last executing test programs:

27m37.53042853s ago: executing program 2 (id=1797):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1})
sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000001c0)={0x4000, r1}, 0x0)
kexec_load(0x2, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0x2, 0x9}], 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = accept4(r8, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000003e00)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000a40)=""/74, 0x4a}, {&(0x7f0000000280)=""/21, 0x15}], 0x4}, 0xd9db}, {{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/229, 0xe5}, {&(0x7f0000000e00)=""/196, 0xc4}], 0x4, &(0x7f0000000f40)=""/239, 0xef}, 0x3}, {{&(0x7f0000001040)=@ieee802154, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/251, 0xfb}], 0x1, &(0x7f0000001200)=""/135, 0x87}, 0x7}, {{&(0x7f00000012c0)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000001340)=""/59, 0x3b}, {&(0x7f0000001380)=""/185, 0xb9}], 0x2, &(0x7f0000001b80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000003f80)=""/60, 0x3c}, {&(0x7f0000001540)=""/92, 0x5c}, {&(0x7f00000015c0)=""/25, 0x19}], 0x3, &(0x7f0000001640)=""/251, 0xfb}, 0x800}, {{&(0x7f0000001740)=@nfc_llcp, 0x80, &(0x7f0000003d80)=[{0x0}, {&(0x7f0000001840)=""/128, 0x80}, {&(0x7f00000018c0)=""/245, 0xf5}, {&(0x7f00000019c0)=""/190, 0xbe}, {&(0x7f0000002b80)=""/195, 0xc3}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/214, 0xd6}, {&(0x7f0000001a80)=""/155, 0x9b}], 0x8, &(0x7f0000004d00)=""/4096, 0x1000}, 0xba1}], 0x6, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f0000000000)=0x1e, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
writev(r1, 0x0, 0x0)

27m36.52516539s ago: executing program 2 (id=1801):
mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704020002000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0)
preadv(r0, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000680)={0x28, 0x7, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
recvmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)=""/214, 0xd6}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/190, 0xbe}, {0x0}, {&(0x7f0000000b80)=""/152, 0x98}], 0x6, &(0x7f0000000cc0)=""/242, 0xf2}, 0x102)
r4 = semget(0x0, 0x4, 0x39c)
semop(r4, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1)
semop(r4, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500"], 0x64}}, 0x0)

27m35.520630949s ago: executing program 2 (id=1803):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0xb)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, <r8=>r5})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

27m30.513263421s ago: executing program 2 (id=1814):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xdc}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, 0x70bd25, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x8080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r5, 0x0, 0x21, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180)
fcntl$setstatus(r7, 0x4, 0x2000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b1500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="45000000015001001800128008000100677470000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)

27m29.027022213s ago: executing program 2 (id=1815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0xb)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, <r8=>r5})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

27m27.822425616s ago: executing program 2 (id=1817):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
mount$9p_unix(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x31, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
syncfs(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8)
sendto$inet6(r5, &(0x7f00000000c0)='H', 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)

27m9.874767293s ago: executing program 32 (id=1817):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
mount$9p_unix(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x31, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
syncfs(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8)
sendto$inet6(r5, &(0x7f00000000c0)='H', 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)

25m51.704366296s ago: executing program 4 (id=2057):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @remote}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r6, 0x6a, 0x2, 0x0, 0xffffffffffffff33)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000140000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

25m47.549488084s ago: executing program 4 (id=2065):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x10, 0xffffffffffffffff, 0x100000000)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00', 0x9})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x488542, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, 0x0)
preadv(r1, &(0x7f0000000040), 0x0, 0x1, 0x30bc6288)
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r6=>0x0)
io_pgetevents(r6, 0x8, 0x40, &(0x7f0000002800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
io_destroy(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000400))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x80000006, "a8816858b13baaf3", "48706a9997c4b233c4111f43e93cf0bbf755f728a6e3f497fa1fdd9806c54e20", 0x9, 0xfff})
syz_open_dev$dri(&(0x7f0000000080), 0x200, 0x402100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x109602)

25m46.502693412s ago: executing program 4 (id=2070):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0xc000)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private2, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9})

25m45.383219026s ago: executing program 4 (id=2074):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0xb)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r4})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

25m44.16293066s ago: executing program 4 (id=2079):
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x10f5, &(0x7f0000000300)=<r0=>0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef)
io_getevents(r0, 0x6, 0x0, 0x0, 0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc00c0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000000)={0xdddd1000, 0x2000, 0x8})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x4, 0x31, {0x31, 0x22, "cdb3d7aa498619b077fce450e073d39b143ba4574e828c104c956a80804cd9e9f207e274f2eaee8ad04d896a774332"}}, 0x0}, &(0x7f0000000300)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="402810f7506a000c0400"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1d00020000000000f356a3f9913c6068171cdd7b6a951a09d8e97ce761f317b6bbacacc35ae53cd106c6ad2043fa6a1701f9b8edd7397b07b5002bbaf31505f450a29c61f9faf47ce70b8d436d79d1cbc9654f03286610bf4329f7851120d6bfda760ecf47cda34cb43ee23d36f556805ead3729ddac9a328f388daea1ab673e3af547f7c7e9f182cb74151007cd1175c0386e054c668b3852e78a8c360a36b3d218a278d169407e98b1c6681f94f2982472acff0c511c8b64a3a2417c327a1a37f49b8345d24a75716f2a03ed99a13e47fa1ff7b85e644cedf676639a1685f8e5b82d930f9866b6ada369f3785a04075a528682aa6e3a8f38fc9af9d9de60acbae0ef6b3e941d1d6111b4c3245d22ec043aa76377a2432ae58c74c2b8df68b8418a11c91ff8bf50675614c4a8643110c785babcc46e65b02f93787aad082000400f75e007110d452cdb5e56343f4d39ffdfbf2aa9c185d5b086649130eacf2ef3f33f8c40098676ce69ce58284283e01d902bcb355c8bfc48f76a54ea0a6e52f0f94ebbe0e4c1984cd8ee8c428814da4b9bc5215693aaf4aaa39b34a12454200e1a58dc43"], 0x0, 0x0})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r8 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)

25m41.900151666s ago: executing program 4 (id=2089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x38}}, 0xc4c4)

25m25.282932461s ago: executing program 33 (id=2089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x38}}, 0xc4c4)

24m8.222324872s ago: executing program 1 (id=2329):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80801)
mknod(0x0, 0x8001420, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r3, 0x1, 0x5, 0x7be}, 0x50)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b0000000400000001000084020000000a00000003000000000000010000000000000001050000000000000011000b020000006100492e610061005f00"], 0x0, 0x57}, 0x28)
ioctl$TCFLSH(r5, 0x540b, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1})

24m7.209355677s ago: executing program 1 (id=2331):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}})
syz_emit_ethernet(0x48, &(0x7f0000019100)=ANY=[@ANYBLOB="ffffffffffffaabcaaaaaaaa86dd6001010000121100fc010000000000003bfaa64c00000001fe800000802d2c580000000000000000000000aa00000e220012907802"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

24m4.805683974s ago: executing program 1 (id=2338):
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000008000000000000000000850000004100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10)
r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "e1066ace280c799f0a783c020b27a00ec29ba745310b68621ed1c6978fbaa2319a9633b4f54403b04f62f4b01ce555d39cf39081ff07e1d03e5f1bd6e3970bb8", 0x1d}, 0x48, 0xfffffffffffffffc)
keyctl$describe(0x6, r8, &(0x7f0000000200)=""/170, 0xaa)

24m3.111620481s ago: executing program 1 (id=2341):
socket$nl_route(0x10, 0x3, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x90000000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff07000070000000140004009e42f7687aa1e14a72300000000000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

24m1.25155916s ago: executing program 1 (id=2347):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x3, @loopback, 0xca66}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc", 0xc0}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000937d7000400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

23m58.316777856s ago: executing program 1 (id=2354):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0xb)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r4})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

23m42.114740598s ago: executing program 34 (id=2354):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0xb)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r4})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

29.987733401s ago: executing program 5 (id=7408):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x90, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r3, r3, r3], &(0x7f0000000600)=[{0x3, 0x2, 0xd}, {0x5, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x4, 0x9}], 0x10, 0x5da}, 0x94)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"})
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740000000000c00164000000000000100"], 0xa0}}, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x403, 0x7fff, 0x16, "b0bfd0ff40000096004e149b78ef4100"})
r8 = syz_open_pts(r6, 0x0)
r9 = dup3(r8, r6, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0xff)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80800)
write$P9_RWALK(r10, &(0x7f00000000c0)={0x64, 0x6f, 0x2, {0x7, [{0x10, 0x4, 0x7}, {0x8, 0x4}, {0x9c, 0x4, 0x2}, {0x0, 0x4, 0x8}, {0x4, 0x4, 0x4}, {0x2, 0x2, 0x4}, {0x2, 0x3, 0x4}]}}, 0x64)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d6c6f6361370200006c61746976653a342c372c00d3fa987533568ffc7d854216be71ccc2c4589b3c7de017bbfd0dbb9bbff656fdb80cadf9dda5a78d363bfd5484af96f2ea42da4ef2ee52"])

28.326159598s ago: executing program 5 (id=7410):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
lseek(r3, 0x0, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
mlock2(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x28, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008c0000000000000000800000186b0000080000000000000001000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018190000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000000500000800000085000000a500000095000000002a9280641c86b0eabc90f4a6148b58be1fad7adde2ee0e339597932f9b0000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)

24.513317033s ago: executing program 5 (id=7418):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mkdir(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x2d}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000700)={0x0, 0xffffffffffffff6e, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r7, 0x301, 0xc00e, 0x25dfdbfd, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x40006)
syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

21.945306775s ago: executing program 5 (id=7424):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44)
r2 = socket$kcm(0xa, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
mremap(&(0x7f0000774000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000874000/0x3000)=nil)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
recvmmsg(r7, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

11.450838857s ago: executing program 0 (id=7444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x40000)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

9.758225943s ago: executing program 0 (id=7448):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
writev(r4, &(0x7f00000192c0)=[{&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7", 0x1c}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219d", 0x25}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
bpf$MAP_CREATE(0x0, &(0x7f0000019380)=ANY=[@ANYBLOB="3c945b91f83088d779ded2bfe32d692b20363eaf0f9eb5d509e28189a5f6ca16c1655fa1e0b4ce1df16a902c6d0464134a553e5c4cd8", @ANYBLOB="0500aa5692ab4837b3ab8f6ce51a6d46aa00"/35, @ANYRES32, @ANYRES32, @ANYBLOB="e0ffffff01000000000000000000193b3a6f2ff7e9ac531c5c723b2dd8465cf693cdac86f149fe14952d89f42d9ff3b3cda35f254ce505bc0965e156c384936db83727c2d4f9328a31e01b609172a74538fa368e67ffea73a0c7fa824b2c0e54cf4af594cb0b46a4d8e45c754e20d0c0f5b12a449410df70da96599b8350d3539eea96de818cde4208a220122863ec465e5832d81cbc6d8254bcafe81b016482991d362c6ed681f572388ddf9133902641a4eda9f9e08c5a5867aee5e55e4e8267a4c796ce0fdf4b8b3c460e720d18da7b8bf9aea5804ff2abc5ae867e581ce363c8b5f9d3a3d0a0daf2d361afb02f6f04af7b44a31805dfd7c7cfd05cfd70cff433c3df44a3b31e35b40b24b1a17efafe47f93d12f233d4b403c49c4a7cfc72f69c30105b672ba3adf03f43bb20fab0e4f7a12c8af39e93bef1d31a48c891cdbd353adbada5b01bdb41a248", @ANYBLOB], 0x50)
socket$igmp6(0xa, 0x3, 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)

8.579689907s ago: executing program 0 (id=7452):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rpc\x00')
socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x28, 0x1, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0)
r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r6=>0x0, &(0x7f00000002c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
madvise(&(0x7f00004f4000/0x1000)=nil, 0x1000, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', '', [], 0xa, "c4dec8801edfc5c5261c86e6720473a8eee07aad0c47337394a6a7a5998e6df9"}, 0x24)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000ffff0300000082"], 0x40)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000007100)={0x78, 0x0, 0x0, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78)
syz_io_uring_setup(0x210d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x5, 0x13f}, 0x0, &(0x7f0000000280))

8.396928225s ago: executing program 7 (id=7454):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a502ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x5b15, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0x80f0f024})
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0x6}, 0x5, 0x9, &(0x7f0000000180)={{0x4, 0xf, 0xbab, 0x8000}}, 0x82, 0x0, 0x2}})
mremap(&(0x7f00006ec000/0x1000)=nil, 0x1000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil)

7.940283718s ago: executing program 3 (id=7455):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5, 0x0, 0x0, r8}])
sendfile(r4, r5, 0x0, 0x20000023896)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=r8], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

7.209309137s ago: executing program 0 (id=7456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e10009058317ff"], 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000007ec72a5b31000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r9, 0x25, 0x0, @void}, 0xf)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000140)={0x4, <r12=>r6, 0x1})
ioctl$DMA_BUF_IOCTL_SYNC(r12, 0x40086200, 0x0)
sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1db}], 0x1}}], 0x1, 0x400c0)

6.145203045s ago: executing program 5 (id=7459):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001)
syz_open_dev$evdev(0x0, 0x0, 0x2002)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
sync_file_range(r1, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
eventfd(0x80200003)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000001b80), 0x9, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$6lowpan_control(r5, 0x0, 0x0)
syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r5}, &(0x7f0000000340)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x114, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf25080001000200000008001500ad96666008004f000000000008004b00130000000800030001"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x2, 0x6, 0x0, 0xffffffffffffff92, 0x2})
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r8, 0x0, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2)

6.113827166s ago: executing program 3 (id=7460):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0xd)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff})
socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20000880)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0xc005, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, 0x0, 0x92)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x2020)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[@ANYBLOB="8c52aaaaaaaa00000000000086dd61954a5b004c2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010086dd056a000086dd080088be000000031c33f59dfa00000000007b40080022eb0000000223022309020000000022c5300b6a5100000500eeb41b0800"], 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0xa}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x4003, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0xbc, 0x9, 0x1800000, 0x100000007, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2e, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x5, 0x0, 0x5, 0x96, 0x9, 0x401, 0x2, 0x0, 0x680000000000, 0x8001, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)

5.094290848s ago: executing program 3 (id=7461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f0000000000), 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r7, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r7, 0x0, 0x0)
dup3(r5, r6, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r4}, 0x38)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

5.080626332s ago: executing program 6 (id=7462):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$vim2m(0x0, 0x10040, 0x2)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001d40), 0x20100, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522)
r8 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r9, &(0x7f0000006800)="10", 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
link(&(0x7f0000000080)='./file0\x00', 0x0)
lstat(&(0x7f0000001d00)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_usb_disconnect(r8)
accept4$packet(r6, &(0x7f00000001c0), &(0x7f0000000340)=0x14, 0x0)

5.079661822s ago: executing program 7 (id=7463):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0xfff, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072c00800000000000000000000000085000000186b000018", @ANYRES32=r0, @ANYBLOB="00000000cf070000848a04000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r4=>0x0, 0x0, 0x4, 0x4, 0x4006, 0x1532}, &(0x7f0000000040)=0x14)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e21, 0x9, @remote, 0x496}}}, &(0x7f0000000140)=0x84)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
close_range(r1, 0xffffffffffffffff, 0x0)

