last executing test programs:

20m16.326466223s ago: executing program 32 (id=256):
r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r2 = fanotify_init(0x81, 0x0)
fanotify_mark(r2, 0x105, 0x2a, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x90e7d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r5, 0x0, 0x14)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x890b, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setpriority(0x2, 0x0, 0x3)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}})
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16)

18m39.605889431s ago: executing program 33 (id=376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
r3 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb2<S\xd8\x11\x8b\x9a0\xea1\xde_\xcfW\xfa', 0x3)
fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfe49, 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e99c27f53cd", 0x8}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000600)=0xdfa, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0xe)

15m51.181367793s ago: executing program 5 (id=590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x4, 0x0, @void}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000340)=[{0x0}], 0x1)
r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x3dcc, 0x40, 0x0, 0xf7, 0x0, r4})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1)
listen(r2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
write(r7, 0x0, 0x0)

15m46.793788324s ago: executing program 5 (id=595):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4000800, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001)
io_setup(0x6, &(0x7f0000001380)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)
ftruncate(r6, 0x0)

15m43.524113448s ago: executing program 5 (id=601):
symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00')
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0)
gettid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r4 = syz_open_dev$video(0x0, 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)

15m40.11282957s ago: executing program 5 (id=606):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000000))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r2, r2, 0x2e, 0x0, 0x0, @void, @value=r2}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
chdir(0x0)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18)

15m36.694231299s ago: executing program 5 (id=621):
r0 = syz_socket_connect_nvme_tcp()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

15m34.122921174s ago: executing program 5 (id=615):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94)
r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000dc0)='./file1\x00')

15m31.794077259s ago: executing program 6 (id=618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
mkdir(0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
pipe2$9p(&(0x7f0000000100), 0x80000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

15m27.806739807s ago: executing program 6 (id=623):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='GPL\x00'}, 0x94)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdf)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
close(0x3)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r6, 0x80)
accept$netrom(r6, 0x0, 0x0)
close(0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0)

15m23.345879735s ago: executing program 6 (id=628):
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', <r6=>0x0})
r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x1fffffff, 0x0, 0x1000010, 0x20000], [0x0, 0x40006, 0xfffffffc], [0x0, 0x10000000100002]})
sendto$packet(r5, &(0x7f0000000180)="0b031404e0ff640f020047540ff6a13bb1000e04", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @multicast})

15m17.849377079s ago: executing program 34 (id=615):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94)
r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000dc0)='./file1\x00')

15m5.580514037s ago: executing program 6 (id=652):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0)
r2 = fcntl$getown(r0, 0x9)
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000000c0)={[0x9]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
stat(0x0, &(0x7f0000000300))
r3 = getpid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x0, 0x1, 0x0, 0x1, 0x8009}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r4, 0x8b32, &(0x7f0000000040))
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x30, 0x1, 0xade}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)

15m0.505324013s ago: executing program 6 (id=645):
socket$nl_route(0x10, 0x3, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0xfffffffffffffed8)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000002]}})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e)

14m56.881962949s ago: executing program 6 (id=655):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$clear(0x7, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000002200), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9df6c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802"], 0x0, 0x4}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0)

14m40.571697053s ago: executing program 35 (id=655):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$clear(0x7, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000002200), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9df6c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802"], 0x0, 0x4}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0)

13m4.220214449s ago: executing program 8 (id=801):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9})
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6})

13m1.121694572s ago: executing program 8 (id=805):
syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100))
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x50}}, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0)
sendmmsg(r8, &(0x7f0000005c00), 0x56, 0x4040000)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000100), 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')

12m58.766026082s ago: executing program 8 (id=808):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000010000000000000000001017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_destroy(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000080000660000006000001c9500001600000000a500000000000000f8"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6}, 0xc)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10)

12m54.563825923s ago: executing program 8 (id=813):
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18"], 0x18, 0x4}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/66, 0x42}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

12m41.901872637s ago: executing program 8 (id=829):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = fanotify_init(0xf00, 0x40000)
r4 = io_uring_setup(0xab1, 0x0)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000040), 0x1)
readv(r3, &(0x7f0000000940)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1)
fanotify_mark(r3, 0x105, 0x4000997d, r2, 0x0)
mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
connect$inet6(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="41d8edff000000001009000084000000050100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r5}, 0x38)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700)
socket$rds(0x15, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_ipv6host(r7, &(0x7f0000000040)=@l1={{0x3a2a6f1a, 0x3a, 0x9, 0x3a, 0x98, 0x3a, 0xd, 0x3a, 0x8000000000000001, 0x3a, 0x55, 0x3a, 0x1, 0x3a, 0x8}, 0x20, 'lK\xac'}, 0x9c)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)

12m39.028323387s ago: executing program 8 (id=833):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9})
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6})

12m23.814805049s ago: executing program 36 (id=833):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9})
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6})

8m57.75000351s ago: executing program 7 (id=1138):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25010000001400020077673100000000000000000000000000060006004e210000a80108809c0100801400040002004e20e00000020000000000000000f400098028000080060001000a00000014000200fe8000000000000000000000000000aa050003000300000040000080060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200ac14143505000300010000000400008028000080060001000a0000001400020000000000000000000000000000000001050003000300000028000080060001000a00000014000200fe800000000000000000000000000018050003000100000034000080060001000200000008000200000000000500030000000000060001000200000008000200ffffffff050003000100000024000200cb34a705eb260cac33665ea60219bd3ddd18816074c501038ca8a9ee8efb50e808000a0001000000080003000200000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e240a010100000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392204000080040000801400dec5dc177a32d643b559b12bac090200776731000000000000000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r4, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f00000003c0)={0x18})
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x5, 0x141002)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x7f)

8m55.444620307s ago: executing program 7 (id=1139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syslog(0x2, &(0x7f0000000640), 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x10c, r5, 0x1, 0x0, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf, @local, 0x7f}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}, 0x10001}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

8m52.691377191s ago: executing program 7 (id=1143):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r1, 0x2f126000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write(r2, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000000))
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000007c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
recvmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002)

8m50.377042078s ago: executing program 7 (id=1145):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
creat(0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc490", 0xac}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db", 0x4a}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x14c}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
shutdown(r5, 0x1)

8m47.356273918s ago: executing program 7 (id=1155):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket(0x1f, 0x1, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x44000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9065, @loopback, 0x7fffffff}, 0x1c)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
shutdown(r1, 0x1)

8m42.71360449s ago: executing program 7 (id=1150):
r0 = syz_socket_connect_nvme_tcp()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}]})
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

8m27.210741016s ago: executing program 37 (id=1150):
r0 = syz_socket_connect_nvme_tcp()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}]})
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

8m12.713882016s ago: executing program 9 (id=1187):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r2}, 0x18)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000020104000000000000005bbedd817335a12e696a6e2f18eddd"], 0x14}}, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r7 = dup(0xffffffffffffffff)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000009, 0x11, r0, 0x35940000)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

8m10.799387004s ago: executing program 9 (id=1188):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[], 0xfffffe2b}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r8 = dup(r6)
write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

8m5.426414164s ago: executing program 9 (id=1194):
socket$inet(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
flock(0xffffffffffffffff, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38)
r5 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffebe, 0x12040, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x7e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0), 0xc)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r6], 0x40c}}, 0x0)

8m2.465362261s ago: executing program 9 (id=1200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fadvise64(r1, 0x5851, 0x0, 0x2)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r3 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2)
r6 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x7278, 0x80, 0x1, 0x385}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_enter(r6, 0x26c8, 0x0, 0x1, 0x0, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040)
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)

7m59.725421851s ago: executing program 9 (id=1204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x53, 0x0, 0x1e00, 0x21}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x2})
pipe2$9p(&(0x7f0000000080), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)

7m55.378108788s ago: executing program 9 (id=1211):
r0 = syz_socket_connect_nvme_tcp()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}]})
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

7m40.056692139s ago: executing program 38 (id=1211):
r0 = syz_socket_connect_nvme_tcp()
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}]})
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

4.457782796s ago: executing program 2 (id=2694):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000040)=0x2, 0xf6)

4.248912115s ago: executing program 2 (id=2697):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)

3.873540365s ago: executing program 2 (id=2701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)

3.787600614s ago: executing program 2 (id=2702):
socket$inet(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flock(0xffffffffffffffff, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38)
r5 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffebe, 0x12040, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x7e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0), 0xc)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c040000100001040000000000000000004800", @ANYRES32=r6, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r6], 0x40c}}, 0x0)

2.583566644s ago: executing program 2 (id=2707):
socket$rds(0x15, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0)

1.93783109s ago: executing program 2 (id=2710):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x9b, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0xb15}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x3, 0xfc}}}}}]}}]}}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00')

1.915680898s ago: executing program 0 (id=2711):
unshare(0x2040400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)

1.878644649s ago: executing program 3 (id=2713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x88000001, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}]}]}, 0x38}}, 0x0)

1.71411573s ago: executing program 0 (id=2715):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x9}}, 0x14)

1.708513017s ago: executing program 3 (id=2716):
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xf7fffbc5, 0x0, [{0x6d, 0x4, 0x9, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x1}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x4, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x0, 0x4, 0x0, '\x00', 0xff}, {0x3, 0x86, 0x10, '\x00', 0xe9}, {0x5, 0x2, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0xf2, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x49, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000007100004000"])

1.677064927s ago: executing program 4 (id=2717):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000)

1.622690679s ago: executing program 0 (id=2718):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x2}}}}, 0x11)

1.545704496s ago: executing program 4 (id=2719):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

1.431069833s ago: executing program 3 (id=2720):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

1.430227388s ago: executing program 0 (id=2721):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="ab", 0x1}], 0x1, 0x0, 0x0, 0x2804c041}, 0x4000891)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xfa, 0x3, 0xfd, 0x3e, 0x8, 0x9, 0x9, 0xf9, 0xc7, 0x6, 0xba, 0x4, 0x3, 0x2}, 0xe)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0xba, 0x4)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40020101)

1.392998036s ago: executing program 4 (id=2722):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0x40103e05, 0x0)

1.298560959s ago: executing program 4 (id=2723):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x24000059)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008})

1.258105831s ago: executing program 1 (id=2724):
r0 = syz_socket_connect_nvme_tcp()
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4000000", @ANYBLOB="10002bbd7000fcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900070000003000000008000500020000001400040076657468305f746f5f626f6e6400000014000400776c616e310000000000000000000000200017800400020004000600040004000400030004000100040005000400040005005300000000000a00180003030303030300000400cc000a00e80008021100000000001800178004000300040004000400020004000100200002001c00e700442a24ae5a4a4ab0de9a1d99e0f3624669e0c58e139dc2c41c00e70000024cd2859cf3763671c26a56bdf9c00b1e798d415b2cff0800050003"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x8, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc1916, 0x5f, 0x10009, 0x9, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0xcb, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x2, 0x3, 0x3, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0xfffffff8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x6, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xfff, 0x800, 0x100, 0x2c2, 0x6c6, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x10312, 0x78, 0xea4, 0x80000, 0x84, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0xfa7, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x4, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368d, 0x42, 0x2], [0x404, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x0, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x3, 0x6d01, 0x25, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x9, 0x10001, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x5f], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0xfe, 0x10000, 0x6, 0x7ffe, 0x8, 0x3, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x806, 0x2, 0x80000003, 0x5, 0x8, 0xc4, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x4, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x400002, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}]})
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)

1.254466456s ago: executing program 4 (id=2725):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80)

1.146075529s ago: executing program 1 (id=2726):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x50}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x3}, 0x2)

1.121545515s ago: executing program 1 (id=2727):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4100, 0x10020}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x50}}, 0x0)

565.52274ms ago: executing program 1 (id=2728):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c)

479.25306ms ago: executing program 0 (id=2729):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4)

478.490286ms ago: executing program 3 (id=2730):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x0, 0x1}, 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000002680)="1e", 0x1}], 0x1)
close(0x4)

