter on device bond17
[  676.466143][T12688] overlayfs: failed lookup in lower (newroot/129, name='bus', err=-40): overlapping layers
[  682.183326][T12749] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  684.540789][T12777] netlink: 'syz.5.1377': attribute type 1 has an invalid length.
[  684.565246][T12777] bond18: entered promiscuous mode
[  684.572983][T12777] 8021q: adding VLAN 0 to HW filter on device bond18
[  685.141993][T12783] overlayfs: failed lookup in lower (newroot/132, name='bus', err=-40): overlapping layers
[  685.613686][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.620055][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  686.996457][ T5935] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  687.417820][ T5935] usb 1-1: Using ep0 maxpacket: 16
[  687.439763][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  687.448955][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.477289][ T5935] usb 1-1: config 0 descriptor??
[  687.501430][ T5935] usb 1-1: interface 1 not found
[  687.928454][T12804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.981004][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'.
[  688.067966][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'.
[  688.548684][  T978] usb 1-1: USB disconnect, device number 20
[  691.007876][ T5935] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  691.198794][  T978] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  691.240994][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  691.350785][ T5935] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  691.359807][ T5935] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  691.368987][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.388849][ T5935] usb 4-1: config 0 descriptor??
[  691.398258][ T5935] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  691.404907][ T5935] dvb-usb: bulk message failed: -22 (3/0)
[  691.898396][  T978] usb 7-1: Using ep0 maxpacket: 16
[  691.919258][  T978] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  691.930170][  T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.010215][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  692.025803][ T5935] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  692.050971][  T978] usb 7-1: config 0 descriptor??
[  692.055418][ T5935] usb 4-1: media controller created
[  692.057336][T12848] netlink: 'syz.5.1391': attribute type 4 has an invalid length.
[  692.073652][  T978] usb 7-1: interface 1 not found
[  692.084974][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  692.233749][ T5935] dvb-usb: bulk message failed: -22 (6/0)
[  692.299016][ T5935] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  692.588472][T12845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.609740][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[  692.794072][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'.
[  692.821797][T12867] netlink: 'syz.0.1395': attribute type 1 has an invalid length.
[  692.833851][ T5935] dvb-usb: schedule remote query interval to 150 msecs.
[  692.853857][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'.
[  692.857785][ T5935] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  692.955389][T12867] bond18: entered promiscuous mode
[  693.011258][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  693.037808][ T5935] dvb-usb: error while querying for an remote control event.
[  693.252237][T12867] 8021q: adding VLAN 0 to HW filter on device bond18
[  693.441063][T12871] overlayfs: failed lookup in lower (newroot/284, name='bus', err=-40): overlapping layers
[  693.589501][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  693.595248][ T5935] dvb-usb: error while querying for an remote control event.
[  693.758985][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  693.765267][ T5935] dvb-usb: error while querying for an remote control event.
[  693.957940][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  693.959321][   T44] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  693.967791][ T5935] dvb-usb: error while querying for an remote control event.
[  694.643832][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  694.656012][ T5935] dvb-usb: error while querying for an remote control event.
[  694.739984][T10888] usb 4-1: USB disconnect, device number 23
[  694.746241][  T978] usb 7-1: USB disconnect, device number 2
[  694.781631][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  694.924075][   T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  694.947450][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  694.953834][   T44] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  695.426266][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.455562][   T44] usb 6-1: config 0 descriptor??
[  695.553470][T12879] pim6reg: entered allmulticast mode
[  695.568837][T12879] pim6reg: left allmulticast mode
[  695.619021][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  695.645980][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  695.846835][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  695.988688][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  696.117942][   T44] usb 6-1: media controller created
[  696.124532][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  696.140952][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  696.146881][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  696.156185][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62
[  696.223151][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  696.237843][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  696.280310][   T44] usb 6-1: USB disconnect, device number 11
[  696.509386][   T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  699.567690][T12918] netlink: 'syz.4.1406': attribute type 4 has an invalid length.
[  702.990509][T12986] overlayfs: missing 'lowerdir'
[  703.142996][T12974] pim6reg: entered allmulticast mode
[  703.190531][T12973] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  704.226189][T12970] pim6reg: left allmulticast mode
[  705.127333][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  705.511055][T13016] netlink: 'syz.3.1422': attribute type 4 has an invalid length.
[  705.589923][T13017] netlink: 'syz.3.1422': attribute type 4 has an invalid length.