3.836101088s ago: executing program 5 (id=7464):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084)

3.722187726s ago: executing program 0 (id=7465):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x40814, &(0x7f0000000100)=ANY=[])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_unlink(&(0x7f0000000000)='eth0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0xfe, 0x7d, 0x20f})
r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e01020301090224000102000202000009058202200000000300"/54], 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x15, 0x2, "8d53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000c40)=ANY=[@ANYBLOB="040000000001fc9873c7ab4f5f950e805647998f99393e37bb2f66a7eddbbcfdddb9380647946c1116dbd2e75c0609dbe8ec4084a17f16581bb2b786f59f633a99e3da222e0cc98f78b606b1e68dd46a2d4ac63dce327280f85e2464ad093390824eb4061edd0729fe8e24e947eb818650366acaa33bb7ebea690bb126c954de1ce7558df9c00df335d0e35b316eb0344f4cf73ce4391623a0ed524e28d579fa1020935762c3ef0e70f27ce7c658e59b89c106ff7ead41e26e9dc7c29175405b1997218ba2cd7d60546fa9114cf7b8d7e1786b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0)
r4 = gettid()
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioperm(0x6, 0x88, 0x8)
pipe(&(0x7f00000001c0))

3.705413867s ago: executing program 3 (id=7466):
kexec_load(0xff0e, 0x0, &(0x7f0000000900), 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = inotify_init1(0x800)
fcntl$setown(r1, 0x8, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x4002, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
getpid()
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x4782, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
fcntl$getownex(r1, 0x10, &(0x7f0000000140))
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x34524742, 0x6, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0x800d, 0x8}, {0x5, 0x8}, {0x2, 0x15}, {0x5, 0x6}, {0x6, 0x569e}, {0x10001, 0x6}], 0x0, 0xa, 0x1, 0x3078182a3427730f, 0x1}})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, 0x0)

3.696592456s ago: executing program 7 (id=7467):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x5}}, 0x18)
connect$can_j1939(r0, 0x0, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)

3.238407289s ago: executing program 6 (id=7468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
pipe(0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}})
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004)
pipe(&(0x7f00000000c0))

3.217217382s ago: executing program 7 (id=7469):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}, {&(0x7f0000000580)}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r6 = socket(0x1d, 0x4, 0x6)
r7 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r7, 0x89a0, &(0x7f0000000200)={@broadcast, @remote})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084)

2.053135531s ago: executing program 3 (id=7470):
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x8)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(r1, 0xf, &(0x7f0000000000)={0x8, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x300)
r6 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000006a00010625bd7000fbdbdf250a0009000000000008000a"], 0x24}, 0x1, 0x0, 0x0, 0xb52b9c7732f7d2c0}, 0x24014844)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007f00000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004804)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[], 0x64, 0x2)
recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002003)

1.836847438s ago: executing program 6 (id=7471):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]})
write$ppp(r1, &(0x7f0000001200)='Z', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x50)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x640, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r7], 0x1})
mprotect(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x2)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x18)
unshare(0x22020600)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0)

1.660559345s ago: executing program 0 (id=7472):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x34c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x320, 0x2, [@TCA_U32_SEL={0x1f4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x34c}}, 0x24040094)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r7, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet(0x2, 0xa, 0x7)
add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cd", 0xb, 0xfffffffffffffffb)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, &(0x7f0000000080)={0x2})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0)
r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000440)={r9, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4024}, 0x0)

1.619088504s ago: executing program 6 (id=7473):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r6 = dup(r0)
write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
name_to_handle_at(r6, &(0x7f0000002140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4)

1.592646835s ago: executing program 3 (id=7474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x20006)
ioctl$KVM_CAP_SYNC_REGS(r7, 0x4068aea3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=""/31, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020}, 0x2020)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
r8 = syz_open_procfs(0x0, 0x0)
fchdir(r8)

1.542666407s ago: executing program 7 (id=7475):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
syz_io_uring_setup(0x32ba, &(0x7f0000000180)={0x0, 0xc27c, 0x1000, 0x3, 0x43}, &(0x7f0000000080), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000)
r3 = mq_open(&(0x7f0000000480)='\x1b\x00 \x00\x00\xf7\\P\xc1\xde.\x952\xfe\xe69\xe3\xb5&b.\x05\xdd\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x96, &(0x7f0000000440)={0x2000000000002000, 0x3, 0x56, 0x10000006})
mq_timedsend(r3, 0x0, 0x0, 0x200000000000a, 0x0)
mq_timedreceive(r3, &(0x7f0000000500)=""/176, 0xb0, 0x200000000007, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
ioctl$TCGETS(r5, 0x8910, &(0x7f0000001580))
connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x5)
shutdown(r4, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

409.289004ms ago: executing program 6 (id=7476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xb, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @ldst={0x0, 0x3, 0x4, 0x0, 0x63cc52f0dd3656b0, 0xfffffffffffffff4, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0xce, 0x2, 0x9, 0x5, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4d}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

25.799694ms ago: executing program 7 (id=7477):
r0 = socket$isdn(0x22, 0x3, 0x4)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c00000400458000020180c701dc8094010980900138801400af00fe8000000000000000", @ANYBLOB="2a004f800c00d7"], 0x218}, 0x1, 0x0, 0x0, 0x8040}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
sendfile(r1, r1, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000015)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x901, 0x0)
writev(r6, &(0x7f0000000b40)=[{&(0x7f00000006c0)='\'{', 0x2}, {0x0}], 0x2)
syz_clone(0x4100080, 0x0, 0x17, 0x0, 0x0, 0x0)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 6 (id=7478):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70200000300000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x2)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r5}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000540), 0x4}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