301.625721ms ago: executing program 1 (id=2731):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

301.04306ms ago: executing program 3 (id=2732):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xe)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0)

296.363577ms ago: executing program 0 (id=2733):
syz_open_dev$tty1(0xc, 0x4, 0x2)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a57802", 0x15, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401fd6e000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0)

115.672629ms ago: executing program 4 (id=2734):
syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

102.71249ms ago: executing program 3 (id=2735):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r0, 0x0, r3, 0x0, 0x8, 0x0)

0s ago: executing program 1 (id=2736):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000440)={{0x6, 0x1, 0x7, 0x3, '\x00', 0x5}, 0x0, [0x80000007, 0xc5ce, 0x1, 0xe9, 0x80000001, 0x5, 0x2, 0x7, 0x9, 0x100, 0x800, 0x1c00000, 0x7, 0x1, 0x1d9c, 0xb, 0x7fffffff, 0x1, 0x800007, 0x4, 0x7, 0x1, 0x1, 0xfff, 0x9, 0xfd, 0x9, 0x9dd, 0x3, 0x0, 0x2, 0x8, 0xfffff800, 0x6, 0x7, 0xe618, 0x7000, 0x3, 0x4, 0x0, 0x0, 0x901, 0xb6, 0x2, 0x200, 0xd3, 0x7fffffff, 0x0, 0x200, 0xf8, 0x1, 0x28, 0xffff, 0x800, 0x7, 0x970, 0x5, 0xf, 0x2, 0x1, 0x7, 0x1, 0x8, 0x9, 0xab42, 0x6, 0xffffffff, 0x5, 0x9, 0xfffffffa, 0x6, 0x493, 0x6, 0x9, 0x5, 0x5, 0xe74, 0x4, 0x800, 0x8001, 0xbc, 0x3, 0x22a, 0xb75a3aa2, 0x7, 0x80000000, 0x646, 0xc, 0x7fffffff, 0x4, 0x0, 0x7, 0x8000, 0x100000, 0x7, 0xf00, 0x4, 0x3, 0xd4, 0x6, 0x23e5, 0xfffffff8, 0x4, 0x2, 0x9d9, 0x6, 0x6, 0xfffe0000, 0x6, 0x5, 0x7, 0x4e, 0x3, 0x4, 0x0, 0x6fb0, 0x3ff, 0xf, 0x7fffffff, 0x0, 0x0, 0xd, 0x9, 0xfffffffd, 0x3ff, 0x400, 0x2a, 0xffffffff]})

kernel console output (not intermixed with test programs):