[  705.815261][T13021] netlink: 'syz.0.1423': attribute type 1 has an invalid length.
[  706.745957][T13021] bond19: entered promiscuous mode
[  706.767095][T13021] 8021q: adding VLAN 0 to HW filter on device bond19
[  706.921836][T13035] overlayfs: failed lookup in lower (newroot/290, name='bus', err=-40): overlapping layers
[  707.289822][T10888] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  707.573406][T10888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.618937][T10888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  707.637834][T10888] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  707.672041][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.773263][T10888] usb 4-1: config 0 descriptor??
[  707.859710][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  707.871162][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  707.882010][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  707.892742][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  707.902489][T10888] usb 4-1: media controller created
[  708.065433][T13030] dvb-usb: bulk message failed: -22 (2/0)
[  708.189904][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  708.275835][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  708.291771][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  708.384927][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63
[  708.436937][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  708.507959][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  708.677925][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  708.744982][T10888] dvb-usb: error while querying for an remote control event.
[  708.807840][   T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  709.071737][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  709.077582][ T5935] dvb-usb: error while querying for an remote control event.
[  709.124107][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.137058][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  709.162310][   T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  709.201815][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.259138][ T5935] dvb-usb: bulk message failed: -22 (1/0)
[  709.264985][ T5935] dvb-usb: error while querying for an remote control event.
[  709.367887][  T978] usb 4-1: USB disconnect, device number 24
[  709.404041][  T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  709.433385][   T24] usb 5-1: config 0 descriptor??
[  710.111762][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  710.121882][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  710.135351][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  710.144405][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  710.151556][   T24] usb 5-1: media controller created
[  710.268543][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  710.431494][T13048] dvb-usb: bulk message failed: -22 (2/0)
[  710.572606][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  710.578543][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  710.603678][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64
[  710.639453][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  710.646889][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  710.660081][   T24] usb 5-1: USB disconnect, device number 20
[  710.799416][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1433'.
[  710.813270][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  711.752669][T13078] netlink: 'syz.5.1434': attribute type 1 has an invalid length.
[  712.507587][T13078] bond19: entered promiscuous mode
[  712.609436][T13078] 8021q: adding VLAN 0 to HW filter on device bond19
[  712.723411][T13078] overlayfs: failed lookup in lower (newroot/145, name='bus', err=-40): overlapping layers
[  712.885900][T13089] overlayfs: missing 'lowerdir'
[  713.419795][T13098] overlayfs: missing 'lowerdir'
[  714.642796][T13110] pim6reg: entered allmulticast mode
[  714.663527][T13110] pim6reg: left allmulticast mode
[  717.196744][T13137] overlayfs: missing 'lowerdir'
[  717.691828][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  717.964586][   T24] usb 4-1: Using ep0 maxpacket: 16
[  717.998406][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  718.453293][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.657425][   T24] usb 4-1: config 0 descriptor??
[  718.665800][   T24] usb 4-1: interface 1 not found
[  718.765693][T13154] netlink: 'syz.0.1450': attribute type 1 has an invalid length.
[  718.903956][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  718.934647][T13154] bond20: entered promiscuous mode
[  718.955893][T13154] 8021q: adding VLAN 0 to HW filter on device bond20
[  719.031837][T13154] overlayfs: failed lookup in lower (newroot/295, name='bus', err=-40): overlapping layers
[  719.039635][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  719.069393][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  719.574953][T13164] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  719.832231][   T10] usb 4-1: USB disconnect, device number 25
[  720.643660][T13176] netlink: 'syz.3.1454': attribute type 1 has an invalid length.
[  721.149036][T13176] bond20: entered promiscuous mode
[  721.156992][T13176] 8021q: adding VLAN 0 to HW filter on device bond20
[  721.551278][T13179] overlayfs: failed lookup in lower (newroot/284, name='bus', err=-40): overlapping layers
[  721.728248][T10888] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  721.834376][T13188] netlink: 'syz.5.1458': attribute type 1 has an invalid length.
[  721.877821][T10888] usb 5-1: Using ep0 maxpacket: 16
[  721.884817][T10888] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  721.894200][T10888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.913450][T10888] usb 5-1: config 0 descriptor??