yz
[ 2005.851428][ T6058] usb 6-1: Manufacturer: syz
[ 2005.862645][ T6058] usb 6-1: SerialNumber: syz
[ 2005.873617][ T6058] usb 6-1: config 0 descriptor??
[ 2006.360631][ T6058] usb 6-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94)
[ 2006.575880][ T6058] usb 6-1: no permanent extended address found, random address set
[ 2006.583916][ T6058] usb 6-1: atusb_probe: initialization failed, error = -524
[ 2006.592408][ T6058] atusb 6-1:0.128: probe with driver atusb failed with error -524
[ 2006.814864][ T6058] usb 6-1: USB disconnect, device number 45
[ 2006.848909][T29611] overlayfs: failed to clone upperpath
[ 2006.936418][T29615] overlayfs: failed to clone upperpath
[ 2007.060003][T29617] overlayfs: failed to clone upperpath
[ 2007.177169][T27610] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 2007.189488][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'.
[ 2007.257947][T21132] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[ 2007.265765][T21132] Bluetooth: hci4: unexpected event for opcode 0x203e
[ 2007.423950][T27610] usb 7-1: Using ep0 maxpacket: 8
[ 2007.431396][T27610] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 2007.440328][T27610] usb 7-1: config 0 has no interface number 0
[ 2007.446550][T27610] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2007.457473][T27610] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2007.469555][T27610] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2007.486761][T27610] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2007.500679][T27610] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2007.517322][T27610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2007.867113][T27610] usb 7-1: config 0 descriptor??
[ 2007.876022][T27610] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2008.269610][ T6058] usb 7-1: USB disconnect, device number 39
[ 2008.448254][ T6058] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 2009.113202][T29654] overlayfs: failed to clone upperpath
[ 2009.849901][T29650] lo speed is unknown, defaulting to 1000
[ 2010.799285][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[ 2011.481249][T29653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5855'.
[ 2011.572420][T29653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5855'.
[ 2011.573704][T21132] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 2011.590458][T21132] Bluetooth: hci4: Injecting HCI hardware error event
[ 2011.603489][T21132] Bluetooth: hci4: hardware error 0x00
[ 2011.634223][T29653] geneve5: entered promiscuous mode
[ 2011.720672][ T6058] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2011.755616][T29691] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2011.892379][ T6058] usb 6-1: Using ep0 maxpacket: 16
[ 2011.903748][ T6058] usb 6-1: config 252 has an invalid interface number: 15 but max is 0
[ 2011.911985][ T6058] usb 6-1: config 252 has no interface number 0
[ 2011.971329][ T6058] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2012.006794][ T6058] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2012.019630][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2012.061870][ T6058] usb 6-1: Product: syz
[ 2012.129908][ T6058] usb 6-1: Manufacturer: syz
[ 2012.134521][ T6058] usb 6-1: SerialNumber: syz
[ 2012.208309][ T6058] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2012.412938][ T6058] usb 6-1: USB disconnect, device number 46
[ 2012.414488][T12217] usb 6-1: Failed to submit usb control message: -71
[ 2012.458591][T12217] usb 6-1: unable to send the bmi data to the device: -71
[ 2012.465758][T12217] usb 6-1: unable to get target info from device
[ 2012.480545][T12217] usb 6-1: could not get target info (-71)
[ 2012.486367][T12217] usb 6-1: could not probe fw (-71)
[ 2013.010739][T29718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29718 comm=syz.0.5876
[ 2013.244145][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0xe3
[ 2013.255488][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x63
[ 2013.273648][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x423
[ 2013.282570][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x422
[ 2013.292021][T29736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5882'.
[ 2013.292781][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x4e9
[ 2013.310740][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x490
[ 2013.325716][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1d9
[ 2013.336820][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x5c9
[ 2013.352837][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x7d0
[ 2013.362218][T29727] kvm: kvm [29726]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x715
[ 2013.796121][T21132] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 2014.003834][T29766] netlink: 'syz.3.5895': attribute type 10 has an invalid length.
[ 2014.012577][T29766] syz_tun: entered promiscuous mode
[ 2014.022567][T29766] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2014.827511][   T30] audit: type=1400 audit(1764849324.828:8796): avc:  denied  { cmd } for  pid=29782 comm="syz.6.5903" path="socket:[96481]" dev="sockfs" ino=96481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2015.015950][ T6058] hid_parser_main: 825 callbacks suppressed
[ 2015.015971][ T6058] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0
[ 2015.034976][ T6058] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0
[ 2015.048180][ T6058] hid-generic 0000:0003:0001.0014: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[ 2015.187652][T29800] fido_id[29800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2015.271665][T29804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2015.359875][T29804] syzkaller0: entered promiscuous mode
[ 2015.368275][T29804] syzkaller0: entered allmulticast mode
[ 2015.374659][T29804] tipc: Resetting bearer <eth:syzkaller0>
[ 2015.438708][T29803] tipc: Resetting bearer <eth:syzkaller0>
[ 2017.320349][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5922'.
[ 2017.998733][T29803] tipc: Disabling bearer <eth:syzkaller0>
[ 2019.056455][   T30] audit: type=1400 audit(1764849328.785:8797): avc:  denied  { write } for  pid=29875 comm="syz.7.5933" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 2019.142119][   T30] audit: type=1400 audit(1764849328.822:8798): avc:  denied  { open } for  pid=29875 comm="syz.7.5933" path="/594/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 2019.224492][   T30] audit: type=1400 audit(1764849328.822:8799): avc:  denied  { ioctl } for  pid=29875 comm="syz.7.5933" path="/594/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 2019.750615][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'.
[ 2019.933818][T29900] overlayfs: failed to clone upperpath
[ 2020.213501][   T30] audit: type=1400 audit(1764849329.860:8800): avc:  denied  { read write } for  pid=15974 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2020.397679][   T30] audit: type=1400 audit(1764849329.898:8801): avc:  denied  { open } for  pid=15974 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2020.544443][   T30] audit: type=1400 audit(1764849329.898:8802): avc:  denied  { ioctl } for  pid=15974 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2020.592544][   T30] audit: type=1400 audit(1764849330.038:8803): avc:  denied  { bpf } for  pid=29922 comm="syz.5.5952" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2020.615301][   T30] audit: type=1400 audit(1764849330.038:8804): avc:  denied  { perfmon } for  pid=29922 comm="syz.5.5952" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2020.862166][T29942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5960'.
[ 2021.240938][   T30] audit: type=1400 audit(1764849330.833:8805): avc:  denied  { call } for  pid=29950 comm="syz.6.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 2021.281118][   T30] audit: type=1400 audit(1764849330.833:8806): avc:  denied  { transfer } for  pid=29950 comm="syz.6.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 2021.589896][T29971] tipc: Cannot configure node identity twice
[ 2021.791266][T27610] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 2022.048988][T29975] SELinux: failed to load policy
[ 2022.571845][T27610] usb 7-1: Using ep0 maxpacket: 16
[ 2022.605073][T27610] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2022.635926][T27610] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2022.645847][T27610] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2022.664068][T27610] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2022.673833][T27610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2022.726212][T27610] usb 7-1: config 0 descriptor??
[ 2022.848293][T29984] kvm: pic: level sensitive irq not supported
[ 2022.848547][T29984] kvm: pic: non byte read
[ 2022.909796][T29991] tipc: Cannot configure node identity twice
[ 2022.920623][T29984] kvm: pic: non byte read
[ 2022.925437][T29984] kvm: pic: non byte read
[ 2022.935885][T29984] kvm: pic: level sensitive irq not supported
[ 2022.935954][T29984] kvm: pic: non byte read
[ 2023.196029][T27610] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0015/input/input78
[ 2023.297059][T27610] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 2023.372393][   T30] audit: type=1400 audit(1764849332.816:8807): avc:  denied  { read } for  pid=29997 comm="syz.5.5979" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2023.432186][   T30] audit: type=1400 audit(1764849332.816:8808): avc:  denied  { open } for  pid=29997 comm="syz.5.5979" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2023.546321][   T30] audit: type=1400 audit(1764849332.882:8809): avc:  denied  { ioctl } for  pid=29997 comm="syz.5.5979" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2023.811372][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5983'.
[ 2023.820459][T30007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5983'.
[ 2023.972273][ T6058] usb 7-1: USB disconnect, device number 40
[ 2025.633993][   T30] audit: type=1400 audit(1764849334.940:8810): avc:  denied  { read } for  pid=30048 comm="syz.5.5998" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 2025.662875][T30057] orangefs_devreq_open: device cannot be opened in blocking mode
[ 2025.802413][T27610] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2026.158344][T27610] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2026.254549][T27610] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2026.322595][T27610] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 2026.402173][T27610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2026.548957][T27610] usb 7-1: config 0 descriptor??
[ 2026.554306][T30068] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2026.717013][   T30] audit: type=1400 audit(1764849335.950:8811): avc:  denied  { create } for  pid=30078 comm="syz.5.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2026.804594][   T30] audit: type=1400 audit(1764849336.025:8812): avc:  denied  { bind } for  pid=30078 comm="syz.5.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2026.899264][T30088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6008'.
[ 2026.987985][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6010'.
[ 2027.080710][T30100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6013'.
[ 2027.173580][   T30] audit: type=1400 audit(1764849336.380:8813): avc:  denied  { append } for  pid=30104 comm="syz.7.6015" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 2027.826368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2027.832998][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2027.851835][T30118] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2027.878782][T30121] bond0: (slave team0): Releasing backup interface
[ 2027.892152][T30121] bond0: (slave bond_slave_0): Releasing backup interface
[ 2027.915927][T30121] team0: Port device team_slave_0 removed
[ 2027.932849][T30121] team0: Port device team_slave_1 removed
[ 2027.943924][T30121] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2027.956074][T30121] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2027.964083][T30121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 2028.380489][T30132] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2028.445707][T30134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2028.827284][T27610] usb 7-1: USB disconnect, device number 41
[ 2028.921762][T30147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6031'.
[ 2028.931525][T30147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6031'.
[ 2028.943643][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6031'.
[ 2028.960774][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6031'.
[ 2028.970903][ T6021] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2029.000980][ T6021] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2029.195238][ T6021] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2029.222723][T30152] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2029.237908][ T6021] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2029.362731][T30158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6034'.
[ 2030.189538][   T30] audit: type=1400 audit(1764849339.196:8814): avc:  denied  { relabelfrom } for  pid=30194 comm="syz.7.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 2030.491746][   T30] audit: type=1400 audit(1764849339.196:8815): avc:  denied  { relabelto } for  pid=30194 comm="syz.7.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 2030.577691][T30205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6051'.
[ 2031.188309][   T30] audit: type=1326 audit(1764849340.131:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30220 comm="syz.5.6057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x0
[ 2031.648935][T21132] Bluetooth: hci2: unknown advertising packet type: 0x76
[ 2031.648979][T21132] Bluetooth: hci2: Malformed LE Event: 0x02
[ 2032.511866][T30246] bridge_slave_0: entered promiscuous mode
[ 2032.519249][T30246] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2035.077287][T30284] overlayfs: failed to clone upperpath
[ 2035.488526][T30302] netlink: 'syz.3.6085': attribute type 4 has an invalid length.
[ 2035.509635][T30302] netlink: 'syz.3.6085': attribute type 4 has an invalid length.
[ 2035.528013][ T6058] lo speed is unknown, defaulting to 1000
[ 2035.533927][ T6058] syz0: Port: 1 Link ACTIVE
[ 2035.617352][T30308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30308 comm=syz.3.6088
[ 2035.742945][T30317] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2037.632862][T12964] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 2038.197642][ T6058] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2039.169969][T30351] syz.3.6103 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=3, oom_score_adj=0
[ 2039.181098][T30351] CPU: 1 UID: 0 PID: 30351 Comm: syz.3.6103 Not tainted syzkaller #0 PREEMPT(full) 
[ 2039.181125][T30351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2039.181137][T30351] Call Trace:
[ 2039.181143][T30351]  <TASK>
[ 2039.181151][T30351]  dump_stack_lvl+0x16c/0x1f0
[ 2039.181183][T30351]  dump_header+0x101/0x930
[ 2039.181207][T30351]  oom_kill_process+0x272/0xa40
[ 2039.181230][T30351]  out_of_memory+0x350/0x1700
[ 2039.181255][T30351]  ? __pfx_out_of_memory+0x10/0x10
[ 2039.181283][T30351]  mem_cgroup_out_of_memory+0x118/0x130
[ 2039.181307][T30351]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 2039.181336][T30351]  ? do_raw_spin_unlock+0x172/0x230
[ 2039.181371][T30351]  try_charge_memcg+0x689/0xd40
[ 2039.181405][T30351]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2039.181433][T30351]  ? find_held_lock+0x2b/0x80
[ 2039.181452][T30351]  ? rcu_read_unlock+0x17/0x60
[ 2039.181488][T30351]  obj_cgroup_charge_account+0x292/0x500
[ 2039.181522][T30351]  __memcg_slab_post_alloc_hook+0x2e3/0x880
[ 2039.181559][T30351]  __kmalloc_node_track_caller_noprof+0x6c5/0x910
[ 2039.181581][T30351]  ? copy_array.constprop.0+0x93/0x120
[ 2039.181605][T30351]  ? krealloc_node_align_noprof+0x2ea/0x3d0
[ 2039.181623][T30351]  krealloc_node_align_noprof+0x2ea/0x3d0
[ 2039.181645][T30351]  copy_array.constprop.0+0x93/0x120
[ 2039.181665][T30351]  copy_verifier_state+0xaf6/0x1030
[ 2039.181687][T30351]  ? kasan_save_track+0x14/0x30
[ 2039.181708][T30351]  do_check_common+0x5859/0xc640
[ 2039.181742][T30351]  ? kvfree+0xd/0x20
[ 2039.181766][T30351]  ? mark_fastcall_pattern_for_call+0x602/0x760
[ 2039.181782][T30351]  ? __pfx_do_check_common+0x10/0x10
[ 2039.181804][T30351]  ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10
[ 2039.181827][T30351]  bpf_check+0x8d37/0xcbb0
[ 2039.181857][T30351]  ? __pfx_bpf_check+0x10/0x10
[ 2039.181877][T30351]  ? rcu_is_watching+0x12/0xc0
[ 2039.181894][T30351]  ? trace_kmalloc+0x2b/0xb0
[ 2039.181912][T30351]  ? __kmalloc_noprof+0x34f/0x8f0
[ 2039.181927][T30351]  ? lsm_blob_alloc+0x68/0x90
[ 2039.181953][T30351]  ? lsm_blob_alloc+0x68/0x90
[ 2039.181972][T30351]  ? __asan_memset+0x23/0x50
[ 2039.181988][T30351]  ? selinux_bpf_prog_load+0x67/0x170
[ 2039.182007][T30351]  ? bpf_lsm_bpf_prog_load+0x9/0x10
[ 2039.182029][T30351]  bpf_prog_load+0x114e/0x2c70
[ 2039.182056][T30351]  ? __pfx_bpf_prog_load+0x10/0x10
[ 2039.182079][T30351]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 2039.182103][T30351]  ? avc_has_perm+0x144/0x1f0
[ 2039.182134][T30351]  ? selinux_bpf+0xdd/0x130
[ 2039.182154][T30351]  ? bpf_lsm_bpf+0x9/0x10
[ 2039.182172][T30351]  __sys_bpf+0x3e72/0x4980
[ 2039.182193][T30351]  ? futex_private_hash_put+0x160/0x1b0
[ 2039.182216][T30351]  ? __pfx___sys_bpf+0x10/0x10
[ 2039.182237][T30351]  ? __pfx_futex_wait+0x10/0x10
[ 2039.182266][T30351]  ? do_futex+0x122/0x350
[ 2039.182298][T30351]  ? fdget_pos+0x2b8/0x370
[ 2039.182315][T30351]  ? xfd_validate_state+0x61/0x180
[ 2039.182329][T30351]  ? __pfx_ksys_read+0x10/0x10
[ 2039.182354][T30351]  __x64_sys_bpf+0x78/0xc0