634] bridge_slave_1: left allmulticast mode
[ 1290.125778][ T6634] bridge_slave_1: left promiscuous mode
[ 1290.131511][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1290.233548][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1553'.
[ 1290.429528][ T6634] bridge_slave_0: left allmulticast mode
[ 1290.436194][ T6634] bridge_slave_0: left promiscuous mode
[ 1290.445648][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.074757][ T6634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1291.111812][ T6634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1291.122733][ T6634] bond0 (unregistering): Released all slaves
[ 1292.189177][ T6634] hsr_slave_0: left promiscuous mode
[ 1292.199368][T14288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1556'.
[ 1292.243563][ T6634] hsr_slave_1: left promiscuous mode
[ 1292.251680][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1292.269686][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1292.614331][   T30] audit: type=1400 audit(1752662526.224:452): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14289 comm="syz.2.1557" daddr=fe80::d
[ 1292.651721][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1292.971623][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1292.989855][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.004281][   T10] usb 5-1: config 0 descriptor??
[ 1293.013564][   T10] cp210x 5-1:0.0: cp210x converter detected
[ 1293.061048][ T6634] team0 (unregistering): Port device team_slave_1 removed
[ 1293.101719][ T6634] team0 (unregistering): Port device team_slave_0 removed
[ 1293.381538][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'.
[ 1293.392148][T14287] tipc: Started in network mode
[ 1293.403153][T14287] tipc: Node identity 7, cluster identity 5
[ 1293.409502][T14287] tipc: Node number set to 7
[ 1293.435821][   T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1296.478683][   T10] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 1296.510226][   T10] cp210x 5-1:0.0: GPIO initialisation failed: -71
[ 1296.524215][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1296.537139][   T10] usb 5-1: USB disconnect, device number 16
[ 1296.552696][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1296.561839][   T10] cp210x 5-1:0.0: device disconnected
[ 1296.692204][T14313] erofs (device nullb0): cannot find valid erofs superblock
[ 1297.018874][T13979] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1297.042769][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'.
[ 1297.051267][T13979] 8021q: adding VLAN 0 to HW filter on device team0
[ 1297.070453][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'.
[ 1297.089508][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1297.096777][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1297.167424][T14320] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1297.185829][T14320] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1297.831465][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1297.838707][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1299.105851][T14331] tty tty3: ldisc open failed (-12), clearing slot 2
[ 1299.633137][T13979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1299.677038][T14341] CIFS: VFS: Malformed UNC in devname
[ 1299.775027][T13979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1299.933553][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'.
[ 1300.727651][T14351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1301.359576][T14087] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1302.187342][T14087] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1302.233450][T14087] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1302.296597][T14087] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1302.732666][T14087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1302.870033][T14087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1303.180263][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.187552][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1303.866279][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.873521][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1304.163934][T14087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1305.118446][T14386] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[ 1305.863670][T14393] random: crng reseeded on system resumption
[ 1309.235401][T12729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1309.246197][T12729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1309.266483][T12729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1309.276191][T12729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1309.286553][T12729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1311.436462][   T51] Bluetooth: hci1: command tx timeout
[ 1311.579813][T14421] program syz.2.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1311.655205][T14403] lo speed is unknown, defaulting to 1000
[ 1311.665667][T14087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1311.689761][T14422] program syz.2.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1311.704997][T14422] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1312.291042][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'.
[ 1313.324692][T14087] veth0_vlan: entered promiscuous mode
[ 1313.337476][T14087] veth1_vlan: entered promiscuous mode
[ 1313.685389][   T51] Bluetooth: hci1: command tx timeout
[ 1315.381287][ T1328] bridge_slave_1: left allmulticast mode
[ 1315.449673][ T1328] bridge_slave_1: left promiscuous mode
[ 1315.485694][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.547534][ T1328] bridge_slave_0: left allmulticast mode
[ 1315.553612][ T1328] bridge_slave_0: left promiscuous mode
[ 1315.559513][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1315.904092][T14450] new mount options do not match the existing superblock, will be ignored
[ 1316.435024][   T51] Bluetooth: hci1: command tx timeout
[ 1316.818845][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'.
[ 1318.475244][   T51] Bluetooth: hci1: command tx timeout
[ 1319.408975][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1319.420276][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1319.430771][ T1328] bond0 (unregistering): Released all slaves
[ 1319.472409][T14449] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1319.472686][T14463] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1586'.
[ 1319.490357][T14463] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 1319.956015][   T30] audit: type=1400 audit(1752662553.574:453): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14471 comm="syz.4.1589" daddr=fc01:: dest=20000
[ 1319.975139][ T1328] hsr_slave_0: left promiscuous mode
[ 1320.004854][ T1328] hsr_slave_1: left promiscuous mode
[ 1320.011249][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1321.387690][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1322.081129][   T30] audit: type=1400 audit(1752662555.684:454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14482 comm="syz.4.1591" daddr=::ffff:172.20.20.59 dest=20003
[ 1322.350711][   T30] audit: type=1400 audit(1752662555.694:455): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14482 comm="syz.4.1591" daddr=fe80::aa
[ 1322.863050][T12729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1322.876380][T12729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1322.889029][T12729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1322.898968][T12729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1322.907002][T12729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1322.951055][ T1328] team0 (unregistering): Port device team_slave_1 removed
[ 1323.008735][ T1328] team0 (unregistering): Port device team_slave_0 removed
[ 1323.561948][T14403] chnl_net:caif_netlink_parms(): no params data found
[ 1323.871069][T14500] netlink: 'syz.4.1595': attribute type 4 has an invalid length.
[ 1323.879067][T14500] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1595'.
[ 1324.600170][T14497] netlink: 'syz.2.1594': attribute type 6 has an invalid length.
[ 1324.632640][T14492] Cannot find add_set index 0 as target
[ 1325.003223][   T51] Bluetooth: hci2: command tx timeout
[ 1325.410215][T14489] lo speed is unknown, defaulting to 1000
[ 1327.266675][   T51] Bluetooth: hci2: command tx timeout
[ 1327.317999][T14403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.338901][T14403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.361912][   T30] audit: type=1326 audit(1752662560.974:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1327.395792][T14403] bridge_slave_0: entered allmulticast mode
[ 1327.410541][T14403] bridge_slave_0: entered promiscuous mode
[ 1327.622776][   T30] audit: type=1326 audit(1752662560.974:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1327.670288][   T30] audit: type=1326 audit(1752662561.004:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1328.078881][T14403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.105139][T14403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1328.122817][T14403] bridge_slave_1: entered allmulticast mode
[ 1328.144216][T14403] bridge_slave_1: entered promiscuous mode
[ 1329.049794][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1329.077138][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1329.227238][T14533] misc userio: Invalid payload size
[ 1329.236429][T14533] misc userio: Invalid payload size
[ 1329.244597][T14533] misc userio: The device must be registered before sending interrupts
[ 1329.275180][   T51] Bluetooth: hci2: command tx timeout
[ 1330.848621][T14544] netlink: 'syz.4.1603': attribute type 1 has an invalid length.
[ 1330.857179][T14544] netlink: 'syz.4.1603': attribute type 2 has an invalid length.
[ 1331.012338][T14546] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.65538)
[ 1331.024008][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'.
[ 1331.355042][   T51] Bluetooth: hci2: command tx timeout
[ 1331.714214][T14403] team0: Port device team_slave_0 added
[ 1331.723513][T14403] team0: Port device team_slave_1 added
[ 1331.766598][T14541] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1332.237676][T14558] Invalid source name
[ 1332.250502][T14558] UBIFS error (pid: 14558): cannot open "./file0", error -22
[ 1332.279807][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[ 1333.313590][T14564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1607'.
[ 1333.332060][T14558] team0: Port device team_slave_1 removed
[ 1333.399845][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1333.407880][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1333.521284][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1333.534180][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1333.549977][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1333.575944][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1333.583620][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1334.192897][T14567] bridge0: port 3(gretap0) entered blocking state
[ 1334.200476][T14567] bridge0: port 3(gretap0) entered disabled state
[ 1334.207462][T14567] gretap0: entered allmulticast mode
[ 1334.217101][T14567] gretap0: entered promiscuous mode
[ 1334.444100][T14403] hsr_slave_0: entered promiscuous mode
[ 1334.466119][T14403] hsr_slave_1: entered promiscuous mode
[ 1334.478205][T14403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1334.489918][T14403] Cannot create hsr debugfs directory
[ 1334.765358][T14575] netlink: 'syz.1.1609': attribute type 6 has an invalid length.
[ 1334.790987][T14576] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4)
[ 1334.894501][   T30] audit: type=1326 audit(1752662568.504:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14574 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba8d8e929 code=0x7ffc0000
[ 1334.959744][   T30] audit: type=1326 audit(1752662568.504:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14574 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f4ba8d8e929 code=0x7ffc0000
[ 1335.042014][   T30] audit: type=1326 audit(1752662568.564:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14574 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba8d8e929 code=0x7ffc0000
[ 1335.264184][   T30] audit: type=1326 audit(1752662568.564:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14574 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba8d8e929 code=0x7ffc0000
[ 1336.204025][T14489] chnl_net:caif_netlink_parms(): no params data found
[ 1336.305254][   T30] audit: type=1326 audit(1752662569.904:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.099134][   T30] audit: type=1326 audit(1752662569.904:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.120853][   T30] audit: type=1326 audit(1752662569.904:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.150267][   T30] audit: type=1326 audit(1752662569.904:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.198615][   T30] audit: type=1326 audit(1752662569.904:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.362586][ T1328] bridge_slave_1: left allmulticast mode
[ 1337.368674][   T30] audit: type=1326 audit(1752662569.904:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0be3f8e929 code=0x7ffc0000
[ 1337.396570][ T1328] bridge_slave_1: left promiscuous mode
[ 1337.402415][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1337.435284][T14605] overlayfs: failed to clone upperpath
[ 1337.498201][ T1328] bridge_slave_0: left allmulticast mode
[ 1337.503931][ T1328] bridge_slave_0: left promiscuous mode
[ 1337.510411][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1337.865250][T14611] ubi31: attaching mtd0
[ 1337.911873][T14611] ubi31: scanning is finished
[ 1338.604050][T14611] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1338.611922][T14611] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1338.619423][T14611] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1338.626532][T14611] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1338.634035][T14611] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1338.641009][T14611] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1338.649163][T14611] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2256398063
[ 1338.659455][T14611] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1338.874381][T14616] ubi31: background thread "ubi_bgt31d" started, PID 14616
[ 1339.824845][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[ 1340.328072][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1340.346834][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1340.369589][ T1328] bond0 (unregistering): Released all slaves
[ 1341.262131][ T1328] hsr_slave_0: left promiscuous mode
[ 1341.361863][T14641] fuse: Bad value for 'fd'
[ 1342.111281][   T30] kauditd_printk_skb: 51 callbacks suppressed
[ 1342.111297][   T30] audit: type=1400 audit(1752662574.924:520): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14631 comm="syz.4.1622" daddr=fe80::14 dest=20001
[ 1342.172042][ T1328] hsr_slave_1: left promiscuous mode
[ 1342.181379][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.201260][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.261818][ T1328] veth1_vlan: left promiscuous mode
[ 1342.275759][ T1328] veth0_vlan: left promiscuous mode
[ 1343.078606][ T1328] team0 (unregistering): Port device team_slave_1 removed
[ 1343.198594][ T1328] team0 (unregistering): Port device team_slave_0 removed
[ 1344.760082][T14655] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[ 1345.522149][T14489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1345.548221][T14489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.560481][T14489] bridge_slave_0: entered allmulticast mode
[ 1345.568791][T14489] bridge_slave_0: entered promiscuous mode
[ 1345.583418][T14489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1345.590943][T14489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.603920][T14489] bridge_slave_1: entered allmulticast mode
[ 1345.612135][T14489] bridge_slave_1: entered promiscuous mode
[ 1346.496096][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1346.623911][   T30] audit: type=1400 audit(1752662580.234:521): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14671 comm="syz.1.1628" daddr=fe80::d
[ 1346.677998][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1346.897519][T14677] tmpfs: Unknown parameter 'usrquota&½p'
[ 1347.583885][T14489] team0: Port device team_slave_0 added
[ 1347.618084][T14489] team0: Port device team_slave_1 added
[ 1347.983951][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1348.125014][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1348.201781][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1348.547253][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1348.554261][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1348.812605][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1348.940367][T14693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1350.945091][T14709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[ 1350.951684][T14709] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1351.003034][T14709] vhci_hcd vhci_hcd.0: Device attached
[ 1351.008752][T14705] syz_tun: entered allmulticast mode
[ 1351.018878][T14489] hsr_slave_0: entered promiscuous mode
[ 1351.027309][T14489] hsr_slave_1: entered promiscuous mode
[ 1351.045896][T14489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1351.062979][T14489] Cannot create hsr debugfs directory
[ 1351.163988][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1637'.
[ 1351.245039][ T5849] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[ 1351.286716][T14714] netlink: 'syz.4.1637': attribute type 10 has an invalid length.
[ 1351.379641][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'.
[ 1351.742309][T14700] syz_tun: left allmulticast mode
[ 1351.917174][T14715] bridge0: port 3(team0) entered disabled state