[  721.929957][T13188] bond20: entered promiscuous mode
[  721.936082][T13188] 8021q: adding VLAN 0 to HW filter on device bond20
[  721.941232][T10888] usb 5-1: interface 1 not found
[  722.074862][T13198] serio: Serial port ptm0
[  723.389144][T13199] overlayfs: failed lookup in lower (newroot/150, name='bus', err=-40): overlapping layers
[  723.629365][T13184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  723.944268][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'.
[  723.979816][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'.
[  724.749213][T10888] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  724.764149][   T24] usb 5-1: USB disconnect, device number 21
[  724.922508][T13219] overlayfs: failed lookup in lower (newroot/33, name='bus', err=-40): overlapping layers
[  725.164250][T10888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.180607][T10888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  725.191680][T10888] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  725.201206][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.221810][T10888] usb 4-1: config 0 descriptor??
[  725.231315][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  725.240332][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  725.308576][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  725.406854][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  725.496783][T13212] dvb-usb: bulk message failed: -22 (2/0)
[  725.804174][T10888] usb 4-1: media controller created
[  725.838179][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  725.917655][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  725.941372][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  725.956827][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65
[  726.122787][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  726.245427][T13240] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  726.278696][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  726.318641][T10888] usb 4-1: USB disconnect, device number 26
[  726.386216][T13243] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  726.511642][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  727.303522][T10888] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  728.143864][T10888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.154872][T10888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  728.192925][T10888] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  728.319199][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.360471][T10888] usb 4-1: config 0 descriptor??
[  728.409013][T10888] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  728.415656][T10888] dvb-usb: bulk message failed: -22 (3/0)
[  728.432466][T10888] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  728.478576][T10888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  728.510474][T10888] usb 4-1: media controller created
[  728.595050][T10888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  728.651864][T13245] dvb-usb: bulk message failed: -22 (2/0)
[  729.056940][T10888] dvb-usb: bulk message failed: -22 (6/0)
[  729.070776][T10888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  729.097070][T10888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66
[  729.120813][T10888] dvb-usb: schedule remote query interval to 150 msecs.
[  729.137145][T10888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  729.297963][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  729.306738][T10888] dvb-usb: error while querying for an remote control event.
[  729.537949][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  729.557963][T10888] dvb-usb: error while querying for an remote control event.
[  729.746985][   T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  729.906043][T13267] pim6reg: entered allmulticast mode
[  729.911473][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  729.923249][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  729.930713][T10888] dvb-usb: error while querying for an remote control event.
[  729.933495][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  729.974211][   T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  729.992393][T13267] pim6reg: left allmulticast mode
[  730.010941][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.032965][   T24] usb 1-1: config 0 descriptor??
[  730.064439][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  730.078330][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  730.094481][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  730.132282][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  730.140327][   T24] usb 1-1: media controller created
[  730.147901][T10888] dvb-usb: bulk message failed: -22 (1/0)
[  730.150225][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.163637][T10888] dvb-usb: error while querying for an remote control event.
[  730.286853][T13271] dvb-usb: bulk message failed: -22 (2/0)
[  730.300565][  T978] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  730.444891][T13279] netlink: 'syz.6.1475': attribute type 4 has an invalid length.
[  730.468094][T13279] netlink: 'syz.6.1475': attribute type 4 has an invalid length.
[  730.498490][  T978] usb 6-1: Using ep0 maxpacket: 16
[  730.506832][  T978] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  730.516399][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.525728][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  730.576240][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  730.600982][  T978] usb 6-1: config 0 descriptor??
[  730.636867][  T978] usb 6-1: interface 1 not found
[  730.666160][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67
[  730.683526][T10888] usb 4-1: USB disconnect, device number 27
[  730.730696][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  730.737835][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  730.855903][T13276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  730.898159][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  730.931189][  T978] dvb-usb: error while querying for an remote control event.
[  730.944686][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1476'.
[  730.959734][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1476'.
[  731.107822][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  731.118139][   T24] dvb-usb: error while querying for an remote control event.
[  731.279397][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  731.337982][   T24] dvb-usb: error while querying for an remote control event.
[  731.435984][T13286] netlink: 'syz.4.1478': attribute type 1 has an invalid length.
[  731.488657][T13286] bond20: entered promiscuous mode
[  731.495492][T13286] 8021q: adding VLAN 0 to HW filter on device bond20
[  731.521232][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  731.544115][  T978] dvb-usb: error while querying for an remote control event.
[  731.611300][   T24] usb 6-1: USB disconnect, device number 12
[  731.799701][T13289] overlayfs: failed lookup in lower (newroot/287, name='bus', err=-40): overlapping layers
[  731.807452][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  732.071128][   T44] dvb-usb: error while querying for an remote control event.