[ 2039.182366][T30351]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2039.182387][T30351]  do_syscall_64+0xcd/0xf80
[ 2039.182409][T30351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2039.182424][T30351] RIP: 0033:0x7fc2c3f8f749
[ 2039.182436][T30351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2039.182451][T30351] RSP: 002b:00007fc2c4ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2039.182466][T30351] RAX: ffffffffffffffda RBX: 00007fc2c41e5fa0 RCX: 00007fc2c3f8f749
[ 2039.182475][T30351] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[ 2039.182484][T30351] RBP: 00007fc2c4013f91 R08: 0000000000000000 R09: 0000000000000000
[ 2039.182493][T30351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2039.182502][T30351] R13: 00007fc2c41e6038 R14: 00007fc2c41e5fa0 R15: 00007ffd51814558
[ 2039.182523][T30351]  </TASK>
[ 2039.182531][T30351] memory: usage 307196kB, limit 307200kB, failcnt 1174
[ 2039.270402][T12964] usb 7-1: Using ep0 maxpacket: 16
[ 2039.279677][T30351] memory+swap: usage 312504kB, limit 9007199254740988kB, failcnt 0
[ 2039.374724][ T6058] usb 6-1: Using ep0 maxpacket: 8
[ 2039.450074][T30351] kmem: usage 307032kB, limit 9007199254740988kB, failcnt 0
[ 2039.484879][T12964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2039.514421][T30351] Memory cgroup stats for /syz3:
[ 2039.626837][T30351] cache 143360
[ 2039.635521][T30351] rss 12288
[ 2039.638623][T30351] rss_huge 0
[ 2039.641816][T30351] shmem 0
[ 2039.644799][T30351] mapped_file 143360
[ 2039.648680][T30351] dirty 4096
[ 2039.651871][T30351] writeback 0
[ 2039.655152][T30351] workingset_refault_anon 257
[ 2039.659850][T30351] workingset_refault_file 67
[ 2039.664427][T30351] swap 5431296
[ 2039.667885][T30351] swapcached 24576
[ 2039.671594][T30351] pgpgin 1683998
[ 2039.675433][T30351] pgpgout 1683956
[ 2039.679161][T30351] pgfault 1860466
[ 2039.682787][T30351] pgmajfault 138
[ 2039.686327][T30351] inactive_anon 24576
[ 2039.690354][T30351] active_anon 4096
[ 2039.694061][T30351] inactive_file 143360
[ 2039.698155][T30351] active_file 0
[ 2039.701602][T30351] unevictable 0
[ 2039.705051][T30351] hierarchical_memory_limit 314572800
[ 2039.710472][T30351] hierarchical_memsw_limit 9223372036854771712
[ 2039.716613][T30351] total_cache 143360
[ 2039.720529][T30351] total_rss 12288
[ 2039.724153][T30351] total_rss_huge 0
[ 2039.728037][T30351] total_shmem 0
[ 2039.731625][T30351] total_mapped_file 143360
[ 2039.736032][T30351] total_dirty 4096
[ 2039.739737][T30351] total_writeback 0
[ 2039.743559][T30351] total_workingset_refault_anon 257
[ 2039.748756][T30351] total_workingset_refault_file 67
[ 2039.753886][T30351] total_swap 5431296
[ 2039.757780][T30351] total_swapcached 24576
[ 2039.762023][T30351] total_pgpgin 1683998
[ 2039.766129][T30351] total_pgpgout 1683956
[ 2039.770278][T30351] total_pgfault 1860466
[ 2039.774471][T30351] total_pgmajfault 138
[ 2039.778528][T30351] total_inactive_anon 24576
[ 2039.783025][T30351] total_active_anon 4096
[ 2039.787287][T30351] total_inactive_file 143360
[ 2039.791858][T30351] total_active_file 0
[ 2039.795874][T30351] total_unevictable 0
[ 2039.799836][T30351] anon_cost 0
[ 2039.803105][T30351] file_cost 0
[ 2039.806409][T30351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6103,pid=30350,uid=0
[ 2039.821959][T30351] Memory cgroup out of memory: Killed process 30350 (syz.3.6103) total-vm:104080kB, anon-rss:1168kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[ 2040.319593][T12964] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2040.342344][ T6058] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 2040.351414][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.359395][T12964] usb 7-1: Product: syz
[ 2040.363794][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.372526][T12964] usb 7-1: Manufacturer: syz
[ 2040.377114][T12964] usb 7-1: SerialNumber: syz
[ 2040.382165][ T6058] usb 6-1: Product: syz
[ 2040.386323][ T6058] usb 6-1: Manufacturer: syz
[ 2040.390909][ T6058] usb 6-1: SerialNumber: syz
[ 2040.398566][T12964] usb 7-1: config 0 descriptor??
[ 2040.405537][ T6058] usb 6-1: config 0 descriptor??
[ 2040.413853][T12964] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2040.424730][ T6058] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 2040.440450][T12964] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 2041.134099][ T6058] gspca_sonixj: reg_w1 err -110
[ 2041.148530][T12964] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2041.207566][ T6058] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[ 2041.567123][ T6058] usb 6-1: USB disconnect, device number 47
[ 2041.605920][T12964] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2041.735674][T12964] em28xx 7-1:0.0: board has no eeprom
[ 2041.754348][T30366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2042.243790][T12964] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2042.277009][T12964] em28xx 7-1:0.0: dvb set to bulk mode.
[ 2042.282896][ T6058] em28xx 7-1:0.0: Binding DVB extension
[ 2042.317615][T12964] usb 7-1: USB disconnect, device number 42
[ 2042.336373][T12964] em28xx 7-1:0.0: Disconnecting em28xx
[ 2042.411084][ T6058] em28xx 7-1:0.0: Registering input extension
[ 2042.434496][T12964] em28xx 7-1:0.0: Closing input extension
[ 2042.517161][T30387] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[ 2042.564853][T12964] em28xx 7-1:0.0: Freeing device
[ 2042.573176][   T30] audit: type=1326 audit(1764849350.776:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30383 comm="syz.3.6114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2c3f8f749 code=0x0
[ 2046.150567][T30449] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2046.197938][T12964] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[ 2046.262103][T27610] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 2046.456041][T12964] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2046.468036][T12964] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2046.477892][T27610] usb 6-1: Using ep0 maxpacket: 16
[ 2046.482117][T12964] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2046.489734][T27610] usb 6-1: config 252 has an invalid interface number: 15 but max is 0
[ 2046.492720][T12964] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[ 2046.509792][T27610] usb 6-1: config 252 has no interface number 0
[ 2046.516640][T27610] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2046.535675][T27610] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2046.545353][T27610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2046.553852][T27610] usb 6-1: Product: syz
[ 2046.558448][T27610] usb 6-1: Manufacturer: syz
[ 2046.854442][T12964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2046.889313][T12964] usb 7-1: config 0 descriptor??
[ 2046.890990][T27610] usb 6-1: SerialNumber: syz
[ 2046.934808][T27610] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2047.526010][T30474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2047.547327][T12964] usbhid 7-1:0.0: can't add hid device: -71
[ 2047.559575][T12964] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2047.559823][T30477] fuse: Bad value for 'fd'
[ 2047.587250][T12964] usb 7-1: USB disconnect, device number 43
[ 2047.701960][   T30] audit: type=1326 audit(1764849355.574:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.7.6145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x0
[ 2048.004776][ T3824] usb 6-1: Failed to submit usb control message: -110
[ 2048.011924][ T3824] usb 6-1: unable to send the bmi data to the device: -110
[ 2048.019190][ T3824] usb 6-1: unable to get target info from device
[ 2048.025548][ T3824] usb 6-1: could not get target info (-110)
[ 2048.031592][ T3824] usb 6-1: could not probe fw (-110)
[ 2048.778553][T27610] usb 6-1: USB disconnect, device number 48
[ 2048.896182][T30503] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6152'.
[ 2049.319550][T27610] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 2049.490692][T27610] usb 6-1: Using ep0 maxpacket: 8
[ 2049.504818][T27610] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 2049.516364][T27610] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2049.539406][T27610] usb 6-1: config 0 has no interface number 0
[ 2049.556812][T27610] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 2049.566308][T27610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2049.574334][T27610] usb 6-1: Product: syz
[ 2049.579111][T27610] usb 6-1: Manufacturer: syz
[ 2049.583908][T27610] usb 6-1: SerialNumber: syz
[ 2049.600052][T27610] usb 6-1: config 0 descriptor??
[ 2049.612394][T27610] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 2049.621937][T27610] uvcvideo 6-1:0.31: No valid video chain found.
[ 2049.927204][T30499] xt_hashlimit: size too large, truncated to 1048576
[ 2050.607855][T12964] usb 6-1: USB disconnect, device number 49
[ 2050.694013][T30525] tipc: Cannot configure node identity twice
[ 2050.971287][T27610] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 2051.165102][T27610] usb 7-1: Using ep0 maxpacket: 16
[ 2051.176534][T27610] usb 7-1: config 252 has an invalid interface number: 15 but max is 0
[ 2051.192187][T27610] usb 7-1: config 252 has no interface number 0
[ 2051.204429][T27610] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2051.220418][T27610] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2051.251468][T27610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2051.264560][T27610] usb 7-1: Product: syz
[ 2051.269209][T27610] usb 7-1: Manufacturer: syz
[ 2051.274066][T27610] usb 7-1: SerialNumber: syz
[ 2051.338758][T27610] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2051.922291][T15349] usb 7-1: Failed to submit usb control message: -71
[ 2051.924962][T12964] usb 7-1: USB disconnect, device number 44
[ 2051.936784][T15349] usb 7-1: unable to send the bmi data to the device: -71
[ 2051.945230][T15349] usb 7-1: unable to get target info from device
[ 2051.952166][T15349] usb 7-1: could not get target info (-71)
[ 2051.959345][T15349] usb 7-1: could not probe fw (-71)
[ 2052.020594][T30553] netlink: 'syz.7.6169': attribute type 12 has an invalid length.
[ 2052.095244][T30556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2052.402641][T30569] overlayfs: failed to clone upperpath
[ 2052.414457][T30569] overlayfs: failed to clone upperpath
[ 2053.226081][   T30] audit: type=1326 audit(1764849360.747:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30550 comm="syz.3.6168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7fc00000
[ 2054.818933][T30605] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2055.316358][T30613] tipc: Cannot configure node identity twice
[ 2058.687032][T30661] binder: 30660:30661 ioctl c0306201 200000000680 returned -14
[ 2059.415883][T30686] tipc: Cannot configure node identity twice
[ 2059.475688][ T6058] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2060.074347][ T6058] usb 7-1: Using ep0 maxpacket: 8
[ 2060.089347][ T6058] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2060.691980][ T6058] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[ 2060.703412][ T6058] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 2060.715114][ T6058] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[ 2060.724328][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2060.732345][ T6058] usb 7-1: Product: syz
[ 2060.736512][ T6058] usb 7-1: Manufacturer: syz
[ 2060.741394][ T6058] usb 7-1: SerialNumber: syz
[ 2060.925757][T30706] random: crng reseeded on system resumption
[ 2060.962120][   T30] audit: type=1400 audit(1764849367.978:8820): avc:  denied  { ioctl } for  pid=30699 comm="syz.5.6218" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2061.320311][ T6058] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected
[ 2062.468530][T27610] usb 7-1: USB disconnect, device number 45
[ 2063.017773][T30731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2063.560259][T30745] syz.5.6230 (30745): /proc/30744/oom_adj is deprecated, please use /proc/30744/oom_score_adj instead.
[ 2065.444748][   T30] audit: type=1400 audit(1764849372.168:8821): avc:  denied  { write } for  pid=30768 comm="syz.6.6235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2066.704503][T30795] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2066.712705][T30795] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[ 2066.721301][T30795] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2066.729188][T30795] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[ 2069.550411][T30825] dvmrp0: entered allmulticast mode
[ 2071.382496][T30867] (syz.5.6265,30867,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 2071.405464][T30867] (syz.5.6265,30867,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 2071.443707][T30867] (syz.5.6265,30867,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 2071.454117][T30867] (syz.5.6265,30867,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 2082.065090][   T30] audit: type=1400 audit(1764849387.705:8822): avc:  denied  { read } for  pid=30946 comm="syz.3.6289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2084.812731][T30985] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 2085.324319][T30993] syzkaller0: entered promiscuous mode
[ 2085.394437][T30993] syzkaller0: entered allmulticast mode
[ 2085.586724][T12964] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 2085.627110][   T30] audit: type=1326 audit(1764849391.035:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2085.864196][   T30] audit: type=1326 audit(1764849391.035:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2085.903064][T12964] usb 7-1: Using ep0 maxpacket: 16
[ 2085.917130][T12964] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2085.966383][   T30] audit: type=1326 audit(1764849391.101:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2085.967213][T12964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2086.173431][   T30] audit: type=1326 audit(1764849391.129:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2086.363180][T12964] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2086.372283][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2087.320105][   T30] audit: type=1326 audit(1764849391.232:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2087.343654][   T30] audit: type=1326 audit(1764849391.232:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2087.383020][T12964] usb 7-1: Product: syz
[ 2087.387205][T12964] usb 7-1: Manufacturer: syz
[ 2087.404724][T12964] usb 7-1: SerialNumber: syz
[ 2087.432663][T12964] usb 7-1: config 0 descriptor??
[ 2087.458097][T12964] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2087.678134][   T30] audit: type=1326 audit(1764849391.232:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2087.702734][   T30] audit: type=1326 audit(1764849391.232:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2087.726671][T12964] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2088.016263][   T30] audit: type=1326 audit(1764849391.232:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2088.077867][   T30] audit: type=1326 audit(1764849391.232:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2088.206612][   T30] audit: type=1326 audit(1764849391.232:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c3f8f749 code=0x7ffc0000
[ 2088.723303][T12964] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2088.730835][T12964] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[ 2089.271770][T31032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6313'.
[ 2089.641062][T12964] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[ 2089.690658][T31031] syzkaller0: entered promiscuous mode
[ 2089.696282][T31031] syzkaller0: entered allmulticast mode
[ 2089.919096][T31037] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2089.927082][T31037] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2089.935805][T31037] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2089.943651][T31037] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2090.477851][T12964] em28xx 7-1:0.0: couldn't setup AC97 register 4
[ 2090.494458][T12964] em28xx 7-1:0.0: couldn't setup AC97 register 6
[ 2090.504312][T12964] em28xx 7-1:0.0: couldn't setup AC97 register 54
[ 2090.511432][T12964] em28xx 7-1:0.0: couldn't setup AC97 register 56
[ 2090.524225][T12964] usb 7-1: USB disconnect, device number 46
[ 2090.947879][T31050] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2091.518062][T31062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6321'.
[ 2093.411256][T31087] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2093.511505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2093.517902][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2095.227364][T31108] binder: transaction release 44 bad handle 1, ret = -22
[ 2096.830237][T31133] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2099.192999][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6347'.
[ 2105.508780][T31204] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2105.982997][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6366'.
[ 2107.012396][T31232] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 2107.109398][   T30] audit: type=1400 audit(1764849411.147:8834): avc:  denied  { shutdown } for  pid=31243 comm="syz.6.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2108.636296][T14782] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[ 2108.653734][T31274] overlayfs: failed to clone upperpath
[ 2108.671461][T31265] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6383'.
[ 2108.837814][T14782] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 2108.847233][T14782] usb 6-1: config 0 has no interface number 0
[ 2108.876009][T14782] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 2108.901803][T14782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2108.929432][T14782] usb 6-1: Product: syz