[ 1353.321117][T14715] bridge0: port 3(team0) entered disabled state
[ 1353.434704][T14715] team_slave_0: left promiscuous mode
[ 1353.443850][T14715] team_slave_0: left allmulticast mode
[ 1353.505707][T14715] team0 (unregistering): Port device team_slave_0 removed
[ 1353.516387][T14715] team_slave_1: left promiscuous mode
[ 1353.523030][T14715] team_slave_1: left allmulticast mode
[ 1353.610832][T14715] team0 (unregistering): Port device team_slave_1 removed
[ 1353.621870][T14715] : left promiscuous mode
[ 1353.627255][T14715] bond_slave_0: left promiscuous mode
[ 1353.635086][T14715] bond_slave_1: left promiscuous mode
[ 1353.641935][T14715] batadv0: left promiscuous mode
[ 1353.650626][T14715] : left allmulticast mode
[ 1353.655528][T14715] bond_slave_0: left allmulticast mode
[ 1353.661248][T14715] bond_slave_1: left allmulticast mode
[ 1353.667156][T14715] batadv0: left allmulticast mode
[ 1353.789165][T14715] team0 (unregistering): Port device  removed
[ 1354.847315][T14710] vhci_hcd: connection reset by peer
[ 1355.386506][   T59] vhci_hcd: stop threads
[ 1355.390820][   T59] vhci_hcd: release socket
[ 1355.395554][   T59] vhci_hcd: disconnect device
[ 1355.429107][T14403] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1355.536915][T14725] netlink: 'syz.2.1639': attribute type 10 has an invalid length.
[ 1355.587308][T14403] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1355.610726][T14403] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1355.693119][T14403] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1356.413562][ T5849] vhci_hcd: vhci_device speed not set
[ 1357.852815][T14403] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1357.944076][T14403] 8021q: adding VLAN 0 to HW filter on device team0
[ 1357.983644][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1357.990869][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1358.007364][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.014555][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1359.205065][T14403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1359.712238][T14403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1360.050837][T14761] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20003
[ 1360.875136][   T30] audit: type=1400 audit(1752662593.844:522): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14756 comm="syz.1.1645" daddr=fe80::
[ 1361.543708][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'.
[ 1361.619563][T14769] kAFS: No cell specified
[ 1361.788408][T14489] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1363.185495][T14774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1363.193764][T14774] batadv_slave_0: entered promiscuous mode
[ 1363.218681][T14489] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1363.259485][T14489] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1363.299042][T14489] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1363.513025][T14489] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1363.541772][T14489] 8021q: adding VLAN 0 to HW filter on device team0
[ 1363.560444][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1363.567680][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1363.599480][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1363.606718][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1363.640066][T14489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1363.650654][T14489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1363.993133][T14792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1365.034979][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1365.709161][   T30] audit: type=1400 audit(1752662599.324:523): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14790 comm="syz.2.1651" daddr=fc01:: dest=65535
[ 1366.175035][   T30] audit: type=1400 audit(1752662599.684:524): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14802 comm="syz.4.1652" daddr=fc00:: dest=20004
[ 1366.609834][T14803] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1652'.
[ 1367.966150][T12729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1367.976682][T12729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1368.015140][T12729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1368.025128][T12729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1368.033035][T12729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1368.999818][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1370.767921][T12729] Bluetooth: hci1: command tx timeout
[ 1370.790622][T14817] lo speed is unknown, defaulting to 1000
[ 1372.310150][T14841] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1659'.
[ 1372.817420][T12729] Bluetooth: hci1: command tx timeout
[ 1373.277884][T14847] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1373.733694][T14841]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1373.748236][T14841]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1373.763673][T14841]  (unregistering): (slave batadv0): Releasing backup interface
[ 1373.774378][T14841]  (unregistering): Released all slaves
[ 1373.857692][T14489] veth0_vlan: entered promiscuous mode
[ 1373.988376][T14489] veth1_vlan: entered promiscuous mode
[ 1374.024616][ T9714] bridge_slave_1: left allmulticast mode
[ 1374.033758][ T9714] bridge_slave_1: left promiscuous mode
[ 1374.040125][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1374.050575][ T9714] bridge_slave_0: left allmulticast mode
[ 1374.057115][ T9714] bridge_slave_0: left promiscuous mode
[ 1374.062882][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1374.450539][ T9714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1374.462422][ T9714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1374.473891][ T9714] bond0 (unregistering): Released all slaves
[ 1374.538083][T14489] veth0_macvtap: entered promiscuous mode
[ 1374.596523][T14489] veth1_macvtap: entered promiscuous mode
[ 1374.620301][ T9714] hsr_slave_0: left promiscuous mode
[ 1374.626649][ T9714] hsr_slave_1: left promiscuous mode
[ 1374.633192][ T9714] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1374.641907][ T9714] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1374.875108][T12729] Bluetooth: hci1: command tx timeout
[ 1374.933432][ T9714] team0 (unregistering): Port device team_slave_1 removed
[ 1374.991104][ T9714] team0 (unregistering): Port device team_slave_0 removed
[ 1375.460700][T14817] chnl_net:caif_netlink_parms(): no params data found
[ 1375.497565][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1375.549817][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1375.644510][T14489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.653605][T14489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.662554][T14489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.671970][T14489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.733859][T14817] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.741197][T14817] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.748990][T14817] bridge_slave_0: entered allmulticast mode
[ 1375.758180][T14817] bridge_slave_0: entered promiscuous mode
[ 1375.768655][T14817] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1375.780348][T14817] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.787780][T14817] bridge_slave_1: entered allmulticast mode
[ 1375.795630][T14817] bridge_slave_1: entered promiscuous mode
[ 1375.832094][T14817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1375.847305][T14817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1375.942395][T14817] team0: Port device team_slave_0 added
[ 1375.952292][T14817] team0: Port device team_slave_1 added
[ 1376.004783][T14817] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1376.012158][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1376.041296][T14817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1376.060195][T14817] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1376.067733][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1376.094800][T14817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1376.110112][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.130427][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1376.174424][T14817] hsr_slave_0: entered promiscuous mode
[ 1376.181156][T14817] hsr_slave_1: entered promiscuous mode
[ 1376.188419][T14817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1376.196427][T14817] Cannot create hsr debugfs directory
[ 1376.240103][ T9714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.252744][ T9714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1376.956086][T12729] Bluetooth: hci1: command tx timeout
[ 1377.131535][   T30] audit: type=1400 audit(1752662610.714:525): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=14859 comm="syz.0.1169" saddr=fe80::bb daddr=fe80::aa dest=20002
[ 1377.163114][   T30] audit: type=1400 audit(1752662610.714:526): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=14859 comm="syz.0.1169" saddr=fe80::bb daddr=fe80::aa dest=20002
[ 1378.948863][T14817] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1379.038100][T14817] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1379.131183][T14817] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1379.168837][T14817] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1379.223853][T14893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1663'.
[ 1380.383426][T14817] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1380.416268][T14817] 8021q: adding VLAN 0 to HW filter on device team0
[ 1380.957436][T14907] siw: device registration error -23
[ 1380.975586][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.982821][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1381.002068][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1381.009319][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1381.466442][T14916] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1381.475985][T14916] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1381.485564][T14916] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1381.916149][ T5904] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1382.298693][ T5904] usb 5-1: Using ep0 maxpacket: 8
[ 1382.325385][ T5904] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1382.333640][ T5904] usb 5-1: config 0 has no interface number 0
[ 1382.375869][ T5904] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[ 1382.429985][T12729] Bluetooth: hci2: unexpected event for opcode 0x041b
[ 1382.438839][T14817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1382.450609][T14817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1382.479873][ T5904] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[ 1382.521747][ T5904] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[ 1382.532699][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.564070][ T5904] usb 5-1: Product: syz
[ 1382.568841][ T5904] usb 5-1: Manufacturer: syz
[ 1382.573601][ T5904] usb 5-1: SerialNumber: syz
[ 1382.608216][ T5904] usb 5-1: config 0 descriptor??
[ 1382.627767][T14913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1382.741421][T14817] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1382.793704][T14817] veth0_vlan: entered promiscuous mode
[ 1382.809719][T14817] veth1_vlan: entered promiscuous mode
[ 1382.825535][ T5849] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1382.853862][T14817] veth0_macvtap: entered promiscuous mode
[ 1382.866249][T14817] veth1_macvtap: entered promiscuous mode
[ 1382.883269][ T5904] ath6kl: Failed to submit usb control message: -71
[ 1382.890535][T14817] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1382.907770][T14817] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1382.918584][ T5904] ath6kl: unable to send the bmi data to the device: -71
[ 1382.919943][T14817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.935664][ T5904] ath6kl: Unable to send get target info: -71
[ 1382.936325][T14817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.953021][T14817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.962271][T14817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.970650][ T5904] ath6kl: Failed to init ath6kl core: -71
[ 1382.989725][ T5849] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1382.999929][ T5904] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71
[ 1383.023720][ T5849] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[ 1383.049443][ T5849] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1383.061010][ T5849] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1383.065295][ T5904] usb 5-1: USB disconnect, device number 17
[ 1383.074776][ T5849] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1383.157092][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1383.194180][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'.
[ 1383.218123][T12190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.226556][T12190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.279970][T12190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.320618][T12190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.401498][ T5849] ath6kl: Failed to submit usb control message: -71
[ 1383.416085][ T5849] ath6kl: unable to send the bmi data to the device: -71
[ 1383.423246][ T5849] ath6kl: Unable to send get target info: -71
[ 1383.454028][ T5849] ath6kl: Failed to init ath6kl core: -71
[ 1383.463996][ T5849] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1383.522265][ T5849] usb 1-1: USB disconnect, device number 3
[ 1384.856481][ T5849] IPVS: starting estimator thread 0...
[ 1384.956514][T14954] CIFS: Unable to determine destination address
[ 1385.270265][T14951] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1385.496856][T14964] futex_wake_op: syz.1.1687 tries to shift op by 32; fix this program
[ 1388.211014][T14987] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1388.529456][T14989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'.
[ 1389.498610][   T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1389.575076][   T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1389.602886][ T8873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1389.660875][ T8873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1390.046187][ T8873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1390.576214][T14999] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[ 1390.626476][T14999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1697'.
[ 1391.344909][T15012] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1701'.
[ 1391.400171][T12729] Bluetooth: hci2: unexpected event for opcode 0x6572
[ 1392.576773][T15026] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1704'.
[ 1393.390489][T15023] overlayfs: failed to clone upperpath
[ 1393.675103][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1393.969383][T15041] smc: net device bond0 applied user defined pnetid SYZ2
[ 1394.730427][   T30] audit: type=1400 audit(1752662627.594:527): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15033 comm="syz.2.1708" dest=2
[ 1394.732854][T15040] smk_cipso_doi:679 remove rc = -2
[ 1398.993188][T15078] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1717'.
[ 1401.669625][T15087] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd2": -EINTR
[ 1401.915098][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1401.939371][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'.
[ 1402.046085][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'.
[ 1402.584784][T15096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1406.576980][T15142] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[ 1406.619022][T15142] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1407.754374][   T30] audit: type=1400 audit(1752662641.364:528): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15151 comm="syz.0.1746" daddr=2001::
[ 1409.010990][T15164] 9pnet_fd: Insufficient options for proto=fd
[ 1409.869954][T15179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.848432][T15188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1758'.
[ 1411.868969][T15191] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1411.910296][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'.
[ 1412.004591][T15194] random: crng reseeded on system resumption
[ 1414.385884][T15218] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1414.661430][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[ 1414.676145][   T30] audit: type=1400 audit(1752662647.494:529): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15203 comm="syz.4.1766"
[ 1418.199260][T15247] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1781'.
[ 1418.252332][   T30] audit: type=1400 audit(1752662651.864:530): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15251 comm="syz.0.1785" daddr=ff02::1
[ 1418.555041][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1419.336542][ T8873] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 1420.558330][T15282] xt_l2tp: wrong L2TP version: 0
[ 1420.610029][ T8873] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1420.641054][ T8873] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1420.658572][ T8873] usb 5-1: can't read configurations, error -71
[ 1420.894201][T15291] lo speed is unknown, defaulting to 1000
[ 1420.929675][T12729] Bluetooth: hci2: unexpected event for opcode 0x2027
[ 1421.948345][T15309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1805'.
[ 1422.119040][T15311] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[ 1422.137219][T15311] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1422.184663][T15313] netlink: 'syz.0.1807': attribute type 12 has an invalid length.
[ 1422.245865][T15313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1807'.
[ 1422.699515][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[ 1423.214289][   T30] audit: type=1400 audit(1752662656.824:531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15357 comm="syz.4.1827" daddr=2001::1