[  732.694583][T10888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  732.893062][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  733.057780][   T44] dvb-usb: error while querying for an remote control event.
[  733.548018][   T24] usb 1-1: USB disconnect, device number 21
[  733.720160][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  734.138375][T13315] serio: Serial port ptm0
[  734.166590][T13318] vxcan0: tx drop: invalid sa for name 0x000000000003ffff
[  735.376911][T13325] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  737.121974][T13350] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  737.157647][T13352] overlayfs: missing 'lowerdir'
[  738.917891][ T9474] Bluetooth: hci2: command 0x0406 tx timeout
[  739.222253][T13372] netlink: 'syz.3.1496': attribute type 1 has an invalid length.
[  739.424658][T13370] pim6reg: entered allmulticast mode
[  739.559036][T13372] bond21: entered promiscuous mode
[  739.566939][T13372] 8021q: adding VLAN 0 to HW filter on device bond21
[  740.212652][T13372] overlayfs: failed lookup in lower (newroot/290, name='bus', err=-40): overlapping layers
[  740.373507][T13384] netlink: 'syz.6.1498': attribute type 1 has an invalid length.
[  740.495042][T13384] bond5: entered promiscuous mode
[  740.529157][T13384] 8021q: adding VLAN 0 to HW filter on device bond5
[  741.019879][T13396] netlink: 'syz.5.1501': attribute type 1 has an invalid length.
[  741.108423][T13388] overlayfs: failed lookup in lower (newroot/45, name='bus', err=-40): overlapping layers
[  741.126584][T13396] bond21: entered promiscuous mode
[  741.190288][T13396] 8021q: adding VLAN 0 to HW filter on device bond21
[  741.269761][T13404] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  741.700364][T13400] overlayfs: failed lookup in lower (newroot/159, name='bus', err=-40): overlapping layers
[  744.616575][T13436] netlink: 'syz.3.1508': attribute type 1 has an invalid length.
[  744.893167][T13442] overlayfs: failed lookup in lower (newroot/292, name='bus', err=-40): overlapping layers
[  747.011665][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  747.023464][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  749.392510][T13491] netlink: 'syz.5.1517': attribute type 1 has an invalid length.
[  749.925978][T13491] bond22: entered promiscuous mode
[  749.973207][T13491] 8021q: adding VLAN 0 to HW filter on device bond22
[  750.378653][T13498] overlayfs: failed lookup in lower (newroot/162, name='bus', err=-40): overlapping layers
[  750.886070][T13509] pim6reg: entered allmulticast mode
[  750.899249][T13509] pim6reg: left allmulticast mode
[  751.745446][T13528] pim6reg: entered allmulticast mode
[  753.917051][   T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  755.083920][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.094795][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  755.103849][   T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  755.113088][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.123358][   T24] usb 6-1: config 0 descriptor??
[  755.133403][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  755.140075][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  755.147221][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  755.156291][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  755.163416][   T24] usb 6-1: media controller created
[  755.169662][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  755.179981][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  755.185729][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  755.196776][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68
[  755.401336][T13541] dvb-usb: bulk message failed: -22 (2/0)
[  755.914793][T13557] overlayfs: missing 'lowerdir'
[  755.938939][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  755.959211][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  756.117872][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  756.123649][   T44] dvb-usb: error while querying for an remote control event.
[  756.957844][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  756.963616][   T44] dvb-usb: error while querying for an remote control event.
[  757.142201][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  757.173075][   T24] dvb-usb: error while querying for an remote control event.
[  757.441001][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  757.473517][ T5936] usb 6-1: USB disconnect, device number 13
[  757.484955][   T24] dvb-usb: error while querying for an remote control event.