[ 2109.024397][T14782] usb 6-1: Manufacturer: syz
[ 2109.030836][T14782] usb 6-1: SerialNumber: syz
[ 2109.052663][T14782] usb 6-1: config 0 descriptor??
[ 2109.083873][T14782] hub 6-1:0.132: bad descriptor, ignoring hub
[ 2109.642892][T31262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2109.661514][T14782] hub 6-1:0.132: probe with driver hub failed with error -5
[ 2109.681913][T31262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2109.716896][T14782] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input80
[ 2110.062550][T31288] 9pnet_fd: Insufficient options for proto=fd
[ 2110.154048][T31290] netlink: 'syz.0.6390': attribute type 1 has an invalid length.
[ 2110.252867][T31290] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2110.339334][T31290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6390'.
[ 2110.482354][T31290] bond5: entered promiscuous mode
[ 2110.491287][T31290] bond5: entered allmulticast mode
[ 2110.514979][T31290] bond5: (slave dummy0): making interface the new active one
[ 2110.530377][T31290] dummy0: entered promiscuous mode
[ 2110.540367][T31290] dummy0: entered allmulticast mode
[ 2110.548713][T31290] bond5: (slave dummy0): Enslaving as an active interface with an up link
[ 2111.216556][T31290] bond5 (unregistering): (slave dummy0): Releasing active interface
[ 2111.228437][T31290] dummy0: left promiscuous mode
[ 2111.268758][T31290] dummy0: left allmulticast mode
[ 2111.316537][T31290] bond5 (unregistering): Released all slaves
[ 2113.719127][T31329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6398'.
[ 2114.931982][T31342] Invalid source name
[ 2114.936597][T31342] UBIFS error (pid: 31342): cannot open "./file0", error -22
[ 2117.198989][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'.
[ 2117.397459][T31369] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6409'.
[ 2117.660402][T31368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6410'.
[ 2117.676350][T31368] tipc: Enabled bearer <udp:syz0>, priority 10
[ 2117.897262][T31383] syzkaller0: entered promiscuous mode
[ 2117.908026][T31383] syzkaller0: entered allmulticast mode
[ 2118.014549][T14782] usb 6-1: USB disconnect, device number 50
[ 2118.051666][T31385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6412'.
[ 2118.215502][   T30] audit: type=1400 audit(1764849421.539:8835): avc:  denied  { wake_alarm } for  pid=31392 comm="syz.6.6416" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2118.756569][T14782] tipc: Node number set to 1
[ 2119.681244][T31393] lo speed is unknown, defaulting to 1000
[ 2119.688354][T31393] ip6_vti0 speed is unknown, defaulting to 1000
[ 2120.500937][T21132] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 2124.068069][T31466] futex_wake_op: syz.0.6439 tries to shift op by -1; fix this program
[ 2124.298386][T31472] overlayfs: failed to clone upperpath
[ 2124.334840][T31471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6441'.
[ 2124.656113][T31482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6445'.
[ 2130.816000][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6459'.
[ 2132.329766][T31558] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6465'.
[ 2134.791145][ T6058] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 2135.004996][ T6058] usb 6-1: Using ep0 maxpacket: 32
[ 2135.012097][ T6058] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2135.020652][ T6058] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2135.029344][ T6058] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2135.038536][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2135.468774][ T6058] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2135.478573][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[ 2135.489722][ T6058] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2135.516215][ T6058] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2135.530330][ T6058] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2135.539599][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2135.551504][ T6058] usb 6-1: config 0 descriptor??
[ 2135.557286][T31567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2135.939665][ T6058] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2135.975481][T31567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2136.051189][T31567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2137.197349][   T30] audit: type=1400 audit(1764849439.302:8836): avc:  denied  { read write } for  pid=31565 comm="syz.5.6468" name="lp0" dev="devtmpfs" ino=3420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 2137.201041][    C1] usblp0: nonzero read bulk status received: -71
[ 2137.248791][T31601] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2137.260177][   T30] audit: type=1400 audit(1764849439.302:8837): avc:  denied  { open } for  pid=31565 comm="syz.5.6468" path="/dev/usb/lp0" dev="devtmpfs" ino=3420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 2137.286424][T31567] usblp0: error -71 reading from printer
[ 2137.295745][    C0] usblp0: nonzero read bulk status received: -71
[ 2137.310336][ T6058] usb 6-1: USB disconnect, device number 51
[ 2137.320005][ T6058] usblp0: removed
[ 2138.148045][T21132] Bluetooth: hci5: command 0x0406 tx timeout
[ 2138.917602][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6481'.
[ 2139.315553][T31624] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2139.411157][T31628] netlink: 'syz.7.6485': attribute type 1 has an invalid length.
[ 2139.514065][T31628] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2139.629830][T31635] macvlan0: entered promiscuous mode
[ 2139.856826][T31635] macvlan0: entered allmulticast mode
[ 2140.470397][T31635] bond1: entered promiscuous mode
[ 2140.520881][T31635] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2140.594946][T31635] team0: Port device macvlan0 added
[ 2140.697190][T31628] bond1: (slave ip6gretap1): making interface the new active one
[ 2140.746604][T31628] ip6gretap1: entered promiscuous mode
[ 2140.758748][T31628] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 2140.867391][T31651] bond0: (slave bond_slave_0): Releasing backup interface
[ 2140.971267][T31651] bond0: (slave bond_slave_1): Releasing backup interface
[ 2141.010584][T31651] team0: Port device team_slave_0 removed
[ 2141.062351][T31651] team0: Port device team_slave_1 removed
[ 2141.078688][T31651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2141.087511][T31651] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2141.120751][T31651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2141.140652][T31651] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2141.176586][T31651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 2141.318629][T31658] syzkaller0: entered promiscuous mode
[ 2141.328414][T31658] syzkaller0: entered allmulticast mode
[ 2142.015668][T31682] /dev/nullb0: Can't lookup blockdev
[ 2143.299625][   T30] audit: type=1326 audit(1764849444.999:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31690 comm="syz.6.6499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f672bf8f749 code=0x0
[ 2144.576280][T31706] xt_hashlimit: size too large, truncated to 1048576
[ 2148.360762][T31733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2148.369402][T31733] syzkaller0: entered promiscuous mode
[ 2148.405508][T31733] syzkaller0: entered allmulticast mode
[ 2149.484974][T31752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6508'.
[ 2149.581719][T31733] tipc: Resetting bearer <eth:syzkaller0>
[ 2149.690088][T31731] tipc: Resetting bearer <eth:syzkaller0>
[ 2149.737215][T31731] tipc: Disabling bearer <eth:syzkaller0>
[ 2151.399053][T31781] xt_hashlimit: size too large, truncated to 1048576
[ 2153.791230][   T30] audit: type=1400 audit(1764849453.979:8839): avc:  denied  { associate } for  pid=31797 comm="syz.0.6522" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[ 2154.534006][   T30] audit: type=1400 audit(1764849455.513:8840): avc:  denied  { map_create } for  pid=31802 comm="syz.5.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 2154.558847][   T30] audit: type=1400 audit(1764849455.513:8841): avc:  denied  { map_read map_write } for  pid=31802 comm="syz.5.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 2154.790867][T31804] xt_NFQUEUE: number of total queues is 0
[ 2155.116540][   T30] audit: type=1400 audit(1764849456.055:8842): avc:  denied  { prog_load } for  pid=31806 comm="syz.5.6527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 2155.136417][   T30] audit: type=1400 audit(1764849456.065:8843): avc:  denied  { prog_run } for  pid=31806 comm="syz.5.6527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 2156.998598][T31811] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6528'.
[ 2157.113971][T31818] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[ 2157.136717][T31818] netlink: 'syz.3.6531': attribute type 10 has an invalid length.
[ 2157.411773][   T30] audit: type=1400 audit(1764849457.926:8844): avc:  denied  { ioctl } for  pid=31817 comm="syz.3.6531" path="socket:[104488]" dev="sockfs" ino=104488 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 2157.478927][T31818] bond0: (slave wlan1): Opening slave failed
[ 2158.830529][T31851] Invalid source name
[ 2158.835366][T31851] UBIFS error (pid: 31851): cannot open "ubifs", error -22
[ 2159.193453][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2159.207159][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2159.513588][   T30] audit: type=1800 audit(1764849460.171:8845): pid=31854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6526" name="bus" dev="ramfs" ino=104578 res=0 errno=0
[ 2159.996233][T31882] wireguard: wg1: Could not create IPv4 socket
[ 2160.004113][T31882] wg1: entered promiscuous mode
[ 2160.008970][T31882] wg1: entered allmulticast mode
[ 2164.588492][T31926] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[ 2164.597569][   T30] audit: type=1804 audit(1764849464.923:8846): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.6553" name="/newroot/703/file0" dev="tmpfs" ino=3607 res=1 errno=0
[ 2164.620037][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2164.627664][T31926] ref_ctr increment failed for inode: 0xe17 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880303dc980
[ 2164.685112][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6552'.
[ 2164.735079][T31926] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[ 2165.029292][T31926] ref_ctr decrement failed for inode: 0xe17 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880303dc980
[ 2165.075179][T31926] uprobe: syz.7.6553:31926 failed to unregister, leaking uprobe
[ 2165.298559][T31937] syzkaller1: entered promiscuous mode
[ 2165.398738][T31937] syzkaller1: entered allmulticast mode
[ 2166.812806][T31952] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6561'.
[ 2166.839774][T31952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2166.847088][T31952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2166.864973][T31952] bridge0: entered allmulticast mode
[ 2167.006983][T31955] bridge_slave_1: left allmulticast mode
[ 2167.034501][T31955] bridge_slave_1: left promiscuous mode
[ 2167.121587][T31955] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.531061][T31955] bridge_slave_0: left allmulticast mode
[ 2167.540325][T31955] bridge_slave_0: left promiscuous mode
[ 2167.560648][T31955] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.642803][T31958] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2177.015874][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6587'.
[ 2178.400726][T27610] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 2179.054116][T27610] usb 6-1: Using ep0 maxpacket: 16
[ 2179.061864][T27610] usb 6-1: config 252 has an invalid interface number: 15 but max is 0
[ 2179.070267][T27610] usb 6-1: config 252 has no interface number 0
[ 2179.079843][T27610] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2179.160064][T27610] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2179.170117][T27610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2179.178417][T27610] usb 6-1: Product: syz
[ 2179.182710][T27610] usb 6-1: Manufacturer: syz
[ 2179.187445][T27610] usb 6-1: SerialNumber: syz
[ 2179.845841][T27610] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2180.502427][T32104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6600'.
[ 2180.997862][ T3892] usb 6-1: Failed to submit usb control message: -110
[ 2181.037035][ T3892] usb 6-1: unable to send the bmi data to the device: -110
[ 2181.065451][ T3892] usb 6-1: unable to get target info from device
[ 2181.089599][ T3892] usb 6-1: could not get target info (-110)
[ 2181.104821][T27610] usb 6-1: USB disconnect, device number 52
[ 2181.122513][ T3892] usb 6-1: could not probe fw (-110)
[ 2185.772372][T32145] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2186.076247][   T30] audit: type=1400 audit(6291402314.126:8847): avc:  denied  { execute } for  pid=32150 comm="syz.3.6614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2188.083832][T32183] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6623'.
[ 2188.093851][T32183] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6623'.
[ 2188.894880][T32186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'.
[ 2192.851328][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6634'.
[ 2192.868928][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6634'.
[ 2193.877905][T32242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6635'.
[ 2195.209058][   T30] audit: type=1326 audit(6291402322.653:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32249 comm="syz.6.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2195.333152][   T30] audit: type=1326 audit(6291402322.727:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32249 comm="syz.6.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2195.356751][   T30] audit: type=1326 audit(6291402322.727:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32249 comm="syz.6.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2195.380405][   T30] audit: type=1326 audit(6291402322.830:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32249 comm="syz.6.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2195.403972][   T30] audit: type=1326 audit(6291402322.830:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32249 comm="syz.6.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2195.525591][T32234] lo speed is unknown, defaulting to 1000
[ 2195.548441][T32234] ip6_vti0 speed is unknown, defaulting to 1000
[ 2197.013960][T32248] lo speed is unknown, defaulting to 1000
[ 2197.090649][T32248] ip6_vti0 speed is unknown, defaulting to 1000
[ 2197.430078][T32283] pimreg: entered allmulticast mode
[ 2197.441469][T32285] pimreg: left allmulticast mode
[ 2198.140079][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6648'.
[ 2199.481720][T32302] netlink: 'syz.7.6652': attribute type 10 has an invalid length.
[ 2200.292051][T32303] bridge0: entered promiscuous mode
[ 2201.166281][T32297] bridge0: left promiscuous mode
[ 2203.402387][T32331] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6660'.
[ 2203.438924][T32331] syz_tun: entered allmulticast mode
[ 2203.672599][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6661'.
[ 2204.036388][T32334] dvmrp8: entered allmulticast mode
[ 2204.081617][T32329] syz_tun: left allmulticast mode
[ 2204.203524][T32344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6663'.
[ 2204.366078][T32347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6663'.
[ 2204.483508][   T30] audit: type=1400 audit(6291402331.356:8853): avc:  denied  { name_bind } for  pid=32350 comm="syz.0.6667" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 2208.389692][T32389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=32389 comm=syz.6.6674
[ 2208.798482][T32398] ip6t_rpfilter: unknown options
[ 2209.133136][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'.
[ 2212.467596][T32447] overlayfs: failed to clone upperpath
[ 2217.400521][T32472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6699'.
[ 2218.710860][T32502] overlayfs: failed to clone lowerpath
[ 2219.241136][T32505] overlayfs: failed to clone upperpath
[ 2220.218786][T32511] /dev/nullb0: Can't lookup blockdev
[ 2220.588315][T32510] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 2221.506956][T32525] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 2221.877046][T32525] UDF-fs: Scanning with blocksize 512 failed
[ 2221.895757][T32525] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 2221.903365][T32525] UDF-fs: Scanning with blocksize 1024 failed
[ 2221.910586][T32525] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 2221.918057][T32525] UDF-fs: Scanning with blocksize 2048 failed
[ 2221.925612][T32525] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 2221.933136][T32525] UDF-fs: Scanning with blocksize 4096 failed
[ 2222.371654][T32540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6715'.
[ 2223.083089][T32518] lo speed is unknown, defaulting to 1000
[ 2223.099142][T32518] ip6_vti0 speed is unknown, defaulting to 1000
[ 2224.852233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2224.858549][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2225.526792][   T30] audit: type=1400 audit(6291402351.066:8854): avc:  denied  { map } for  pid=32563 comm="syz.5.6721" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2225.613410][T32568] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 2225.620649][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 2225.821239][T32574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6724'.
[ 2228.228270][T32599] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2229.894566][T32621] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6739'.