[ 1427.001758][T15408] netlink: 'syz.4.1845': attribute type 2 has an invalid length.
[ 1427.038200][T15408] netlink: 'syz.4.1845': attribute type 1 has an invalid length.
[ 1427.424256][T15415] xt_hashlimit: max too large, truncated to 1048576
[ 1427.642160][   T30] audit: type=1400 audit(1752662661.254:532): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15422 comm="syz.3.1854" saddr=172.30.0.4 daddr=172.20.20.170
[ 1428.520978][T15440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1859'.
[ 1429.089059][   T30] audit: type=1400 audit(1752662662.704:533): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15456 comm="syz.4.1867" daddr=ff02::1 dest=20001
[ 1429.147741][   T30] audit: type=1400 audit(1752662662.764:534): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15458 comm="syz.0.1868" daddr=fe80::c dest=20002
[ 1429.243192][   T30] audit: type=1400 audit(1752662662.854:535): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15464 comm="syz.3.1871" daddr=::ffff:172.20.20.30 dest=20064
[ 1430.780581][T15489] input: syz0 as /devices/virtual/input/input27
[ 1432.005827][   T30] audit: type=1400 audit(1752662665.584:536): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15494 comm="syz.1.1881" daddr=fe80::1c dest=16385
[ 1433.439100][T15505] tipc: Started in network mode
[ 1433.459527][T15505] tipc: Node identity , cluster identity 4711
[ 1433.585188][   T30] audit: type=1400 audit(1752662667.204:537): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15509 comm="syz.3.1887" dest=2
[ 1433.744554][   T30] audit: type=1400 audit(1752662667.354:538): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15515 comm="syz.4.1889" daddr=ff02::1
[ 1433.839184][   T30] audit: type=1400 audit(1752662667.454:539): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15521 comm="syz.1.1890" daddr=::ffff:172.20.20.41
[ 1433.904654][   T30] audit: type=1400 audit(1752662667.484:540): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15519 comm="syz.2.1892" daddr=::ffff:172.20.20.170
[ 1434.018626][   T30] audit: type=1400 audit(1752662667.634:541): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15527 comm="syz.4.1895" daddr=ff02::1
[ 1434.405154][T15530] syz.0.1893: attempt to access beyond end of device
[ 1434.405154][T15530] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1435.759028][T15551] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1894'.
[ 1435.768470][T15551] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 1435.841970][T15554] netlink: 'syz.3.1901': attribute type 10 has an invalid length.
[ 1435.935018][T15554] macvlan0: entered promiscuous mode
[ 1435.960454][T15554] macvlan0: entered allmulticast mode
[ 1436.148045][T15554] veth1_vlan: entered allmulticast mode
[ 1436.364222][T15554] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1436.934968][ T8873] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1437.264941][ T8873] usb 4-1: Using ep0 maxpacket: 32
[ 1437.497931][ T8873] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1437.506612][ T8873] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1437.516148][ T8873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1437.526525][ T8873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1437.535845][ T8873] usb 4-1: config 1 has no interface number 0
[ 1437.542133][ T8873] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1437.551405][ T8873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.591852][ T8873] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1437.627802][   T30] audit: type=1400 audit(1752662671.194:542): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15594 comm="syz.1.1914" dest=20001
[ 1437.702418][T15591] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1437.792206][ T8873] snd_usb_pod 4-1:1.1: set_interface failed
[ 1437.800876][ T8873] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1437.810401][ T8873] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[ 1438.567648][ T8873] usb 4-1: USB disconnect, device number 4
[ 1438.677687][T15605] random: crng reseeded on system resumption
[ 1438.826655][T15605] Hibernate inconsistent memory map detected!
[ 1438.849079][T15605] PM: hibernation: Image mismatch: architecture specific data
[ 1438.881054][   T30] audit: type=1400 audit(1752662672.494:543): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15612 comm="syz.0.1921" daddr=ff02::1 dest=20001
[ 1439.100934][T15626] netlink: 'syz.1.1927': attribute type 10 has an invalid length.
[ 1439.109995][T15626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1439.117326][T15626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1439.130425][T15626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1439.137758][T15626] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1439.145389][T15626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.152607][T15626] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1439.152959][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'.
[ 1439.166342][T15626] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1439.183082][T15628] bridge_slave_1: left allmulticast mode
[ 1439.185614][T13112] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1439.203108][T15628] bridge_slave_1: left promiscuous mode
[ 1439.211078][T15628] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1439.233462][T15628] bridge_slave_0: left allmulticast mode
[ 1439.246896][T15628] bridge_slave_0: left promiscuous mode
[ 1439.253847][T15628] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1439.285290][ T5849] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1439.345423][T13112] usb 4-1: Using ep0 maxpacket: 16
[ 1439.573138][ T5849] usb 1-1: Using ep0 maxpacket: 16
[ 1439.575454][T15628] bond0: (slave bridge0): Releasing backup interface
[ 1439.579439][T13112] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1439.611697][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1439.632372][T13112] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1439.673073][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1439.725929][T13112] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1439.752482][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1439.835133][T13112] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1439.859218][ T5849] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[ 1439.882551][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.904148][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.913416][T13112] usb 4-1: Product: syz
[ 1439.942147][T13112] usb 4-1: Manufacturer: syz
[ 1439.957999][ T5849] usb 1-1: config 0 descriptor??
[ 1439.967613][T13112] usb 4-1: SerialNumber: syz
[ 1440.256489][T13112] usb 4-1: 0:2 : does not exist
[ 1440.337683][T13112] usb 4-1: USB disconnect, device number 5
[ 1440.445253][ T8873] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1440.462811][ T5849] lg-g15 0003:046D:C227.0006: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.0-1/input0
[ 1440.604584][ T5849] usb 1-1: USB disconnect, device number 4
[ 1440.729101][T15647] fido_id[15647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1440.765291][ T8873] usb 5-1: Using ep0 maxpacket: 16
[ 1440.783637][ T8873] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1440.809362][ T8873] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1440.820097][ T8873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1440.838378][ T8873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1440.848832][ T8873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.860827][ T8873] usb 5-1: Product: syz
[ 1440.866305][ T8873] usb 5-1: Manufacturer: syz
[ 1440.871222][ T8873] usb 5-1: SerialNumber: syz
[ 1441.445303][T15657] syz.2.1937: attempt to access beyond end of device
[ 1441.445303][T15657] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1441.796420][ T8873] usb 5-1: 0:2 : does not exist
[ 1441.859465][ T8873] usb 5-1: USB disconnect, device number 20
[ 1441.907047][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1442.003547][T15219] udevd[15219]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1442.138493][ T5904] usb 4-1: Using ep0 maxpacket: 16
[ 1442.153970][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1442.177220][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1442.194380][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1442.212640][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1442.223907][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.242999][ T5904] usb 4-1: config 0 descriptor??
[ 1442.828143][ T5904] microsoft 0003:045E:07DA.0007: item 0 1 0 9 parsing failed
[ 1442.947549][ T5904] microsoft 0003:045E:07DA.0007: parse failed
[ 1443.040721][ T5904] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[ 1443.249229][ T5904] usb 4-1: USB disconnect, device number 6
[ 1443.333531][   T30] audit: type=1400 audit(1752662676.944:544): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15682 comm="syz.4.1948" daddr=fe80::bb dest=5
[ 1443.412525][T15688] openvswitch: netlink: Message has 4 unknown bytes.
[ 1443.425602][T15688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1443.635004][T13112] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1443.806944][T13112] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[ 1443.826010][T13112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1443.843534][T13112] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[ 1443.864500][T13112] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[ 1443.921712][T13112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.944439][T13112] usb 5-1: config 0 descriptor??
[ 1444.012828][   T30] audit: type=1400 audit(1752662677.624:545): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15710 comm="syz.3.1961" daddr=ff02::1
[ 1444.154782][   T30] audit: type=1400 audit(1752662677.764:546): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15714 comm="syz.3.1963" daddr=ff02::1
[ 1444.299548][   T30] audit: type=1400 audit(1752662677.914:547): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15720 comm="syz.3.1966" daddr=ff01::1
[ 1444.355215][   T30] audit: type=1400 audit(1752662677.934:548): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15720 comm="syz.3.1966" daddr=fe80::bb
[ 1444.394469][T13112] holtek_kbd 0003:04D9:A055.0008: item fetching failed at offset 5/7
[ 1444.513756][T13112] holtek_kbd 0003:04D9:A055.0008: probe with driver holtek_kbd failed with error -22
[ 1445.911035][T13112] usb 5-1: USB disconnect, device number 21
[ 1445.988688][   T30] audit: type=1400 audit(1752662679.604:549): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15729 comm="syz.1.1970" daddr=fe80::bb dest=20000
[ 1446.175489][   T30] audit: type=1400 audit(1752662679.784:550): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15735 comm="syz.3.1973" daddr=::ffff:255.255.255.255 dest=20002
[ 1446.235685][T12729] Bluetooth: hci2: command 0x0405 tx timeout
[ 1446.690122][T15757] overlay: Unknown parameter '/'
[ 1447.405150][T11321] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 1447.459854][T15763] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[ 1447.599835][T11321] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1447.620794][T11321] usb 4-1: config 0 has no interface number 0
[ 1447.665410][T11321] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1447.679000][T15774] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1447.706010][T11321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.720826][T11321] usb 4-1: Product: syz
[ 1447.729840][T11321] usb 4-1: Manufacturer: syz
[ 1447.743817][T11321] usb 4-1: SerialNumber: syz
[ 1447.762561][T11321] usb 4-1: config 0 descriptor??
[ 1447.948570][T15788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'.
[ 1447.958104][T15788] tipc: Invalid UDP bearer configuration
[ 1447.958164][T15788] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1448.599052][T11321] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1448.914743][T11321] usb 4-1: Please update to version 0.2 or newer
[ 1449.021069][T11321] usb 4-1: USB disconnect, device number 7
[ 1449.044639][ T8873] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1449.269226][ T8873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1449.300320][ T8873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1449.344707][ T8873] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1449.369380][ T8873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1449.408239][ T8873] usb 1-1: SerialNumber: syz
[ 1449.531470][T15812] veth1_macvtap: left promiscuous mode
[ 1449.571003][T15812] macsec0: entered promiscuous mode
[ 1449.603935][T15815] veth1_macvtap: entered promiscuous mode
[ 1449.633907][T15815] macsec0: left promiscuous mode
[ 1449.685075][ T8873] usb 1-1: 0:2 : does not exist
[ 1449.739740][ T8873] usb 1-1: USB disconnect, device number 5
[ 1449.823927][T15731] udevd[15731]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1450.119264][   T30] audit: type=1400 audit(1752662683.733:551): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15820 comm="syz.4.2009" daddr=ff05::
[ 1450.249743][T15809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1450.553993][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1451.263684][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'.
[ 1451.321393][   T30] audit: type=1400 audit(1752662684.924:552): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15830 comm="syz.2.2013" daddr=fe80::bb dest=20004
[ 1451.388472][   T30] audit: type=1400 audit(1752662684.934:553): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15831 comm="syz.0.2014" daddr=ff01::1 dest=20002
[ 1451.478518][   T30] audit: type=1400 audit(1752662685.094:554): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15836 comm="syz.2.2018" daddr=ff02::1 dest=20000
[ 1451.581077][   T30] audit: type=1400 audit(1752662685.194:555): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15842 comm="syz.2.2019" daddr=fe80::2a dest=20001
[ 1451.631006][T15845] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1451.650396][T15845] team0: Device ipvlan3 is already an upper device of the team interface
[ 1451.673426][ T8873] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1451.734508][T15802] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1451.841952][ T8873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1451.882705][ T8873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1451.901623][ T8873] usb 5-1: config 1 has no interface number 0
[ 1451.912742][T15802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1451.925351][ T8873] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1452.568090][T15802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1452.579086][T15802] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[ 1452.589449][T15802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.600038][ T8873] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1452.612530][T15802] usb 1-1: config 0 descriptor??
[ 1452.632497][ T8873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.654250][ T8873] usb 5-1: Product: syz
[ 1452.658801][ T8873] usb 5-1: Manufacturer: syz
[ 1452.663715][ T8873] usb 5-1: SerialNumber: syz
[ 1453.514063][ T8873] usb 5-1: selecting invalid altsetting 1
[ 1453.551670][T15860] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2025'.
[ 1453.560967][T15860] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 1453.845364][ T8873] usb 5-1: selecting invalid altsetting 1
[ 1453.851318][ T8873] cdc_ncm 5-1:1.1: bind() failure
[ 1454.001598][T15802] kye 0003:0458:5005.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1454.065979][T15802] kye 0003:0458:5005.0009: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0
[ 1454.081028][ T8873] usb 5-1: USB disconnect, device number 22
[ 1454.111921][T15802] kye 0003:0458:5005.0009: tablet-enabling feature report not found
[ 1454.136259][T15802] kye 0003:0458:5005.0009: tablet enabling failed
[ 1454.242187][T15802] usb 1-1: USB disconnect, device number 6
[ 1454.523019][T15885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2036'.
[ 1454.598834][T15889] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1454.630071][T15889] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1454.648897][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'.
[ 1455.081661][ T5849] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1455.121665][ T5950] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1455.138312][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'.
[ 1455.241938][ T5849] usb 4-1: Using ep0 maxpacket: 32
[ 1455.253385][ T5849] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1455.263027][ T5849] usb 4-1: config 0 has no interface number 0
[ 1455.271822][ T5849] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1455.281153][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.290034][ T5950] usb 5-1: Using ep0 maxpacket: 16
[ 1455.295320][ T5849] usb 4-1: Product: syz
[ 1455.299499][ T5849] usb 4-1: Manufacturer: syz
[ 1455.305086][ T5849] usb 4-1: SerialNumber: syz
[ 1455.311102][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1455.322457][ T5950] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1455.334445][ T5849] usb 4-1: config 0 descriptor??
[ 1455.340617][ T5950] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1455.353612][ T5849] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1455.363002][ T5950] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1455.376914][ T5849] usb 4-1: selecting invalid altsetting 1
[ 1455.382858][ T5849] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1455.397661][ T5950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1455.408903][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.411812][ T8873] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1455.419451][ T5950] usb 5-1: Product: syz
[ 1455.419472][ T5950] usb 5-1: Manufacturer: syz
[ 1455.419489][ T5950] usb 5-1: SerialNumber: syz