[  758.155420][T13581] page: refcount:514 mapcount:0 mapping:ffff8880232ceaa0 index:0x0 pfn:0x7b800
[  758.165381][T13581] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0
[  758.173877][T13581] aops:hugetlbfs_aops ino:910e dentry name(?):"anon_hugepage"
[  758.181349][T13581] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff)
[  758.189530][T13581] page_type: f4(hugetlb)
[  758.193757][T13581] raw: 00fff00000000041 ffffffff9ae7ece0 ffffea0001388008 ffff8880232ceaa0
[  758.202322][T13581] raw: 0000000000000000 0000000000000002 00000202f4000000 0000000000000000
[  758.210877][T13581] head: 00fff00000000041 ffffffff9ae7ece0 ffffea0001388008 ffff8880232ceaa0
[  758.219530][T13581] head: 0000000000000000 0000000000000002 00000202f4000000 0000000000000000
[  758.228171][T13581] head: 00fff00000000009 ffffea0001ee0001 0000000000000000 0000000000000000
[  758.236824][T13581] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200
[  758.245470][T13581] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  758.252729][T13581] page_owner tracks the page as allocated
[  758.258982][T13581] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 13555, tgid 13542 (syz.3.1530), ts 754317118944, free_ts 752900084770
[  758.279715][T13581]  post_alloc_hook+0x1c0/0x230
[  758.284472][T13581]  get_page_from_freelist+0x132b/0x38e0
[  758.290000][T13581]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  758.295864][T13581]  alloc_surplus_hugetlb_folio+0x1ad/0x4a0
[  758.301641][T13581]  alloc_hugetlb_folio+0xed4/0x1560
[  758.306813][T13581]  hugetlb_fault+0x1bce/0x2f40
[  758.311551][T13581]  handle_mm_fault+0xbfa/0xd10
[  758.316288][T13581]  __get_user_pages+0x551/0x34a0
[  758.321208][T13581]  populate_vma_page_range+0x267/0x3f0
[  758.326650][T13581]  __mm_populate+0x1d8/0x380
[  758.331210][T13581]  vm_mmap_pgoff+0x37f/0x470
[  758.335786][T13581]  ksys_mmap_pgoff+0x1c8/0x5c0
[  758.340521][T13581]  __x64_sys_mmap+0x125/0x190
[  758.345168][T13581]  do_syscall_64+0xcd/0x4c0
[  758.349646][T13581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.355513][T13581] page last free pid 13530 tgid 13521 stack trace:
[  758.361990][T13581]  free_unref_folios+0xa61/0x16b0
[  758.367002][T13581]  folios_put_refs+0x56f/0x740
[  758.371736][T13581]  free_pages_and_swap_cache+0x3f0/0x4a0
[  758.377351][T13581]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  758.383316][T13581]  tlb_flush_mmu+0xe9/0x5a0
[  758.387793][T13581]  unmap_page_range+0x1f43/0x42c0
[  758.392790][T13581]  unmap_single_vma.constprop.0+0x153/0x240
[  758.398667][T13581]  unmap_vmas+0x218/0x470
[  758.402978][T13581]  exit_mmap+0x1b9/0xb90
[  758.407193][T13581]  __mmput+0x12a/0x410
[  758.411234][T13581]  mmput+0x62/0x70
[  758.414926][T13581]  do_exit+0x7c7/0x2bf0
[  758.419067][T13581]  do_group_exit+0xd3/0x2a0
[  758.423544][T13581]  get_signal+0x2673/0x26d0
[  758.428018][T13581]  arch_do_signal_or_restart+0x8f/0x7d0
[  758.433536][T13581]  exit_to_user_mode_loop+0x84/0x110
[  758.438877][T13581] ------------[ cut here ]------------
[  758.444315][T13581] kernel BUG at mm/filemap.c:154!