[ 2232.539709][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6743'.
[ 2234.109372][T32655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6745'.
[ 2235.158803][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6750'.
[ 2236.117180][T32682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6750'.
[ 2240.402487][   T30] audit: type=1400 audit(6291402364.899:8855): avc:  denied  { mount } for  pid=32728 comm="syz.0.6766" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 2240.522346][T32736] overlayfs: failed to clone lowerpath
[ 2240.785276][   T30] audit: type=1326 audit(6291402365.114:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32730 comm="syz.7.6767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0525f8f749 code=0x0
[ 2241.059939][T32744] pimreg: entered allmulticast mode
[ 2241.731281][T32738] pimreg: left allmulticast mode
[ 2242.114993][T32746] netlink: 'syz.7.6770': attribute type 10 has an invalid length.
[ 2243.156449][T32762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6773'.
[ 2243.940224][T32767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6773'.
[ 2245.041511][   T30] audit: type=1326 audit(6291402369.326:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=309 comm="syz.6.6778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x0
[ 2245.064233][  T308] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2245.741434][   T30] audit: type=1400 audit(6291402369.953:8858): avc:  denied  { remount } for  pid=318 comm="syz.5.6781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 2247.827786][  T345] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2250.231080][  T369] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2252.273184][  T400] binder: 397:400 unknown command 0
[ 2252.278522][  T400] binder: 397:400 ioctl c0306201 200000000080 returned -22
[ 2252.326375][  T400] binder: 397:400 ioctl 4018620d 0 returned -22
[ 2252.346334][  T400] binder: 397:400 ioctl c0306201 2000000003c0 returned -14
[ 2254.150442][  T423] netlink: 'syz.0.6809': attribute type 8 has an invalid length.
[ 2254.675416][   T30] audit: type=1326 audit(6291402378.339:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2254.706487][   T30] audit: type=1326 audit(6291402378.367:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2254.813274][  T429] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2254.842175][   T30] audit: type=1326 audit(6291402378.367:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2254.889703][   T30] audit: type=1326 audit(6291402378.367:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2254.923716][   T30] audit: type=1326 audit(6291402378.367:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2254.987346][   T30] audit: type=1400 audit(6291402378.376:8864): avc:  denied  { mount } for  pid=421 comm="syz.6.6810" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 2255.012199][   T30] audit: type=1326 audit(6291402378.376:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2255.203611][   T30] audit: type=1326 audit(6291402378.376:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2255.321645][   T30] audit: type=1326 audit(6291402378.376:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2255.605518][   T30] audit: type=1326 audit(6291402378.385:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=421 comm="syz.6.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2258.598515][  T472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6821'.
[ 2258.992065][  T468] overlayfs: failed to clone upperpath
[ 2259.820863][  T486] netlink: 'syz.3.6824': attribute type 8 has an invalid length.
[ 2260.186736][  T491] netlink: 'syz.7.6827': attribute type 28 has an invalid length.
[ 2260.299313][  T492] xt_NFQUEUE: number of total queues is 0
[ 2261.720763][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 2261.720796][   T30] audit: type=1326 audit(6291402384.852:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.3.6829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2c3f8f749 code=0x0
[ 2262.881146][  T514] overlayfs: failed to clone lowerpath
[ 2265.121257][  T548] netlink: 'syz.0.6843': attribute type 7 has an invalid length.
[ 2265.129051][  T548] netlink: 'syz.0.6843': attribute type 8 has an invalid length.
[ 2266.667621][  T561] netlink: 'syz.7.6848': attribute type 3 has an invalid length.
[ 2267.192774][  T567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6849'.
[ 2268.053802][ T6058] libceph: connect (1)[c::]:6789 error -13
[ 2268.059726][ T6058] libceph: mon0 (1)[c::]:6789 connect error
[ 2268.337266][ T6058] libceph: connect (1)[c::]:6789 error -13
[ 2268.816680][ T6058] libceph: mon0 (1)[c::]:6789 connect error
[ 2269.623940][ T6058] libceph: connect (1)[c::]:6789 error -13
[ 2269.635539][ T6058] libceph: mon0 (1)[c::]:6789 connect error
[ 2271.244729][  T577] ceph: No mds server is up or the cluster is laggy
[ 2271.354729][ T6058] libceph: connect (1)[c::]:6789 error -13
[ 2271.360729][ T6058] libceph: mon0 (1)[c::]:6789 connect error
[ 2271.745297][  T618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6862'.
[ 2272.170560][T21132] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 2273.066850][   T30] audit: type=1400 audit(6291402395.550:8874): avc:  denied  { setopt } for  pid=632 comm="syz.6.6867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2276.326560][  T664] netlink: 'syz.3.6876': attribute type 10 has an invalid length.
[ 2276.335051][  T664] bond0: (slave wlan1): Opening slave failed
[ 2276.348256][  T663] delete_channel: no stack
[ 2276.363113][  T648] syz.5.6872 (648): drop_caches: 2
[ 2278.263226][  T696] ptrace attach of ""[697] was attempted by "./syz-executor exec"[696]
[ 2279.582952][  T712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6888'.
[ 2279.779859][  T718] netlink: 'syz.7.6892': attribute type 2 has an invalid length.
[ 2279.792763][  T717] netlink: 'syz.7.6892': attribute type 2 has an invalid length.
[ 2284.249477][   T30] audit: type=1400 audit(6291402406.022:8875): avc:  denied  { block_suspend } for  pid=742 comm="syz.3.6900" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2288.759229][  T794] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2290.854550][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2290.861148][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2291.455998][  T815] netlink: 'syz.6.6918': attribute type 10 has an invalid length.
[ 2291.473940][  T815] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 2291.484787][  T815] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2291.497165][  T815] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 2291.906309][  T815] lo speed is unknown, defaulting to 1000
[ 2291.917494][  T815] ip6_vti0 speed is unknown, defaulting to 1000
[ 2291.922632][   T30] audit: type=1400 audit(6291402412.761:8876): avc:  denied  { nlmsg_read } for  pid=809 comm="syz.6.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 2293.298925][  T765] Set syz1 is full, maxelem 65536 reached
[ 2294.804936][   T30] audit: type=1400 audit(6291402415.101:8877): avc:  denied  { bind } for  pid=823 comm="syz.7.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2296.644672][  T862] SELinux:  Context Ï is not valid (left unmapped).
[ 2296.914009][  T868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6932'.
[ 2298.558624][  T880] syz.7.6934: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2298.680962][  T880] CPU: 0 UID: 0 PID: 880 Comm: syz.7.6934 Not tainted syzkaller #0 PREEMPT(full) 
[ 2298.680988][  T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2298.680999][  T880] Call Trace:
[ 2298.681005][  T880]  <TASK>
[ 2298.681012][  T880]  dump_stack_lvl+0x16c/0x1f0
[ 2298.681042][  T880]  warn_alloc+0x248/0x3a0
[ 2298.681057][  T880]  ? __pfx_warn_alloc+0x10/0x10
[ 2298.681085][  T880]  ? xskq_create+0xfb/0x1d0
[ 2298.681104][  T880]  ? __vmalloc_node_noprof+0xad/0xf0
[ 2298.681140][  T880]  __vmalloc_node_range_noprof+0xfe2/0x1480
[ 2298.681200][  T880]  ? xskq_create+0xfb/0x1d0
[ 2298.681227][  T880]  ? irqentry_exit+0x1dd/0x8c0
[ 2298.681251][  T880]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 2298.681290][  T880]  ? xskq_create+0xfb/0x1d0
[ 2298.681309][  T880]  vmalloc_user_noprof+0x9e/0xe0
[ 2298.681336][  T880]  ? xskq_create+0xfb/0x1d0
[ 2298.681357][  T880]  xskq_create+0xfb/0x1d0
[ 2298.681380][  T880]  xsk_setsockopt+0x8d2/0xc00
[ 2298.681400][  T880]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2298.681428][  T880]  ? selinux_socket_setsockopt+0x6a/0x80
[ 2298.681450][  T880]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 2298.681471][  T880]  do_sock_setsockopt+0xf3/0x1d0
[ 2298.681497][  T880]  __sys_setsockopt+0x1a0/0x230
[ 2298.681529][  T880]  __x64_sys_setsockopt+0xbd/0x160
[ 2298.681547][  T880]  ? do_syscall_64+0x9a/0xf80
[ 2298.681563][  T880]  do_syscall_64+0xcd/0xf80
[ 2298.681580][  T880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2298.681591][  T880] RIP: 0033:0x7f0525f8f749
[ 2298.681602][  T880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2298.681613][  T880] RSP: 002b:00007f0526e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2298.681624][  T880] RAX: ffffffffffffffda RBX: 00007f05261e6090 RCX: 00007f0525f8f749
[ 2298.681631][  T880] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[ 2298.681638][  T880] RBP: 00007f0526013f91 R08: 0000000000000004 R09: 0000000000000000
[ 2298.681645][  T880] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[ 2298.681651][  T880] R13: 00007f05261e6128 R14: 00007f05261e6090 R15: 00007fff3c848328
[ 2298.681666][  T880]  </TASK>
[ 2298.985204][  T880] Mem-Info:
[ 2298.995980][  T880] active_anon:44132 inactive_anon:0 isolated_anon:0
[ 2298.995980][  T880]  active_file:20884 inactive_file:41965 isolated_file:0
[ 2298.995980][  T880]  unevictable:20088 dirty:478 writeback:0
[ 2298.995980][  T880]  slab_reclaimable:12429 slab_unreclaimable:112485
[ 2298.995980][  T880]  mapped:41819 shmem:33499 pagetables:2130
[ 2298.995980][  T880]  sec_pagetables:0 bounce:0
[ 2298.995980][  T880]  kernel_misc_reclaimable:0
[ 2298.995980][  T880]  free:1181078 free_pcp:29864 free_cma:0
[ 2299.194212][  T880] Node 0 active_anon:176628kB inactive_anon:0kB active_file:83536kB inactive_file:167656kB unevictable:78816kB isolated(anon):0kB isolated(file):0kB mapped:167376kB dirty:1912kB writeback:0kB shmem:136760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15488kB pagetables:8444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 2299.257922][  T880] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 2299.289428][  T880] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB
[ 2299.548224][  T880] lowmem_reserve[]: 0 2482 2484 2484 2484
[ 2299.553979][  T880] Node 0 DMA32 free:806116kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:193668kB inactive_anon:0kB active_file:83536kB inactive_file:167784kB unevictable:78816kB writepending:1912kB zspages:1128kB present:3129332kB managed:2542032kB mlocked:0kB bounce:0kB free_pcp:95456kB local_pcp:28544kB free_cma:0kB
[ 2299.649701][  T918] overlayfs: failed to clone upperpath
[ 2300.064352][  T880] lowmem_reserve[]: 0 0 1 1 1
[ 2300.160045][  T880] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2300.268090][  T880] lowmem_reserve[]: 0 0 0 0 0
[ 2300.284375][  T880] Node 1 Normal free:3898252kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10980kB local_pcp:0kB free_cma:0kB
[ 2300.445455][  T880] lowmem_reserve[]: 0 0 0 0 0
[ 2300.450212][  T880] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[ 2300.529278][  T880] Node 0 DMA32: 2*4kB (ME) 277*8kB (UME) 18*16kB (UM) 21*32kB (UME) 792*64kB (UME) 373*128kB (UME) 113*256kB (UME) 54*512kB (UME) 22*1024kB (UME) 1*2048kB (M) 152*4096kB (UM) = 805360kB
[ 2300.647418][  T880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2300.660433][   T30] audit: type=1400 audit(6291402421.334:8878): avc:  denied  { create } for  pid=932 comm="syz.6.6944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[ 2300.660482][  T880] Node 1 Normal: 185*4kB (UME) 43*8kB (UME) 47*16kB (UME) 241*32kB (UME) 77*64kB (UME) 22*128kB (UME) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3898252kB
[ 2300.828897][  T880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2300.880373][  T880] Node 0 hugepages_total=8 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB
[ 2300.913699][  T880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2300.972865][  T880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2301.038800][  T880] 121207 total pagecache pages
[ 2301.137186][  T880] 25 pages in swap cache
[ 2301.141610][  T880] Free swap  = 119856kB
[ 2301.145743][  T880] Total swap = 124996kB
[ 2301.183385][  T880] 2097051 pages RAM
[ 2301.187186][  T880] 0 pages HighMem/MovableOnly
[ 2301.708153][  T880] 429517 pages reserved
[ 2301.714544][  T880] 0 pages cma reserved
[ 2301.815698][  T960] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2301.822704][  T960] overlayfs: failed to set xattr on upper
[ 2301.828410][  T960] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2301.835498][  T960] overlayfs: ...falling back to index=off.
[ 2301.841275][  T960] overlayfs: ...falling back to uuid=null.
[ 2301.847117][  T960] overlayfs: maximum fs stacking depth exceeded
[ 2307.558580][ T1020] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6954'.
[ 2309.465013][ T1039] netlink: 'syz.3.6958': attribute type 6 has an invalid length.
[ 2311.145366][ T1054] [U] ÿ
[ 2311.996729][ T1076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6965'.
[ 2314.798984][ T1097] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2316.549686][ T1121] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2316.640127][ T1127] netlink: 'syz.0.6980': attribute type 2 has an invalid length.
[ 2317.337385][ T6058] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[ 2317.404464][ T1135] lo speed is unknown, defaulting to 1000
[ 2317.436646][ T1135] ip6_vti0 speed is unknown, defaulting to 1000
[ 2318.245238][ T6058] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2318.255451][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2318.266463][ T6058] usb 6-1: Product: syz
[ 2318.272359][ T6058] usb 6-1: Manufacturer: syz
[ 2318.280989][ T6058] usb 6-1: SerialNumber: syz
[ 2318.299114][ T6058] usb 6-1: config 0 descriptor??
[ 2318.545551][ T6058] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2322.317511][ T6058] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2322.347783][ T6058] usb 6-1: USB disconnect, device number 53
[ 2323.025161][ T1201] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6999'.
[ 2325.160431][ T1224] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2326.503540][ T1247] netlink: 'syz.0.7010': attribute type 10 has an invalid length.
[ 2326.519454][ T1247] bond0: (slave wlan1): Opening slave failed
[ 2326.935842][ T1240] lo speed is unknown, defaulting to 1000
[ 2326.965727][ T1240] ip6_vti0 speed is unknown, defaulting to 1000
[ 2327.927049][ T1270] fuse: Bad value for 'fd'
[ 2329.037015][ T1248] lo speed is unknown, defaulting to 1000
[ 2329.160127][ T1248] ip6_vti0 speed is unknown, defaulting to 1000
[ 2329.835931][ T1295] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2329.922029][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7021'.
[ 2330.350632][ T1307] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2330.374586][   T30] audit: type=1400 audit(6291402449.177:8879): avc:  denied  { write } for  pid=1304 comm="syz.5.7023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2331.162642][ T1319] (syz.5.7026,1319,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 2331.171343][ T1319] (syz.5.7026,1319,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 2332.274657][ T6058] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 2332.915725][ T6058] usb 6-1: Using ep0 maxpacket: 16
[ 2332.979521][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2332.996398][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2333.010866][ T6058] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 2333.025583][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2333.454509][ T6058] usb 6-1: config 0 descriptor??
[ 2333.753083][ T1351] 9pnet_fd: Insufficient options for proto=fd
[ 2335.033479][ T1356] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[1356]
[ 2335.119148][ T1356] batadv2: entered promiscuous mode
[ 2335.128466][ T1356] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 2335.222596][ T6058] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0
[ 2335.248269][ T6058] corsair 0003:1B1C:1B02.0016: Read invalid backlight brightness: bf.
[ 2337.335841][T27610] usb 6-1: USB disconnect, device number 54
[ 2337.658087][ T1382] pimreg: entered allmulticast mode
[ 2338.128254][ T1381] overlay: Unknown parameter '/'
[ 2338.149444][ T1387] netlink: 'syz.3.7045': attribute type 1 has an invalid length.
[ 2338.296271][ T1377] pimreg: left allmulticast mode
[ 2338.942344][   T30] audit: type=1400 audit(6291402457.169:8880): avc:  denied  { listen } for  pid=1392 comm="syz.3.7046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2340.229827][ T1414] netlink: 'syz.3.7050': attribute type 1 has an invalid length.
[ 2340.377951][ T1414] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2340.538057][ T1414] bond4: (slave vxcan1): Error -95 calling set_mac_address
[ 2340.777187][ T1423] bond4: (slave bridge4): Enslaving as an active interface with a down link
[ 2341.089738][ T1414] bond4: (slave gretap2): making interface the new active one
[ 2341.195530][ T1414] bond4: (slave gretap2): Enslaving as an active interface with an up link
[ 2341.926666][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7059'.
[ 2345.111880][ T1503] affs: No valid root block on device nullb0
[ 2346.069218][ T1513] netlink: 'syz.5.7070': attribute type 10 has an invalid length.
[ 2346.100226][ T1513] bond0: (slave 
4