[ 1455.421534][ T5849] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1455.456172][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1455.470037][ T5849] usb 4-1: media controller created
[ 1455.498286][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1455.578561][ T5849] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1455.591585][ T8873] usb 1-1: Using ep0 maxpacket: 32
[ 1455.597108][ T5849] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1455.606706][ T8873] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1455.614670][ T5849] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1455.620591][ T8873] usb 1-1: config 0 has no interface number 0
[ 1455.628726][ T8873] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1455.645470][ T8873] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1455.660597][ T8873] usb 1-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1455.685876][ T8873] usb 1-1: config 0 interface 2 has no altsetting 0
[ 1455.699520][ T8873] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[ 1455.711096][ T8873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.727990][ T8873] usb 1-1: config 0 descriptor??
[ 1455.794015][ T5849] usb 4-1: USB disconnect, device number 8
[ 1455.800634][ T5950] usb 5-1: USB disconnect, device number 23
[ 1455.910129][T15731] udevd[15731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1456.054993][   T30] audit: type=1400 audit(1752662689.676:556): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15930 comm="syz.1.2059" daddr=fe80::aa dest=20001
[ 1456.170052][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.191166][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.198385][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.211316][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.234478][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.260778][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.276197][ T8873] uclogic 0003:5543:0781.000A: unknown main item tag 0x0
[ 1456.297210][ T8873] uclogic 0003:5543:0781.000A: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input2
[ 1456.452710][ T8873] usb 1-1: USB disconnect, device number 7
[ 1456.669441][T15949] bridge0: entered promiscuous mode
[ 1456.678066][T15949] bridge0: port 3(macsec1) entered blocking state
[ 1456.687708][   T30] audit: type=1400 audit(1752662690.306:557): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15950 comm="syz.2.2068" dest=65532
[ 1456.708040][T15949] bridge0: port 3(macsec1) entered disabled state
[ 1456.717653][T15949] macsec1: entered allmulticast mode
[ 1456.724037][T15949] bridge0: entered allmulticast mode
[ 1456.735886][T15949] macsec1: left allmulticast mode
[ 1456.741392][T15949] bridge0: left allmulticast mode
[ 1456.754409][T15949] bridge0: left promiscuous mode
[ 1457.994488][   T30] audit: type=1400 audit(1752662691.617:558): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15972 comm="syz.0.2080" daddr=fc00::
[ 1458.044299][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[ 1458.110245][T11321] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1458.304225][T11321] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[ 1458.341315][T11321] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1458.370676][T11321] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1458.385157][T11321] usb 5-1: config 220 has no interface number 2
[ 1458.392500][T11321] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1458.406318][T11321] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1458.413282][T11321] usb 5-1: config 220 interface 76 has no altsetting 0
[ 1458.449899][T11321] usb 5-1: config 220 interface 1 has no altsetting 0
[ 1458.459281][T11321] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1458.468533][T11321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.486553][T11321] usb 5-1: Product: syz
[ 1458.491365][   T30] audit: type=1400 audit(1752662692.107:559): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15993 comm="syz.3.2088" daddr=2001:: dest=20000
[ 1458.508931][T11321] usb 5-1: Manufacturer: syz
[ 1458.514063][T11321] usb 5-1: SerialNumber: syz
[ 1458.530895][   T30] audit: type=1400 audit(1752662692.117:560): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15993 comm="syz.3.2088" daddr=2001::2
[ 1458.580111][ T5950] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1458.787029][T11321] usb 5-1: selecting invalid altsetting 0
[ 1458.797968][T11321] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[ 1458.804856][T11321] usb 5-1: No valid video chain found.
[ 1458.843477][T11321] usb 5-1: selecting invalid altsetting 0
[ 1458.867357][T11321] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[ 1458.989851][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1459.058298][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1459.187158][ T5950] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1459.328204][ T5950] usb 1-1: config 1 has no interface number 1
[ 1459.420483][ T5950] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1459.532225][ T5950] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1459.657884][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1459.703111][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.748127][T11321] usb 5-1: USB disconnect, device number 24
[ 1459.788330][ T5950] usb 1-1: Product: syz
[ 1459.799518][ T5950] usb 1-1: Manufacturer: syz
[ 1459.804187][ T5950] usb 1-1: SerialNumber: syz
[ 1459.880917][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'.
[ 1460.111390][ T5950] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0
[ 1460.118930][ T5950] usb 1-1: MIDIStreaming interface descriptor not found
[ 1460.121252][T16017] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2097'.
[ 1460.240787][ T5950] usb 1-1: USB disconnect, device number 8
[ 1460.381123][T16026] udevd[16026]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1460.606991][ T6000] wlan1: Trigger new scan to find an IBSS to join
[ 1462.526945][T16056] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR
[ 1462.533412][T16054] tty tty26: ldisc open failed (-12), clearing slot 25
[ 1462.810739][   T30] audit: type=1400 audit(1752662696.440:561): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16063 comm="syz.4.2112" daddr=fc01::
[ 1463.251137][T16079] overlay: Unknown parameter '/'
[ 1463.920891][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2119'.
[ 1463.955308][T16083] bridge1: entered allmulticast mode
[ 1464.067505][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[ 1464.467394][   T49] wlan1: Trigger new scan to find an IBSS to join
[ 1464.557055][T15802] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 1464.990804][T15802] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1465.029643][T15802] usb 5-1: no configurations
[ 1465.044536][T15802] usb 5-1: can't read configurations, error -22
[ 1465.316496][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1465.396555][T13112] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1465.466799][ T5950] usb 1-1: Using ep0 maxpacket: 8
[ 1465.487929][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1465.500431][ T5950] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1465.511189][ T5950] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1465.528652][ T5950] usb 1-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0
[ 1465.538207][ T6000] wlan1: Creating new IBSS network, BSSID e2:4a:35:03:ec:64
[ 1465.550232][ T5950] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1465.563322][T13112] usb 4-1: Using ep0 maxpacket: 16
[ 1465.580106][ T5950] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[ 1465.596073][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.604694][T13112] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[ 1465.613275][ T5950] usb 1-1: Product: syz
[ 1465.617908][T13112] usb 4-1: config 0 has no interface number 0
[ 1465.624127][ T5950] usb 1-1: Manufacturer: syz
[ 1465.630157][ T5950] usb 1-1: SerialNumber: syz
[ 1465.641342][T13112] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1465.654133][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.665432][T13112] usb 4-1: Product: syz
[ 1465.673472][T13112] usb 4-1: Manufacturer: syz
[ 1465.681798][T13112] usb 4-1: SerialNumber: syz
[ 1465.702911][T13112] usb 4-1: config 0 descriptor??
[ 1465.731746][T13112] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1465.885813][ T5950] usb 1-1: USB disconnect, device number 9
[ 1465.930856][   T59] usb 4-1: Failed to submit usb control message: -71
[ 1465.931228][T13112] usb 4-1: USB disconnect, device number 9
[ 1465.953886][   T59] usb 4-1: unable to send the bmi data to the device: -71
[ 1465.986676][   T59] usb 4-1: unable to get target info from device
[ 1465.993351][   T59] usb 4-1: could not get target info (-71)
[ 1466.012526][   T59] usb 4-1: could not probe fw (-71)
[ 1466.126381][T15802] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1466.310818][T16135] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2142'.
[ 1466.316275][T15802] usb 5-1: Using ep0 maxpacket: 16
[ 1466.336051][T15802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1466.361277][T15802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1466.376978][T15802] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1466.392300][T15802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.408677][T15802] usb 5-1: config 0 descriptor??
[ 1466.552307][T16139] hsr0: entered promiscuous mode
[ 1466.615123][   T30] audit: type=1400 audit(1752662700.231:562): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16142 comm="syz.3.2148" dest=20001
[ 1466.779332][   T30] audit: type=1400 audit(1752662700.402:563): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16146 comm="syz.3.2150" dest=2
[ 1466.886669][T15802] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[ 1467.180139][T11321] usb 5-1: USB disconnect, device number 26
[ 1467.702187][T16164] netlink: 'syz.2.2156': attribute type 9 has an invalid length.
[ 1467.854106][T16164] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.2156'.
[ 1468.363281][T16169] nbd0: detected capacity change from 0 to 127
[ 1468.834776][   T51] block nbd0: Receive control failed (result -32)
[ 1469.117689][   T30] audit: type=1400 audit(1752662702.743:564): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16178 comm="syz.3.2163"
[ 1469.135140][T15731] block nbd0: Dead connection, failed to find a fallback
[ 1469.194661][T15731] block nbd0: shutting down sockets
[ 1469.200790][T15731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.273671][T15731] buffer_io_error: 4 callbacks suppressed
[ 1469.273691][T15731] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1469.309531][T15731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.340792][T15731] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1469.353191][T15731] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.363057][T15731] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1469.380474][T15731] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.390005][T15731] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1469.418597][T15731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.464387][T15731] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1469.486023][T15731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.517487][T15731] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1469.527956][T16201] hpfs: Bad magic ... probably not HPFS
[ 1469.539110][T15731] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.566385][T15731] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1469.579834][T15731] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.590836][T15731] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1469.606376][T15731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.619738][T15731] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1469.646947][T15731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1469.678644][T15731] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1469.686956][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1469.703578][T15731] ldm_validate_partition_table(): Disk read failed.
[ 1469.728551][T15731] Dev nbd0: unable to read RDB block 0
[ 1469.742994][T15731]  nbd0: unable to read partition table
[ 1469.774119][T15731] ldm_validate_partition_table(): Disk read failed.
[ 1469.985370][T15731] Dev nbd0: unable to read RDB block 0
[ 1469.993801][T15731]  nbd0: unable to read partition table
[ 1470.003257][ T5950] usb 1-1: Using ep0 maxpacket: 8
[ 1470.016553][ T5950] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1470.024244][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1470.051526][ T5950] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1470.063439][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1470.074722][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1470.496363][ T5950] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1470.702883][T16217] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd4": -EINTR
[ 1470.846536][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1470.867653][ T5950] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1470.879450][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1470.914179][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1470.957069][ T5950] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1470.974391][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1470.988178][T16229] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1470.997743][ T5950] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1471.040678][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1471.064864][ T5950] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1471.089722][ T5950] usb 1-1: string descriptor 0 read error: -22
[ 1471.110742][ T5950] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1471.127532][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.187639][ T5950] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1471.439617][ T5950] usb 1-1: USB disconnect, device number 10
[ 1471.993273][ T5950] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1472.081961][T16254] Bluetooth: hci1: Opcode 0x080f failed: -4
[ 1472.962566][T16258] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd4": -EINTR
[ 1473.120105][ T5950] usb 4-1: device descriptor read/all, error -71
[ 1473.962263][   T30] audit: type=1400 audit(1752662707.595:565): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16266 comm="syz.0.2196"
[ 1474.188774][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[ 1474.527113][   T30] audit: type=1400 audit(1752662708.155:566): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16283 comm="syz.1.2204" daddr=::ffff:0.0.0.0 dest=20002
[ 1475.853750][T16306] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd2": -EINTR
[ 1476.143013][T15802] kernel write not supported for file /sg0 (pid: 15802 comm: kworker/0:0)
[ 1476.555704][T13112] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1476.570995][T11321] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1476.723003][T13112] usb 4-1: config 107 has an invalid interface number: 170 but max is 0
[ 1476.834748][T13112] usb 4-1: config 107 has no interface number 0
[ 1477.042548][T11321] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[ 1477.184120][T11321] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1477.331153][T11321] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1477.467392][T13112] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 1056, setting to 64
[ 1477.478697][T13112] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x2 has invalid maxpacket 991, setting to 64
[ 1477.490695][T13112] usb 4-1: config 107 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[ 1477.502381][T13112] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 1477.514363][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'.
[ 1477.523523][T13112] usb 4-1: config 107 interface 170 has no altsetting 0
[ 1477.533411][T13112] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=25.b6
[ 1477.549041][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.578123][T13112] usb 4-1: Product: syz
[ 1477.592970][T13112] usb 4-1: Manufacturer: syz
[ 1477.599439][T13112] usb 4-1: SerialNumber: syz
[ 1477.626360][T11321] usb 5-1: config 220 has no interface number 2
[ 1477.634299][T11321] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1477.656781][T11321] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1477.664072][T11321] usb 5-1: config 220 interface 76 has no altsetting 0
[ 1477.671234][T11321] usb 5-1: config 220 interface 1 has no altsetting 0
[ 1477.680600][T11321] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1477.689688][T11321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.698483][T11321] usb 5-1: Product: syz
[ 1477.704788][T11321] usb 5-1: Manufacturer: syz
[ 1477.709429][T11321] usb 5-1: SerialNumber: syz
[ 1477.833716][T13112] keyspan 4-1:107.170: Keyspan 1 port adapter converter detected
[ 1477.853550][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 87
[ 1477.873638][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 7
[ 1477.894865][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 81
[ 1477.911445][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 1
[ 1477.928414][T13112] keyspan 4-1:107.170: unsupported endpoint type 0
[ 1477.954426][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 85
[ 1477.966020][T11321] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[ 1477.990716][T11321] usb 5-1: No valid video chain found.
[ 1477.998047][T13112] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 5
[ 1478.006087][T11321] usb 5-1: selecting invalid altsetting 0
[ 1478.034088][T11321] usb 5-1: selecting invalid altsetting 0
[ 1478.046132][T13112] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1478.050619][T11321] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[ 1478.091894][T11321] usb 5-1: USB disconnect, device number 27
[ 1478.106366][T13112] usb 4-1: USB disconnect, device number 12