[  758.449322][T13581] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  758.455709][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.3.1536 Not tainted syzkaller #0 PREEMPT(full) 
[  758.465046][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  758.475071][T13581] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0
[  758.481209][T13581] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1
[  758.500793][T13581] RSP: 0018:ffffc9000476f310 EFLAGS: 00010046
[  758.506840][T13581] RAX: 0000000000080000 RBX: ffffea0001ee0000 RCX: ffffc90010491000
[  758.514785][T13581] RDX: 0000000000080000 RSI: ffffffff81f26f5e RDI: ffff88802684ccc4
[  758.522729][T13581] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  758.530675][T13581] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880232ceaa0
[  758.538621][T13581] R13: ffffea0001ee0030 R14: 00000000000003f0 R15: ffffea0001ee0000
[  758.546573][T13581] FS:  00007f11841346c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000
[  758.555478][T13581] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  758.562037][T13581] CR2: 0000001b33d02ff8 CR3: 00000000669cc000 CR4: 00000000003526f0
[  758.569980][T13581] Call Trace:
[  758.573229][T13581]  <TASK>
[  758.576134][T13581]  filemap_remove_folio+0xf1/0x250
[  758.581224][T13581]  remove_inode_hugepages+0x74a/0xed0
[  758.586570][T13581]  ? __schedule+0x11a3/0x5de0
[  758.591220][T13581]  ? __pfx_remove_inode_hugepages+0x10/0x10
[  758.597091][T13581]  ? __pfx___schedule+0x10/0x10
[  758.601911][T13581]  ? __pfx_try_to_wake_up+0x10/0x10
[  758.607087][T13581]  ? up_write+0x209/0x520
[  758.611389][T13581]  hugetlbfs_fallocate+0xf3f/0x12e0
[  758.616561][T13581]  ? __pfx_hugetlbfs_fallocate+0x10/0x10
[  758.622171][T13581]  ? __pfx_hugetlbfs_fallocate+0x10/0x10
[  758.627791][T13581]  ? vfs_fallocate+0x5b1/0x10e0
[  758.632611][T13581]  vfs_fallocate+0x5b1/0x10e0
[  758.637256][T13581]  ? __pfx_vfs_fallocate+0x10/0x10
[  758.642336][T13581]  ? madvise_vma_behavior+0x2b20/0x2d60
[  758.647854][T13581]  madvise_vma_behavior+0x2ad7/0x2d60
[  758.653211][T13581]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  758.658904][T13581]  ? __pfx_mas_prev+0x10/0x10
[  758.663564][T13581]  ? irqentry_exit+0x3b/0x90
[  758.668123][T13581]  ? lockdep_hardirqs_on+0x7c/0x110
[  758.673300][T13581]  ? madvise_walk_vmas+0x165/0x9c0
[  758.678382][T13581]  madvise_walk_vmas+0x31f/0x9c0
[  758.683300][T13581]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  758.688738][T13581]  madvise_do_behavior+0x1e2/0x530
[  758.693824][T13581]  ? __pfx_madvise_do_behavior+0x10/0x10
[  758.699437][T13581]  ? down_read+0x13d/0x480
[  758.703848][T13581]  do_madvise+0x176/0x240
[  758.708154][T13581]  ? __pfx_do_madvise+0x10/0x10
[  758.712978][T13581]  ? do_futex+0x122/0x350
[  758.717282][T13581]  ? __pfx___schedule+0x10/0x10
[  758.722105][T13581]  ? xfd_validate_state+0x61/0x180
[  758.727200][T13581]  __x64_sys_madvise+0xa9/0x110
[  758.732020][T13581]  ? lockdep_hardirqs_on+0x7c/0x110
[  758.737190][T13581]  do_syscall_64+0xcd/0x4c0
[  758.741667][T13581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.747536][T13581] RIP: 0033:0x7f118338ebe9
[  758.751928][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  758.771503][T13581] RSP: 002b:00007f1184134038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  758.779888][T13581] RAX: ffffffffffffffda RBX: 00007f11835c6270 RCX: 00007f118338ebe9
[  758.787829][T13581] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000
[  758.795770][T13581] RBP: 00007f1183411e19 R08: 0000000000000000 R09: 0000000000000000
[  758.803710][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  758.811660][T13581] R13: 00007f11835c6308 R14: 00007f11835c6270 R15: 00007ffcddbaa518
[  758.819606][T13581]  </TASK>
[  758.822595][T13581] Modules linked in:
[  758.826459][T13581] ---[ end trace 0000000000000000 ]---
[  758.831900][T13581] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0
[  758.838031][T13581] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1
[  758.857613][T13581] RSP: 0018:ffffc9000476f310 EFLAGS: 00010046
[  758.863649][T13581] RAX: 0000000000080000 RBX: ffffea0001ee0000 RCX: ffffc90010491000
[  758.871588][T13581] RDX: 0000000000080000 RSI: ffffffff81f26f5e RDI: ffff88802684ccc4
[  758.879527][T13581] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  758.887482][T13581] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880232ceaa0
[  758.895434][T13581] R13: ffffea0001ee0030 R14: 00000000000003f0 R15: ffffea0001ee0000
[  758.903470][T13581] FS:  00007f11841346c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000
[  758.912376][T13581] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  758.918932][T13581] CR2: 0000001b33d02ff8 CR3: 00000000669cc000 CR4: 00000000003526f0
[  758.926875][T13581] Kernel panic - not syncing: Fatal exception
[  758.933130][T13581] Kernel Offset: disabled
[  758.937436][T13581] Rebooting in 86400 seconds..