): Opening slave failed
[ 2347.641355][ T1536] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2349.125284][ T1510] delete_channel: no stack
[ 2350.215247][ T1559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7082'.
[ 2353.007488][ T1604] 9pnet_fd: Insufficient options for proto=fd
[ 2353.342559][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7096'.
[ 2356.155753][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2356.162297][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2356.291168][ T1631] netlink: 2 bytes leftover after parsing attributes in process `syz.6.7100'.
[ 2356.365330][ T1633] netlink: 'syz.5.7101': attribute type 6 has an invalid length.
[ 2356.551730][ T1635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2357.074774][ T1641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2358.457657][ T1662] netlink: 'syz.7.7107': attribute type 10 has an invalid length.
[ 2358.474923][ T1662] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 2358.485942][ T1662] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 2358.498318][ T1662] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 2358.885619][ T1662] lo speed is unknown, defaulting to 1000
[ 2358.892494][ T1662] ip6_vti0 speed is unknown, defaulting to 1000
[ 2361.876920][ T1684] vlan0: entered promiscuous mode
[ 2361.888305][ T1684] bridge0: entered promiscuous mode
[ 2363.438650][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7112'.
[ 2363.955416][   T30] audit: type=1326 audit(6291402480.588:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.019903][ T1684] bridge_slave_1: left allmulticast mode
[ 2364.025524][ T1684] bridge_slave_1: left promiscuous mode
[ 2364.047356][   T30] audit: type=1326 audit(6291402480.588:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.157833][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2364.168360][   T30] audit: type=1326 audit(6291402480.588:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.214014][ T1716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7121'.
[ 2364.277010][ T1684] bridge_slave_0: left allmulticast mode
[ 2364.282823][ T1684] bridge_slave_0: left promiscuous mode
[ 2364.288998][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2364.413494][   T30] audit: type=1326 audit(6291402480.588:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.485484][   T30] audit: type=1326 audit(6291402480.588:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.564338][   T30] audit: type=1326 audit(6291402480.588:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.677569][   T30] audit: type=1326 audit(6291402480.588:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.754282][   T30] audit: type=1326 audit(6291402480.588:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.795248][   T30] audit: type=1326 audit(6291402480.588:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2364.839343][   T30] audit: type=1326 audit(6291402480.588:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.5.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadbd8f749 code=0x7ffc0000
[ 2366.645017][ T1744] syz_tun: entered allmulticast mode
[ 2366.732718][ T1747] input: syz1 as /devices/virtual/input/input82
[ 2367.470781][ T1741] syz_tun: left allmulticast mode
[ 2368.749855][ T1760] netlink: 'syz.6.7133': attribute type 2 has an invalid length.
[ 2369.417149][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7135'.
[ 2369.433165][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 2369.433177][   T30] audit: type=1326 audit(6291402485.732:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.467810][   T30] audit: type=1326 audit(6291402485.732:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.491350][   T30] audit: type=1326 audit(6291402485.732:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.515033][   T30] audit: type=1326 audit(6291402485.732:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.540882][   T30] audit: type=1326 audit(6291402485.732:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.603340][   T30] audit: type=1326 audit(6291402485.761:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2369.986867][   T30] audit: type=1326 audit(6291402485.761:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2370.085720][   T30] audit: type=1326 audit(6291402485.761:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2370.139466][   T30] audit: type=1326 audit(6291402485.920:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2370.171969][   T30] audit: type=1326 audit(6291402485.920:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0525f8f749 code=0x7ffc0000
[ 2372.309850][ T1817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7147'.
[ 2372.310486][ T1817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7147'.
[ 2372.334652][ T1812] xt_addrtype: ipv6 does not support BROADCAST matching
[ 2372.770336][ T1815] tty tty30: ldisc open failed (-12), clearing slot 29
[ 2373.106121][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7148'.
[ 2373.602493][ T1828] qnx6: unable to read the first superblock
[ 2373.611141][ T1828] qnx6: unable to read the first superblock
[ 2373.627052][ T1828] qnx6: unable to read the first superblock
[ 2374.148596][ T1836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7150'.
[ 2376.868027][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2376.868043][   T30] audit: type=1326 audit(6291402492.673:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2376.929107][   T30] audit: type=1326 audit(6291402492.673:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2376.957694][   T30] audit: type=1326 audit(6291402492.673:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2377.021630][   T30] audit: type=1326 audit(6291402492.673:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2377.052892][   T30] audit: type=1326 audit(6291402492.673:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2377.391462][   T30] audit: type=1326 audit(6291402492.673:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f672bf8df90 code=0x7ffc0000
[ 2377.458030][   T30] audit: type=1326 audit(6291402492.673:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2377.850667][ T1873] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2377.858566][ T1873] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2377.867156][ T1873] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2377.875080][ T1873] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2378.288558][T21132] Bluetooth: hci5: unexpected event for opcode 0x0402
[ 2378.598954][   T30] audit: type=1326 audit(6291402492.673:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2378.704166][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'.
[ 2378.771593][   T30] audit: type=1326 audit(6291402492.673:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2379.013104][   T30] audit: type=1326 audit(6291402492.673:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1855 comm="syz.6.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2379.018935][ T1877] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2379.147498][ T1877] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2380.569878][ T1877] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2381.026661][ T1877] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2381.976041][ T1913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'.
[ 2382.977256][ T1922] random: crng reseeded on system resumption
[ 2383.250814][ T1927] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 2384.158617][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'.
[ 2384.344297][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2384.398803][ T1942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7177'.
[ 2384.409125][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2384.697529][ T1901] mac80211_hwsim hwsim85 wlan0: left allmulticast mode
[ 2384.710500][ T1901] macsec1: left promiscuous mode
[ 2384.715500][ T1901] macsec1: left allmulticast mode
[ 2384.725822][ T1901] bridge1: left promiscuous mode
[ 2384.735718][ T1901] bridge1: left allmulticast mode
[ 2384.761892][ T1901] ip6tnl1: left promiscuous mode
[ 2384.927632][ T1901] bond1: left promiscuous mode
[ 2384.937954][ T1901] ip6gretap1: left promiscuous mode
[ 2384.945465][ T1901] macvlan0: left promiscuous mode
[ 2384.950655][ T1901] macvlan0: left allmulticast mode
[ 2385.037316][ T1877] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2385.069412][ T1877] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2385.586013][ T1950] netlink: zone id is out of range
[ 2385.591123][ T1950] netlink: zone id is out of range
[ 2385.596244][ T1950] netlink: zone id is out of range
[ 2385.601322][ T1950] netlink: zone id is out of range
[ 2385.606594][ T1950] netlink: zone id is out of range
[ 2385.611671][ T1950] netlink: zone id is out of range
[ 2385.616781][ T1950] netlink: zone id is out of range
[ 2385.621855][ T1950] netlink: zone id is out of range
[ 2385.627096][ T1950] netlink: zone id is out of range
[ 2386.081446][ T1950] netlink: zone id is out of range
[ 2386.099972][ T1950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7180'.
[ 2386.122390][T30767] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2386.140122][T30767] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2386.166735][T30767] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2386.188212][T30767] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2386.247236][ T1877] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2386.257721][ T1877] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2386.342369][ T3892] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2386.351986][ T3892] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2386.389385][ T3892] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2386.417944][ T3892] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2386.976641][ T1962] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2386.981678][ T3892] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 2387.002027][ T3892] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 2387.051631][ T3892] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 2387.068688][ T3892] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 2387.078533][ T3892] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 2387.089583][ T3892] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 2387.098058][ T3892] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 2387.106406][ T3892] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 2387.393012][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7183'.
[ 2387.403895][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7183'.
[ 2387.413310][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7183'.
[ 2387.422453][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7183'.
[ 2389.770858][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7187'.
[ 2389.794210][ T1995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7190'.
[ 2390.871934][ T2009] autofs: Bad value for 'fd'
[ 2390.886518][ T2009] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2390.893524][ T2009] overlayfs: failed to set xattr on upper
[ 2390.899598][ T2009] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2390.906485][ T2009] overlayfs: ...falling back to index=off.
[ 2390.912374][ T2009] overlayfs: ...falling back to uuid=null.
[ 2390.918255][ T2009] overlayfs: maximum fs stacking depth exceeded
[ 2396.115299][ T2022] lo speed is unknown, defaulting to 1000
[ 2396.294452][ T2022] ip6_vti0 speed is unknown, defaulting to 1000
[ 2398.407145][ T2070] sd 0:0:1:0: device reset
[ 2398.964313][ T2073] ptrace attach of "./syz-executor exec"[2075] was attempted by "./syz-executor exec"[2073]
[ 2399.363367][ T2068] team0: Device gtp1 is up. Set it down before adding it as a team port
[ 2400.636381][ T6058] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[ 2400.951607][ T6058] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2401.988148][ T2096] block device autoloading is deprecated and will be removed.
[ 2403.392109][T29693] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2405.757915][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7222'.
[ 2405.767049][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7222'.
[ 2406.192606][T21132] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 2406.473998][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7224'.
[ 2407.178179][  T977] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[ 2408.499148][  T977] usb 6-1: config 0 has an invalid interface number: 17 but max is 0
[ 2408.528881][  T977] usb 6-1: config 0 has no interface number 0
[ 2408.547986][  T977] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd
[ 2408.557253][  T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2408.565210][  T977] usb 6-1: Product: syz
[ 2408.930992][  T977] usb 6-1: Manufacturer: syz
[ 2408.935630][  T977] usb 6-1: SerialNumber: syz
[ 2409.951235][  T977] usb 6-1: config 0 descriptor??
[ 2410.229982][  T977] usb 6-1: can't set config #0, error -71
[ 2410.279583][  T977] usb 6-1: USB disconnect, device number 55
[ 2410.357385][T29693] Bluetooth: hci5: unexpected event for opcode 0x1002
[ 2410.574676][ T2185] QAT: failed to copy from user cfg_data.
[ 2410.599004][ T2185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7234'.
[ 2411.453169][ T2191] overlayfs: missing 'lowerdir'
[ 2411.534025][ T2192] overlayfs: failed to clone lowerpath
[ 2413.701689][ T2205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7238'.
[ 2414.345588][ T2210] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 2414.405138][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 2414.405151][   T30] audit: type=1400 audit(6291402527.779:8922): avc:  denied  { map } for  pid=2212 comm="syz.3.7242" path="/1635/file0" dev="tmpfs" ino=8554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2414.502838][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7240'.
[ 2415.088982][ T2221] lo speed is unknown, defaulting to 1000
[ 2415.095414][ T2221] ip6_vti0 speed is unknown, defaulting to 1000
[ 2415.690053][   T30] audit: type=1326 audit(6291402528.677:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.7.7245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0525f8f749 code=0x0
[ 2416.594723][ T2244] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7249'.
[ 2416.605243][ T2244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7249'.
[ 2416.632833][ T2244] veth0_macvtap: left promiscuous mode
[ 2416.783915][ T2249] fuse: Bad value for 'fd'
[ 2419.794343][ T2285] overlayfs: failed to clone upperpath
[ 2421.404092][ T2296] exFAT-fs (loop5): unable to read boot sector
[ 2421.411801][ T2296] exFAT-fs (loop5): failed to read boot sector
[ 2421.419193][ T2296] exFAT-fs (loop5): failed to recognize exfat type
[ 2421.457837][ T2301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7264'.
[ 2421.846753][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2422.094077][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2422.577898][ T2309] lo speed is unknown, defaulting to 1000
[ 2422.584436][ T2309] ip6_vti0 speed is unknown, defaulting to 1000
[ 2423.058341][ T2309] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7265'.
[ 2423.279630][ T2318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7267'.
[ 2424.406042][ T2344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7272'.
[ 2425.792665][ T2367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7278'.
[ 2426.018007][T14782] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2426.061485][T14782] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2429.984393][ T2413] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2430.048818][ T2415] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2431.228505][ T2437] xt_limit: Overflow, try lower: 167772/2147483648
[ 2435.114239][ T2480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7302'.
[ 2435.949769][   T30] audit: type=1400 audit(6291402547.955:8924): avc:  denied  { write } for  pid=2467 comm="syz.7.7301" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2436.264873][ T2500] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 2436.281562][ T2500] team0: Port device batadv2 added
[ 2436.447510][ T2501] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2438.116393][ T2517] overlayfs: failed to clone lowerpath
[ 2438.142626][ T2517] /dev/nullb0: Can't lookup blockdev
[ 2440.879269][ T2551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7315'.
[ 2442.387936][ T2566] siw: device registration error -23
[ 2444.433459][   T30] audit: type=1326 audit(6291402555.869:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2444.674695][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7321'.
[ 2444.683694][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7321'.
[ 2445.008598][   T30] audit: type=1326 audit(6291402555.869:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2445.036399][   T30] audit: type=1326 audit(6291402555.887:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2445.061551][   T30] audit: type=1326 audit(6291402555.887:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2445.098412][ T2594] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2446.048894][ T2597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7323'.
[ 2446.250810][   T30] audit: type=1326 audit(6291402555.887:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2446.274313][   T30] audit: type=1326 audit(6291402555.887:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f672bf8df90 code=0x7ffc0000
[ 2446.617593][   T30] audit: type=1326 audit(6291402555.887:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2446.853477][   T30] audit: type=1326 audit(6291402555.887:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2446.981542][   T30] audit: type=1326 audit(6291402556.000:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2447.212748][   T30] audit: type=1326 audit(6291402556.000:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.6.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2447.850758][ T2613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7327'.
[ 2448.106341][ T2623] netlink: 'syz.0.7329': attribute type 6 has an invalid length.
[ 2450.286528][ T2654] lo speed is unknown, defaulting to 1000
[ 2450.293762][ T2654] ip6_vti0 speed is unknown, defaulting to 1000
[ 2453.222426][  T977] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 2453.393323][  T977] usb 6-1: Using ep0 maxpacket: 16
[ 2453.407093][  T977] usb 6-1: config 252 has an invalid interface number: 15 but max is 0
[ 2453.418641][  T977] usb 6-1: config 252 has no interface number 0
[ 2453.529410][  T977] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2453.604921][  T977] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2453.617463][  T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2453.625622][  T977] usb 6-1: Product: syz
[ 2453.637177][  T977] usb 6-1: Manufacturer: syz
[ 2453.649049][  T977] usb 6-1: SerialNumber: syz
[ 2453.720316][  T977] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2454.852298][T30704] usb 6-1: Failed to submit usb control message: -110
[ 2454.859599][T30704] usb 6-1: unable to send the bmi data to the device: -110
[ 2455.047113][T30704] usb 6-1: unable to get target info from device
[ 2455.060019][T30704] usb 6-1: could not get target info (-110)
[ 2455.074597][T30704] usb 6-1: could not probe fw (-110)
[ 2455.583783][ T6422] usb 6-1: USB disconnect, device number 56
[ 2456.091008][ T2741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7350'.
[ 2459.207224][ T2786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2459.891662][ T2796] FAT-fs (nbd7): unable to read boot sector
[ 2459.905462][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7358'.
[ 2459.998252][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 2459.998265][   T30] audit: type=1400 audit(6291402576.356:8950): avc:  denied  { bind } for  pid=2787 comm="syz.7.7358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2460.634854][ T2804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7361'.
[ 2461.767215][ T2809] lo speed is unknown, defaulting to 1000
[ 2461.912010][ T2828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7365'.
[ 2462.819829][ T2809] ip6_vti0 speed is unknown, defaulting to 1000
[ 2465.014652][ T2863] 9pnet_fd: Insufficient options for proto=fd
[ 2465.286334][ T2863] overlayfs: failed to clone lowerpath
[ 2466.207122][ T2890] loop6: detected capacity change from 0 to 524287487
[ 2466.214955][ T2890] buffer_io_error: 10 callbacks suppressed