[ 1478.183807][T13112] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1478.204810][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'.
[ 1478.228602][T13112] keyspan 4-1:107.170: device disconnected
[ 1480.044907][   T30] audit: type=1326 audit(1752662713.678:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16407 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1480.072532][   T30] audit: type=1326 audit(1752662713.678:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16407 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1480.129087][ T5904] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1480.138405][T16408] binfmt_misc: register: failed to install interpreter file ./file0
[ 1480.147792][   T30] audit: type=1326 audit(1752662713.708:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16407 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1480.239635][   T30] audit: type=1326 audit(1752662713.708:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16407 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1480.330712][   T30] audit: type=1326 audit(1752662713.708:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16407 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1480.373399][ T5904] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1480.408573][ T5904] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1480.462354][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1480.498904][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1480.506780][T16423] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.518164][T16423] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1480.541529][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1480.576464][ T5904] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1480.595997][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1480.629352][ T5904] usb 4-1: Product: syz
[ 1480.633592][ T5904] usb 4-1: Manufacturer: syz
[ 1480.656907][T16429] netlink: 'syz.0.2263': attribute type 2 has an invalid length.
[ 1480.675788][ T5904] cdc_wdm 4-1:1.0: skipping garbage
[ 1480.681137][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[ 1480.708807][ T5904] cdc_wdm 4-1:1.0: skipping garbage
[ 1480.725279][ T5904] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1480.733019][ T5904] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1480.882914][T16438] wireguard0: entered allmulticast mode
[ 1481.116008][   T30] audit: type=1400 audit(1752662714.749:572): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16446 comm="syz.4.2270" daddr=::ffff:127.0.0.1 dest=20004
[ 1481.273521][   T30] audit: type=1400 audit(1752662714.909:573): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16450 comm="syz.0.2271" daddr=::ffff:0.0.0.0 dest=20002
[ 1481.295024][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[ 1481.484411][T13112] usb 4-1: USB disconnect, device number 13
[ 1481.605667][T16460] bridge0: entered promiscuous mode
[ 1481.698508][T16460] macvtap1: entered allmulticast mode
[ 1481.717249][T16460] bridge0: entered allmulticast mode
[ 1481.751142][T16460] bridge0: port 3(macvtap1) entered blocking state
[ 1481.782564][T16460] bridge0: port 3(macvtap1) entered disabled state
[ 1481.823555][T16460] bridge0: left allmulticast mode
[ 1481.829228][T16460] bridge0: left promiscuous mode
[ 1483.138003][T15802] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1483.319815][T15802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1483.341127][T15802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 1483.365481][T15802] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1483.393255][T15802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.417375][T15802] usb 4-1: Product: syz
[ 1483.421621][T15802] usb 4-1: Manufacturer: syz
[ 1483.449220][T15802] usb 4-1: SerialNumber: syz
[ 1483.478475][T15802] usb 4-1: selecting invalid altsetting 1
[ 1483.683403][T15802] cdc_ncm 4-1:1.0: bind() failure
[ 1483.687665][ T5950] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1483.714204][T15802] cdc_ncm 4-1:1.1: skipping garbage
[ 1483.720827][T15802] cdc_ncm 4-1:1.1: invalid descriptor buffer length
[ 1483.730745][T15802] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1483.753937][T15802] cdc_ncm 4-1:1.1: bind() failure
[ 1483.766564][T15802] usb 4-1: USB disconnect, device number 14
[ 1483.847398][ T5950] usb 5-1: Using ep0 maxpacket: 32
[ 1483.861360][ T5950] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1483.897438][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.924306][ T5950] usb 5-1: config 0 descriptor??
[ 1483.936974][ T5950] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1484.748201][ T5950] gspca_sunplus: reg_w_riv err -71
[ 1484.753888][ T5950] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1484.782211][ T5950] usb 5-1: USB disconnect, device number 28
[ 1484.837400][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2320'.
[ 1485.236585][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1485.386461][ T5950] usb 4-1: Using ep0 maxpacket: 8
[ 1485.399210][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1485.418580][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.454098][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1485.476743][ T5950] pvrusb2: **********
[ 1485.480800][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1485.504191][ T5950] pvrusb2: Important functionality might not be entirely working.
[ 1485.514275][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1485.530711][ T5950] pvrusb2: **********
[ 1485.663019][ T2346] pvrusb2: Invalid write control endpoint
[ 1485.798565][ T2346] pvrusb2: Invalid write control endpoint
[ 1485.804595][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1485.842990][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1485.864134][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1485.887034][ T2346] pvrusb2: Device being rendered inoperable
[ 1485.902672][T13029] usb 4-1: USB disconnect, device number 15
[ 1485.920300][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1485.930103][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1485.948307][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1485.958596][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1485.969318][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1486.142932][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'.
[ 1486.153828][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'.
[ 1486.277025][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1486.429472][ T5950] usb 1-1: Using ep0 maxpacket: 8
[ 1486.445146][ T5950] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1486.453768][T13029] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[ 1486.488227][ T5950] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1486.507077][ T5950] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1486.525975][ T5950] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1486.556217][ T5950] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1486.579995][ T5950] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1486.596120][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.652403][T13029] usb 5-1: config 0 has an invalid interface number: 227 but max is 0
[ 1486.675843][T13029] usb 5-1: config 0 has no interface number 0
[ 1486.683329][T13029] usb 5-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1486.719395][T13029] usb 5-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1486.743195][T13029] usb 5-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1486.768089][T13029] usb 5-1: config 0 interface 227 has no altsetting 0
[ 1486.788748][T13029] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd
[ 1486.806207][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1486.814315][T13029] usb 5-1: Product: syz
[ 1486.856048][T13029] usb 5-1: Manufacturer: syz
[ 1486.860759][T13029] usb 5-1: SerialNumber: syz
[ 1486.875047][ T5950] usb 1-1: GET_CAPABILITIES returned 0
[ 1486.890610][T13029] usb 5-1: config 0 descriptor??
[ 1486.897361][ T5950] usbtmc 1-1:16.0: can't read capabilities
[ 1486.910452][T16609] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1486.943161][T13029] usbtouchscreen 5-1:0.227: probe with driver usbtouchscreen failed with error -90
[ 1487.083204][T13029] usb 1-1: USB disconnect, device number 11
[ 1487.620135][   T30] audit: type=1400 audit(1752662721.252:574): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16647 comm="syz.2.2356" daddr=ff01::1 dest=20000
[ 1487.649405][T16654] random: crng reseeded on system resumption
[ 1487.888430][   T30] audit: type=1400 audit(1752662721.512:575): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16659 comm="syz.3.2359"
[ 1488.049669][ T5904] usb 5-1: USB disconnect, device number 29
[ 1488.261195][T16675] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2365'.
[ 1488.380196][T16677] erspan0: entered promiscuous mode
[ 1488.765318][T13029] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1489.078471][   T30] audit: type=1400 audit(1752662722.713:576): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16707 comm="syz.2.2380" daddr=fe80::bb
[ 1489.088450][ T5950] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1489.124642][T13029] usb 1-1: Using ep0 maxpacket: 32
[ 1489.132752][T13029] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1489.151245][T13029] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1489.176693][T13029] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1489.206819][T13029] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1489.243076][T13029] usb 1-1: Product: syz
[ 1489.254517][ T5950] usb 5-1: Using ep0 maxpacket: 32
[ 1489.274587][T13029] usb 1-1: config 0 descriptor??
[ 1489.284990][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[ 1489.323493][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[ 1489.340910][ T5950] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1489.350511][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.359171][ T5950] usb 5-1: Product: syz
[ 1489.363479][ T5950] usb 5-1: Manufacturer: syz
[ 1489.371081][ T5950] usb 5-1: SerialNumber: syz
[ 1489.386910][ T5950] usb 5-1: config 0 descriptor??
[ 1489.428651][ T5950] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1489.477081][   T30] audit: type=1400 audit(1752662723.113:577): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16719 comm="syz.2.2384" daddr=ff02::1
[ 1489.648935][ T9714] usb 5-1: Failed to submit usb control message: -71
[ 1489.669499][ T5904] usb 5-1: USB disconnect, device number 30
[ 1489.693914][ T9714] usb 5-1: unable to send the bmi data to the device: -71
[ 1489.709115][ T9714] usb 5-1: unable to get target info from device
[ 1489.723039][ T9714] usb 5-1: could not get target info (-71)
[ 1489.732397][ T9714] usb 5-1: could not probe fw (-71)
[ 1489.757448][T13029] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0
[ 1489.784210][T13029] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0
[ 1489.794756][T13029] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0
[ 1489.814544][T13029] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0
[ 1489.828739][T13029] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0
[ 1489.864522][T13029] waterforce 0003:1044:7A4D.000C: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1489.954609][T13029] waterforce 0003:1044:7A4D.000C: fw version request failed with -38
[ 1489.985320][T13029] usb 1-1: USB disconnect, device number 12
[ 1490.105896][T16723] fido_id[16723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1490.349999][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'.
[ 1490.580487][   T30] audit: type=1400 audit(1752662724.213:578): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16734 comm="syz.3.2391" daddr=ff01::1 dest=20000
[ 1490.645027][T16746] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 1491.147016][T16759] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2398'.
[ 1491.754205][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'.
[ 1491.803381][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'.
[ 1491.842813][T16761] batadv0: entered promiscuous mode
[ 1491.865407][T16761] erspan0: entered promiscuous mode
[ 1491.872876][T16761] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1492.049286][   T30] audit: type=1400 audit(1752662725.684:579): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16765 comm="syz.1.2402" dest=20002
[ 1492.252501][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'.
[ 1492.268747][T16779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2408'.
[ 1492.282794][T16780] input: syz1 as /devices/virtual/input/input31
[ 1492.293006][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[ 1492.313215][T13112] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1492.478332][T13112] usb 4-1: Using ep0 maxpacket: 8
[ 1492.490469][T13112] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1492.639087][T13112] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1492.650787][T13112] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1492.673184][T13112] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1492.700781][T13112] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1492.748083][T13112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.849797][T16796] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2412'.
[ 1493.446333][T13112] usb 4-1: GET_CAPABILITIES returned 0
[ 1493.451905][T13112] usbtmc 4-1:16.0: can't read capabilities
[ 1493.537315][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2416'.
[ 1493.582581][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[ 1493.690969][T13112] usb 4-1: USB disconnect, device number 16
[ 1493.850397][T16811] netlink: 'syz.2.2422': attribute type 1 has an invalid length.
[ 1494.095353][T16817] Bluetooth: MGMT ver 1.23
[ 1494.512926][   T30] audit: type=1400 audit(1752662728.145:580): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16833 comm="syz.2.2432" daddr=ff01::1 dest=20000
[ 1494.537753][ T5904] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1494.680645][   T30] audit: type=1400 audit(1752662728.315:581): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16842 comm="syz.1.2436" daddr=fe80::aa dest=20004
[ 1494.700840][   T30] audit: type=1400 audit(1752662728.315:582): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16842 comm="syz.1.2436" daddr=fe80::aa
[ 1494.742012][ T5904] usb 5-1: Using ep0 maxpacket: 16
[ 1494.754642][ T5904] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1494.755513][T16847] ip6gretap0: entered promiscuous mode
[ 1494.782554][ T5904] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1152, setting to 1024
[ 1494.808022][T16847] macsec1: entered promiscuous mode
[ 1494.808267][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1494.826630][T16847] macsec1: entered allmulticast mode
[ 1494.829762][ T5904] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1494.841189][T16847] ip6gretap0: entered allmulticast mode
[ 1494.859998][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.876738][ T5904] usb 5-1: Product: syz
[ 1494.901392][ T5904] usb 5-1: Manufacturer: syz
[ 1494.911493][ T5904] usb 5-1: SerialNumber: syz
[ 1494.922823][ T5904] usb 5-1: config 0 descriptor??
[ 1494.928816][T16825] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1495.151928][ T5950] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[ 1495.160092][T16825] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1495.188127][ T5904] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32
[ 1495.352388][ T5950] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1495.369412][ T5950] usb 4-1: config 0 has no interface number 0
[ 1495.398941][ T5950] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1495.437611][ T5950] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1495.485869][ T5950] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1495.531624][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.579126][ T5950] usb 4-1: config 0 descriptor??
[ 1495.595011][T16851] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1495.605355][ T5904] usb 5-1: USB disconnect, device number 31
[ 1495.605455][    C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[ 1495.647833][ T5192] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[ 1495.674121][ T5950] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1495.866712][T13029] usb 4-1: USB disconnect, device number 17
[ 1495.902675][T16877] syzkaller1: entered promiscuous mode
[ 1495.908224][T16877] syzkaller1: entered allmulticast mode
[ 1496.217968][T12729] Bluetooth: hci2: Opcode 0x0401 failed: -110
[ 1496.228845][T12729] Bluetooth: hci2: command 0x0405 tx timeout
[ 1496.281407][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2456'.
[ 1496.580913][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1496.676460][ T3536] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1496.696802][T16909] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[ 1496.742761][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1496.757492][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1496.767849][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1496.791762][ T5904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1496.801570][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.832948][ T5904] usb 5-1: config 0 descriptor??
[ 1497.320209][ T5904] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1497.402297][T16920] lo speed is unknown, defaulting to 1000
[ 1497.560851][ T5904] usb 5-1: USB disconnect, device number 32
[ 1497.890847][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1498.690178][T12729] Bluetooth: hci5: command 0x1003 tx timeout
[ 1498.693435][   T30] audit: type=1400 audit(1752662732.327:583): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16952 comm="syz.2.2481" daddr=fc01::
[ 1498.696815][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1498.762857][T16955] sch_tbf: burst 480 is lower than device lo mtu (65550) !