[ 2466.214973][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.228796][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.236802][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.244788][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.252738][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.263240][   T30] audit: type=1400 audit(6291402582.249:8951): avc:  denied  { append } for  pid=2886 comm="syz.7.7372" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 2466.287416][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.302031][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.310336][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.319148][ T2890] ldm_validate_partition_table(): Disk read failed.
[ 2466.325811][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.334108][ T2890] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2466.342396][ T2890] Dev loop6: unable to read RDB block 0
[ 2466.350089][ T2890]  loop6: unable to read partition table
[ 2466.356023][ T2890] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2466.407194][ T2897] /dev/nullb0: Can't lookup blockdev
[ 2468.834805][ T2930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7379'.
[ 2468.871869][ T2930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7379'.
[ 2469.232322][ T2940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7382'.
[ 2469.266436][ T2943] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7380'.
[ 2469.450270][ T2943] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7380'.
[ 2469.995224][ T2957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2470.004336][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7384'.
[ 2470.013466][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7384'.
[ 2470.164638][ T2961] 9pnet_fd: Insufficient options for proto=fd
[ 2471.098299][ T2971] overlayfs: failed to clone upperpath
[ 2471.413783][ T2980] affs: No valid root block on device nullb0
[ 2471.854669][ T2984] netlink: 'syz.5.7389': attribute type 6 has an invalid length.
[ 2473.932535][ T2951] lo speed is unknown, defaulting to 1000
[ 2473.939696][ T2951] ip6_vti0 speed is unknown, defaulting to 1000
[ 2476.253484][ T3023] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7398'.
[ 2477.169503][ T3035] sp0: Synchronizing with TNC
[ 2478.059792][ T3046] sp0: Found TNC
[ 2479.945901][ T3034] [U] è``è
[ 2480.354746][ T3066] team0: Device gtp1 is up. Set it down before adding it as a team port
[ 2480.553573][ T3058] overlayfs: missing 'lowerdir'
[ 2481.152348][ T3072] bridge3: entered promiscuous mode
[ 2481.157950][ T3072] bridge3: entered allmulticast mode
[ 2481.439608][ T3074] tmpfs: Bad value for 'mpol'
[ 2482.625411][ T3081] netlink: 'syz.5.7410': attribute type 10 has an invalid length.
[ 2482.683843][ T3082] netlink: 'syz.5.7410': attribute type 10 has an invalid length.
[ 2482.693210][ T3082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7410'.
[ 2482.717227][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2482.970712][ T3082] batadv0: entered promiscuous mode
[ 2482.979569][ T3082] batadv0: entered allmulticast mode
[ 2483.006742][ T3082] net_ratelimit: 11 callbacks suppressed
[ 2483.006757][ T3082] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 2483.117199][ T3090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7412'.
[ 2484.084562][ T3100] ceph: No mds server is up or the cluster is laggy
[ 2484.092563][ T6422] libceph: connect (1)[c::]:6789 error -13
[ 2484.217395][ T6422] libceph: mon0 (1)[c::]:6789 connect error
[ 2487.864241][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2487.876156][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2488.997513][ T3149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7423'.
[ 2489.008907][ T3149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7423'.
[ 2489.046489][   T30] audit: type=1326 audit(6291402603.614:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.3.7423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2c3f8f749 code=0x0
[ 2491.215171][ T3160] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 2491.549929][ T3160] bond2 (unregistering): Released all slaves
[ 2491.686726][ T3175] netlink: 'syz.0.7429': attribute type 6 has an invalid length.
[ 2491.697298][  T977] libceph: connect (1)[c::]:6789 error -13
[ 2491.712148][  T977] libceph: mon0 (1)[c::]:6789 connect error
[ 2492.352723][  T977] libceph: connect (1)[c::]:6789 error -13
[ 2492.373476][  T977] libceph: mon0 (1)[c::]:6789 connect error
[ 2492.655143][ T3172] ceph: No mds server is up or the cluster is laggy
[ 2492.809685][ T3195] lo: entered allmulticast mode
[ 2492.815599][ T3195] tunl0: entered allmulticast mode
[ 2492.821693][ T3195] gre0: entered allmulticast mode
[ 2492.827374][ T3195] gretap0: entered allmulticast mode
[ 2492.833689][ T3195] erspan0: entered allmulticast mode
[ 2492.839594][ T3195] ip_vti0: entered allmulticast mode
[ 2492.845734][ T3195] ip6_vti0: entered allmulticast mode
[ 2492.851884][ T3195] sit0: entered allmulticast mode
[ 2492.857712][ T3195] ip6tnl0: entered allmulticast mode
[ 2492.864019][ T3195] ip6gre0: entered allmulticast mode
[ 2492.870006][ T3195] syz_tun: entered allmulticast mode
[ 2492.876140][ T3195] ip6gretap0: entered allmulticast mode
[ 2492.882381][ T3195] bond0: entered allmulticast mode
[ 2492.888287][ T3195] team0: entered allmulticast mode
[ 2492.893456][ T3195] batadv1: entered allmulticast mode
[ 2492.899256][ T3195] batadv2: entered allmulticast mode
[ 2492.905488][ T3195] dummy0: entered allmulticast mode
[ 2492.911680][ T3195] nlmon0: entered allmulticast mode
[ 2492.917811][ T3195] caif0: entered allmulticast mode
[ 2492.923767][ T3195] batadv0: entered allmulticast mode
[ 2492.930204][ T3195] veth0: entered allmulticast mode
[ 2492.936202][ T3195] veth1: entered allmulticast mode
[ 2492.942173][ T3195] wg0: entered allmulticast mode
[ 2492.948014][ T3195] wg1: entered allmulticast mode
[ 2492.953870][ T3195] wg2: entered allmulticast mode
[ 2492.958990][ T3195] veth0_to_bridge: entered allmulticast mode
[ 2492.965398][ T3195] 
: entered allmulticast mode
[ 2492.970304][ T3195] veth1_to_bridge: entered allmulticast mode
[ 2492.976400][ T3195] bridge_slave_1: entered allmulticast mode
[ 2492.983196][ T3195] veth0_to_bond: entered allmulticast mode
[ 2492.989773][ T3195] bond_slave_0: entered allmulticast mode
[ 2493.000767][ T3195] veth0_to_team: entered allmulticast mode
[ 2493.007564][ T3195] team_slave_0: entered allmulticast mode
[ 2493.014193][ T3195] veth1_to_team: entered allmulticast mode
[ 2493.020663][ T3195] team_slave_1: entered allmulticast mode
[ 2493.030500][ T3195] veth0_to_batadv: entered allmulticast mode
[ 2493.037133][ T3195] batadv_slave_0: entered allmulticast mode
[ 2493.043764][ T3195] veth1_to_batadv: entered allmulticast mode
[ 2493.050218][ T3195] batadv_slave_1: entered allmulticast mode
[ 2493.060992][ T3195] xfrm0: entered allmulticast mode
[ 2493.066993][ T3195] veth0_to_hsr: entered allmulticast mode
[ 2493.073128][ T3195] hsr_slave_0: entered allmulticast mode
[ 2493.080026][ T3195] veth1_to_hsr: entered allmulticast mode
[ 2493.087016][ T3195] hsr_slave_1: entered allmulticast mode
[ 2493.095985][ T3195] hsr0: entered allmulticast mode
[ 2493.101707][ T3195] veth1_virt_wifi: entered allmulticast mode
[ 2493.108002][ T3195] veth0_virt_wifi: entered allmulticast mode
[ 2493.115758][ T3195] veth1_vlan: entered allmulticast mode
[ 2493.125574][ T3195] veth0_vlan: entered allmulticast mode
[ 2493.132152][ T3195] vlan0: entered allmulticast mode
[ 2493.137652][ T3195] vlan1: entered allmulticast mode
[ 2493.143989][ T3195] macvlan0: entered allmulticast mode
[ 2493.149720][ T3195] macvlan1: entered allmulticast mode
[ 2493.159429][ T3195] ipvlan0: entered allmulticast mode
[ 2493.167091][ T3195] ipvlan1: entered allmulticast mode
[ 2493.172618][ T3195] veth1_macvtap: entered allmulticast mode
[ 2493.179195][ T3195] veth0_macvtap: entered allmulticast mode
[ 2493.188212][ T3195] macvtap0: entered allmulticast mode
[ 2493.194375][ T3195] macsec0: entered allmulticast mode
[ 2493.199884][ T3195] geneve0: entered allmulticast mode
[ 2493.206367][ T3195] geneve1: entered allmulticast mode
[ 2493.211838][ T3195] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[ 2493.222999][ T3195] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[ 2493.230449][ T3195] bridge1: entered allmulticast mode
[ 2493.236980][ T3195] bridge0: entered allmulticast mode
[ 2493.242589][ T3195] netdevsim netdevsim0 eth0: entered allmulticast mode
[ 2493.253459][ T3195] netdevsim netdevsim0 eth1: entered allmulticast mode
[ 2493.262004][ T3195] netdevsim netdevsim0 eth2: entered allmulticast mode
[ 2493.269197][ T3195] netdevsim netdevsim0 eth3: entered allmulticast mode
[ 2493.278523][ T3195] mac80211_hwsim hwsim5 žB÷hz¡áJr0: entered allmulticast mode
[ 2493.289995][ T3195] bond1: entered allmulticast mode
[ 2493.295982][ T3195] gretap1: entered allmulticast mode
[ 2493.302543][ T3195] erspan0.1: entered allmulticast mode
[ 2493.308161][ T3195] bridge2: entered allmulticast mode
[ 2493.317879][ T3195] gtp0: entered allmulticast mode
[ 2493.323518][ T3195] bond2: entered allmulticast mode
[ 2493.328881][ T3195] @: entered allmulticast mode
[ 2493.333832][ T3195] bond3: entered allmulticast mode
[ 2493.338932][ T3195] vcan0: entered allmulticast mode
[ 2493.344556][ T3195] mac80211_hwsim hwsim115 wlan2: entered allmulticast mode
[ 2493.351894][ T3195] ÿÿÿÿ¬»: entered allmulticast mode
[ 2493.357496][ T3195] mac80211_hwsim hwsim118 wlan3: entered allmulticast mode
[ 2493.364918][ T3195] mac80211_hwsim hwsim121 wlan4: entered allmulticast mode
[ 2493.372297][ T3195] bond4: entered allmulticast mode
[ 2493.377913][ T3195] gretap2: entered allmulticast mode
[ 2493.384236][ T3195] ip6tnl1: entered allmulticast mode
[ 2493.390154][ T3195] gre1: entered allmulticast mode
[ 2493.686399][ T3195] : entered allmulticast mode
[ 2493.751346][ T3195] bridge3: entered allmulticast mode
[ 2493.879687][ T3195] mac80211_hwsim hwsim132 wlan5: entered allmulticast mode
[ 2493.959367][ T3195] ip6gretap1: entered allmulticast mode
[ 2494.069613][ T3195] macvtap1: entered allmulticast mode
[ 2494.075928][ T3195] ip6erspan0: entered allmulticast mode
[ 2494.093125][ T3195] bridge4: entered allmulticast mode
[ 2494.103194][ T7057] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2494.111635][ T7057] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2494.153048][ T7057] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2494.196768][ T7057] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2494.474193][ T3211] siw: device registration error -23
[ 2494.901990][ T3212] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2499.987958][ T3256] bridge0: entered promiscuous mode
[ 2499.993195][ T3256] bridge0: entered allmulticast mode
[ 2501.040437][ T3260] xt_TCPMSS: Only works on TCP SYN packets
[ 2501.715593][ T3279] netlink: 'syz.7.7451': attribute type 6 has an invalid length.
[ 2503.074243][ T3301] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7455'.
[ 2503.269657][ T3301] netlink: 'syz.3.7455': attribute type 4 has an invalid length.
[ 2503.308851][  T977] lo speed is unknown, defaulting to 1000
[ 2503.327747][  T977] syz0: Port: 1 Link DOWN
[ 2504.931404][ T3320] nvme_fabrics: missing parameter 'transport=%s'
[ 2504.937999][ T3320] nvme_fabrics: missing parameter 'nqn=%s'
[ 2505.758247][ T3332] netlink: 'syz.7.7463': attribute type 11 has an invalid length.
[ 2506.376476][ T3330] netlink: 'syz.3.7461': attribute type 10 has an invalid length.
[ 2506.384398][ T3330] batadv0: left promiscuous mode
[ 2506.389418][ T3330] batadv0: left allmulticast mode
[ 2506.397609][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2506.411805][ T3330] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 2506.439007][ T3335] vimc link validate: Sensor B:src:16x16 (0x47524247, 1, 0, 2, 1) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2507.110539][ T3344] netlink: 'syz.7.7467': attribute type 10 has an invalid length.
[ 2507.119234][ T3344] veth1_macvtap: left promiscuous mode
[ 2507.128286][ T3344] team0: Device veth1_macvtap failed to register rx_handler
[ 2508.676360][ T3356] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2508.686674][ T3340] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1
[ 2508.728227][ T3359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7470'.
[ 2510.192820][   T30] audit: type=1400 audit(6291402622.696:8953): avc:  denied  { setopt } for  pid=3363 comm="syz.6.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2510.634440][   T30] audit: type=1326 audit(6291402623.809:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.6.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2510.724589][   T30] audit: type=1326 audit(6291402623.809:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.6.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672bf8f749 code=0x7ffc0000
[ 2510.838549][ T3386] netlink: zone id is out of range
[ 2510.843743][ T3386] netlink: zone id is out of range
[ 2510.848946][ T3386] netlink: zone id is out of range
[ 2510.854309][ T3386] netlink: get zone limit has 4 unknown bytes
[ 2510.891397][ T3386] ------------[ cut here ]------------
[ 2510.897184][ T3386] kernfs: can not remove 'bind', no directory
[ 2510.903270][ T3386] WARNING: fs/kernfs/dir.c:1706 at 0x0, CPU#0: syz.7.7477/3386
[ 2510.910804][ T3386] Modules linked in:
[ 2510.914886][ T3386] CPU: 0 UID: 0 PID: 3386 Comm: syz.7.7477 Not tainted syzkaller #0 PREEMPT(full) 
[ 2510.924151][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2510.934213][ T3386] RIP: 0010:kernfs_remove_by_name_ns+0xf8/0x100
[ 2510.940438][ T3386] Code: fd 08 e8 8b ed 55 ff 48 89 df 31 db e8 a1 a2 ff ff 48 89 ef e8 99 61 30 ff eb b1 e8 72 ed 55 ff 48 8d 3d 1b b6 23 0e 4c 89 ee <67> 48 0f b9 3a eb ba 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2510.960042][ T3386] RSP: 0018:ffffc9000466f9b8 EFLAGS: 00010283
[ 2510.966101][ T3386] RAX: 000000000000094f RBX: 0000000000000000 RCX: ffffc9000f28e000
[ 2510.974059][ T3386] RDX: 0000000000080000 RSI: ffffffff8c2073a0 RDI: ffffffff908bcd50
[ 2510.982005][ T3386] RBP: ffffffff8f29a8a0 R08: 0000000000000001 R09: 0000000000000000
[ 2510.989958][ T3386] R10: 0000000000000000 R11: 00000000c7cb7485 R12: 0000000000000000
[ 2510.997913][ T3386] R13: ffffffff8c2073a0 R14: 0000000000000002 R15: ffff888029c15920
[ 2511.005871][ T3386] FS:  00007f0526e886c0(0000) GS:ffff88812497e000(0000) knlGS:0000000000000000
[ 2511.014774][ T3386] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2511.021344][ T3386] CR2: 0000001b34d12ff8 CR3: 000000008513e000 CR4: 00000000003526f0
[ 2511.029343][ T3386] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 2511.037308][ T3386] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2511.045255][ T3386] Call Trace:
[ 2511.048523][ T3386]  <TASK>
[ 2511.051434][ T3386]  driver_remove_file+0x4a/0x60
[ 2511.056262][ T3386]  bus_remove_driver+0x224/0x2c0
[ 2511.061191][ T3386]  driver_unregister+0x76/0xb0
[ 2511.065937][ T3386]  comedi_device_detach_locked+0x12f/0xa50
[ 2511.071753][ T3386]  do_devconfig_ioctl+0x555/0x710
[ 2511.076759][ T3386]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 2511.082306][ T3386]  ? __pfx___schedule+0x10/0x10
[ 2511.087139][ T3386]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 2511.092614][ T3386]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2511.098398][ T3386]  ? do_vfs_ioctl+0xca/0x14f0
[ 2511.103061][ T3386]  ? do_vfs_ioctl+0x6ab/0x14f0
[ 2511.107803][ T3386]  ? do_vfs_ioctl+0x128/0x14f0
[ 2511.112550][ T3386]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2511.117551][ T3386]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 2511.124457][ T3386]  ? hook_file_ioctl_common+0x144/0x410
[ 2511.129983][ T3386]  ? selinux_file_ioctl+0x180/0x270
[ 2511.135172][ T3386]  ? selinux_file_ioctl+0xb4/0x270
[ 2511.140260][ T3386]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2511.146052][ T3386]  __x64_sys_ioctl+0x18e/0x210
[ 2511.150792][ T3386]  do_syscall_64+0xcd/0xf80
[ 2511.155283][ T3386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2511.161147][ T3386] RIP: 0033:0x7f0525f8f749
[ 2511.165546][ T3386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2511.185140][ T3386] RSP: 002b:00007f0526e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2511.193542][ T3386] RAX: ffffffffffffffda RBX: 00007f05261e6090 RCX: 00007f0525f8f749
[ 2511.201499][ T3386] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 2511.209485][ T3386] RBP: 00007f0526013f91 R08: 0000000000000000 R09: 0000000000000000
[ 2511.217426][ T3386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2511.225379][ T3386] R13: 00007f05261e6128 R14: 00007f05261e6090 R15: 00007fff3c848328
[ 2511.233341][ T3386]  </TASK>
[ 2511.236334][ T3386] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2511.243584][ T3386] CPU: 0 UID: 0 PID: 3386 Comm: syz.7.7477 Not tainted syzkaller #0 PREEMPT(full) 
[ 2511.252842][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2511.262868][ T3386] Call Trace:
[ 2511.266121][ T3386]  <TASK>
[ 2511.269024][ T3386]  dump_stack_lvl+0x3d/0x1f0
[ 2511.273594][ T3386]  vpanic+0x640/0x6f0
[ 2511.277553][ T3386]  panic+0xca/0xd0
[ 2511.281245][ T3386]  ? __pfx_panic+0x10/0x10
[ 2511.285641][ T3386]  check_panic_on_warn+0xab/0xb0
[ 2511.290551][ T3386]  __warn+0x108/0x3c0
[ 2511.294509][ T3386]  __report_bug+0x2a0/0x520
[ 2511.298987][ T3386]  ? __pfx___report_bug+0x10/0x10
[ 2511.303982][ T3386]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2511.309163][ T3386]  ? kernfs_remove_by_name_ns+0xf8/0x100
[ 2511.314771][ T3386]  report_bug_entry+0xb2/0x220
[ 2511.319509][ T3386]  ? kernfs_remove_by_name_ns+0xf8/0x100
[ 2511.325115][ T3386]  handle_bug+0x18a/0x260
[ 2511.329414][ T3386]  exc_invalid_op+0x17/0x50
[ 2511.333886][ T3386]  asm_exc_invalid_op+0x1a/0x20
[ 2511.338705][ T3386] RIP: 0010:kernfs_remove_by_name_ns+0xf8/0x100
[ 2511.344920][ T3386] Code: fd 08 e8 8b ed 55 ff 48 89 df 31 db e8 a1 a2 ff ff 48 89 ef e8 99 61 30 ff eb b1 e8 72 ed 55 ff 48 8d 3d 1b b6 23 0e 4c 89 ee <67> 48 0f b9 3a eb ba 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2511.364498][ T3386] RSP: 0018:ffffc9000466f9b8 EFLAGS: 00010283
[ 2511.370538][ T3386] RAX: 000000000000094f RBX: 0000000000000000 RCX: ffffc9000f28e000
[ 2511.378479][ T3386] RDX: 0000000000080000 RSI: ffffffff8c2073a0 RDI: ffffffff908bcd50
[ 2511.386425][ T3386] RBP: ffffffff8f29a8a0 R08: 0000000000000001 R09: 0000000000000000
[ 2511.394369][ T3386] R10: 0000000000000000 R11: 00000000c7cb7485 R12: 0000000000000000
[ 2511.402313][ T3386] R13: ffffffff8c2073a0 R14: 0000000000000002 R15: ffff888029c15920
[ 2511.410265][ T3386]  ? kernfs_remove_by_name_ns+0xee/0x100
[ 2511.415871][ T3386]  driver_remove_file+0x4a/0x60
[ 2511.420695][ T3386]  bus_remove_driver+0x224/0x2c0
[ 2511.425607][ T3386]  driver_unregister+0x76/0xb0
[ 2511.430349][ T3386]  comedi_device_detach_locked+0x12f/0xa50
[ 2511.436141][ T3386]  do_devconfig_ioctl+0x555/0x710
[ 2511.441140][ T3386]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 2511.446665][ T3386]  ? __pfx___schedule+0x10/0x10
[ 2511.451493][ T3386]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 2511.456931][ T3386]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2511.462716][ T3386]  ? do_vfs_ioctl+0xca/0x14f0
[ 2511.467375][ T3386]  ? do_vfs_ioctl+0x6ab/0x14f0
[ 2511.472132][ T3386]  ? do_vfs_ioctl+0x128/0x14f0
[ 2511.476903][ T3386]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2511.481922][ T3386]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 2511.488767][ T3386]  ? hook_file_ioctl_common+0x144/0x410
[ 2511.494314][ T3386]  ? selinux_file_ioctl+0x180/0x270
[ 2511.499494][ T3386]  ? selinux_file_ioctl+0xb4/0x270
[ 2511.504593][ T3386]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 2511.510381][ T3386]  __x64_sys_ioctl+0x18e/0x210
[ 2511.515126][ T3386]  do_syscall_64+0xcd/0xf80
[ 2511.519623][ T3386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2511.525494][ T3386] RIP: 0033:0x7f0525f8f749
[ 2511.529887][ T3386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2511.549470][ T3386] RSP: 002b:00007f0526e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2511.557869][ T3386] RAX: ffffffffffffffda RBX: 00007f05261e6090 RCX: 00007f0525f8f749
[ 2511.565819][ T3386] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 2511.573768][ T3386] RBP: 00007f0526013f91 R08: 0000000000000000 R09: 0000000000000000
[ 2511.581712][ T3386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2511.589654][ T3386] R13: 00007f05261e6128 R14: 00007f05261e6090 R15: 00007fff3c848328
[ 2511.597610][ T3386]  </TASK>
[ 2511.600864][ T3386] Kernel Offset: disabled
[ 2511.605163][ T3386] Rebooting in 86400 seconds..