[ 1499.117678][   T51] Bluetooth: unknown link type 108
[ 1499.133937][   T51] Bluetooth: hci2: connection err: -111
[ 1499.469518][T13112] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1499.522644][T16985] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1499.641518][T13112] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1499.661264][T13112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.687125][T13112] usb 1-1: config 0 descriptor??
[ 1499.927717][T13112] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1500.135150][T13112] [drm:udl_init] *ERROR* Selecting channel failed
[ 1500.233783][T13112] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1500.249006][T13112] [drm] Initialized udl on minor 2
[ 1500.267792][T13112] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1500.335240][T13112] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1500.373898][T13029] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1500.383027][T13112] usb 1-1: USB disconnect, device number 13
[ 1500.405257][T13029] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1501.723534][   T30] audit: type=1400 audit(1752662735.369:584): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=17044 comm="syz.3.2521" key_serial=296130870 key_desc="_uid_ses.0"
[ 1501.787889][T17039] team0: Port device team_slave_0 removed
[ 1501.830873][T17039] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1502.181835][   T30] audit: type=1400 audit(1752662735.829:585): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17060 comm="syz.1.2524" daddr=fc00::1 dest=20001
[ 1502.849202][T17082] lo speed is unknown, defaulting to 1000
[ 1502.998562][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'.
[ 1503.317748][T17101] sctp: [Deprecated]: syz.0.2540 (pid 17101) Use of int in max_burst socket option.
[ 1503.317748][T17101] Use struct sctp_assoc_value instead
[ 1503.737506][T11321] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1503.912294][T11321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1503.925109][T11321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1503.940740][T11321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1503.954162][T11321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1504.021092][T11321] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1504.036481][T11321] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1504.046762][T11321] usb 1-1: Manufacturer: syz
[ 1504.062589][T11321] usb 1-1: config 0 descriptor??
[ 1504.228807][T17129] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[ 1504.239249][T17129] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[ 1504.357201][ T5950] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1504.493863][T11321] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[ 1504.518892][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.519002][T11321] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1504.546008][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1504.577200][ T5950] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1504.586340][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1504.616389][ T5950] usb 5-1: SerialNumber: syz
[ 1504.802505][T11321] usb 1-1: USB disconnect, device number 14
[ 1504.863442][ T5950] usb 5-1: 0:2 : does not exist
[ 1504.877076][ T5950] usb 5-1: usbmixer: too many channels (61) in unit 5
[ 1504.920276][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2559'.
[ 1504.932425][ T5950] usb 5-1: USB disconnect, device number 33
[ 1504.948426][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2559'.
[ 1505.000858][T15731] udevd[15731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1505.434771][T17150] blk_print_req_error: 138 callbacks suppressed
[ 1505.434795][T17150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.466750][T17150] buffer_io_error: 138 callbacks suppressed
[ 1505.466771][T17150] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1505.489624][T17150] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.513196][T17150] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1505.524082][T17150] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.536923][T17150] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1505.544895][T17150] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.561670][T17150] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1505.579768][T17150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.593794][T17150] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1505.607961][T17150] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.619808][T17150] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1505.631998][T17150] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.643914][T17150] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1505.655481][T17150] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.668344][T17150] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1505.696788][T17150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.705984][T17150] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1505.738433][T17150] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1505.756311][ T5950] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1505.763695][T17150] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1505.799043][T17150] ldm_validate_partition_table(): Disk read failed.
[ 1505.828257][T17150] Dev nbd0: unable to read RDB block 0
[ 1505.848783][T17150]  nbd0: unable to read partition table
[ 1505.892429][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'.
[ 1505.905911][T17152] ldm_validate_partition_table(): Disk read failed.
[ 1505.926879][T17158] nbd: couldn't find a device at index 65546
[ 1505.934485][T17152] Dev nbd0: unable to read RDB block 0
[ 1505.943118][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1505.958149][T17152]  nbd0: unable to read partition table
[ 1505.963912][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1505.982831][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1506.004985][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1506.019663][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62
[ 1506.041672][ T5950] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1506.082864][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=61, location=61
[ 1506.109995][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1506.129194][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60
[ 1506.156353][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1506.173495][ T5950] usb 5-1: config 0 descriptor??
[ 1506.190248][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1506.218780][T17165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1506.236372][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=30, location=30
[ 1506.246439][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=29, location=29
[ 1506.258096][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=28, location=28
[ 1506.267635][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1506.278110][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1506.288183][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=14, location=14
[ 1506.298592][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=13, location=13
[ 1506.308308][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=12, location=12
[ 1506.318275][T17152] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1506.327928][T17152] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1506.552430][T17172] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 1506.563218][T15802] IPVS: starting estimator thread 0...
[ 1506.631847][ T5950] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xe
[ 1506.655814][ T5950] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[ 1506.665853][T17174] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1506.682035][   T30] audit: type=1326 audit(1752662740.321:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17175 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1506.706792][ T5950] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1506.738136][   T30] audit: type=1326 audit(1752662740.321:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17175 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1506.764861][   T30] audit: type=1326 audit(1752662740.321:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17175 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1506.816495][   T30] audit: type=1326 audit(1752662740.321:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17175 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4fd8e929 code=0x7ffc0000
[ 1506.877818][T15802] usb 5-1: USB disconnect, device number 34
[ 1506.995672][T17181] fido_id[17181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1507.303669][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[ 1508.042002][T17212] lo speed is unknown, defaulting to 1000
[ 1508.676970][T17238] input: syz0 as /devices/virtual/input/input33
[ 1509.285022][T13112] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1509.454392][T13112] usb 1-1: Using ep0 maxpacket: 8
[ 1509.466438][T13112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.484463][T13112] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1509.494786][T13112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.536541][T13112] usb 1-1: config 0 descriptor??
[ 1509.545783][T13112] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1509.658419][T17268] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[ 1510.143857][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2623'.
[ 1510.156999][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2623'.
[ 1510.241620][T17294] netlink: 'syz.3.2625': attribute type 4 has an invalid length.
[ 1510.264026][T17294] netlink: 'syz.3.2625': attribute type 4 has an invalid length.
[ 1510.769667][T13112] gspca_vc032x: reg_w err -71
[ 1510.779737][T13112] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[ 1510.807886][T13112] usb 1-1: USB disconnect, device number 15
[ 1511.083690][   T30] audit: type=1400 audit(1752662744.724:590): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17305 comm="syz.1.2632"
[ 1511.459218][T17322] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1511.903661][T15802] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1512.064871][T15802] usb 1-1: Using ep0 maxpacket: 32
[ 1512.089280][T15802] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1512.119501][T15802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1512.145201][T15802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1512.175547][T15802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1512.210797][T15802] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[ 1512.248911][T15802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.279114][T15802] usb 1-1: config 0 descriptor??
[ 1512.728795][T15802] uclogic 0003:2179:0077.0010: interface is invalid, ignoring
[ 1512.848264][T17370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1512.892836][ T8873] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1512.929489][T15802] usb 1-1: USB disconnect, device number 16
[ 1513.072732][ T8873] usb 5-1: Using ep0 maxpacket: 8
[ 1513.087056][ T8873] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 1513.107003][ T8873] usb 5-1: config 0 has no interface number 0
[ 1513.118587][ T8873] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1513.131867][ T8873] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1513.145249][ T8873] usb 5-1: config 0 interface 55 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1513.160996][ T8873] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1513.181124][ T8873] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1513.191914][ T8873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.225011][ T8873] usb 5-1: config 0 descriptor??
[ 1513.256324][ T8873] ldusb 5-1:0.55: Interrupt in endpoint not found
[ 1513.357523][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'.
[ 1513.506413][T13112] usb 5-1: USB disconnect, device number 35
[ 1513.762398][ T8873] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[ 1513.852242][T15802] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1513.934142][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1513.949866][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1513.965902][ T8873] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[ 1513.992103][ T8873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.014032][ T8873] usb 1-1: config 0 descriptor??
[ 1514.027045][T15802] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1514.040644][T17379] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1514.060125][T15802] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1514.095505][T15802] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1514.120947][T15802] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1514.139965][T15802] usb 4-1: Product: syz
[ 1514.166143][T15802] usb 4-1: Manufacturer: syz
[ 1514.176958][T15802] usb 4-1: SerialNumber: syz
[ 1514.206617][T15802] usb 4-1: config 0 descriptor??
[ 1514.245200][T15802] usb 4-1: selecting invalid altsetting 0
[ 1514.428212][T15802] usb 4-1: USB disconnect, device number 18
[ 1514.472615][T13029] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1514.494627][ T8873] apple 0003:05AC:0232.0011: item fetching failed at offset 2/69
[ 1514.546462][ T8873] apple 0003:05AC:0232.0011: parse failed
[ 1514.552639][ T8873] apple 0003:05AC:0232.0011: probe with driver apple failed with error -22
[ 1514.634118][T13029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1514.648412][T13029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1514.664805][T13029] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1514.675452][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.683998][T13029] usb 5-1: Product: syz
[ 1514.688216][T13029] usb 5-1: Manufacturer: syz
[ 1514.703876][T13029] usb 5-1: SerialNumber: syz
[ 1514.725375][T13029] usb 5-1: config 0 descriptor??
[ 1514.730152][T15802] usb 1-1: USB disconnect, device number 17
[ 1514.741398][T17407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1514.761418][T17407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1514.986045][T17407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1514.999695][T17407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1515.220084][   T30] audit: type=1400 audit(1752662748.866:591): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17428 comm="syz.1.2685" daddr=fe80::
[ 1515.444754][T17437] netlink: 'syz.3.2690': attribute type 4 has an invalid length.
[ 1515.455337][T13029] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1515.630517][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'.
[ 1515.637245][T17443] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1515.642080][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'.
[ 1515.801367][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1516.057904][T13029] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[ 1516.090548][T13029] usb 5-1: USB disconnect, device number 36
[ 1516.127745][T17454] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2697'.
[ 1516.855804][T17474] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2702'.
[ 1517.507402][T17477] syzkaller1: entered promiscuous mode
[ 1517.528332][T17477] syzkaller1: entered allmulticast mode
[ 1517.559539][T17481] netlink: 'syz.4.2706': attribute type 10 has an invalid length.
[ 1518.873663][   T30] audit: type=1400 audit(1752662752.528:592): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17521 comm="syz.4.2723" daddr=fe80::
[ 1519.045997][T17527] lo speed is unknown, defaulting to 1000
[ 1519.156849][T17532] lo speed is unknown, defaulting to 1000
[ 1519.798255][T17540] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 1519.986592][   T30] audit: type=1800 audit(1752662753.638:593): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2731" name="file1" dev="tmpfs" ino=3937 res=0 errno=0
[ 1520.152361][T17552] 
[ 1520.154763][T17552] ======================================================
[ 1520.161810][T17552] WARNING: possible circular locking dependency detected
[ 1520.168882][T17552] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted
[ 1520.176038][T17552] ------------------------------------------------------
[ 1520.183086][T17552] syz.3.2735/17552 is trying to acquire lock:
[ 1520.189183][T17552] ffff88805626e488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.198618][T17552] 
[ 1520.198618][T17552] but task is already holding lock:
[ 1520.206079][T17552] ffff8880284c0c68 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e6/0x1000
[ 1520.215805][T17552] 
[ 1520.215805][T17552] which lock already depends on the new lock.
[ 1520.215805][T17552] 
[ 1520.226218][T17552] 
[ 1520.226218][T17552] the existing dependency chain (in reverse order) is:
[ 1520.235241][T17552] 
[ 1520.235241][T17552] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[ 1520.242649][T17552]        lock_acquire+0x120/0x360
[ 1520.247695][T17552]        __mutex_lock+0x182/0xe80
[ 1520.252732][T17552]        anon_pipe_write+0x16a/0x1360
[ 1520.258132][T17552]        __kernel_write_iter+0x3ec/0x860
[ 1520.263775][T17552]        __kernel_write+0xef/0x150
[ 1520.268905][T17552]        autofs_notify_daemon+0x748/0xe50
[ 1520.274638][T17552]        autofs_wait+0x11dc/0x1870
[ 1520.279800][T17552]        autofs_mount_wait+0x16b/0x330
[ 1520.285297][T17552]        autofs_d_automount+0x393/0x720
[ 1520.290859][T17552]        __traverse_mounts+0x308/0x5b0
[ 1520.296324][T17552]        step_into+0x534/0xf30
[ 1520.301094][T17552]        path_lookupat+0x163/0x430
[ 1520.306223][T17552]        filename_lookup+0x212/0x570
[ 1520.311513][T17552]        kern_path+0x35/0x50
[ 1520.316106][T17552]        lookup_bdev+0xc0/0x280
[ 1520.320961][T17552]        resume_store+0x169/0x460
[ 1520.325998][T17552]        kernfs_fop_write_iter+0x378/0x4f0
[ 1520.331817][T17552]        vfs_write+0x54b/0xa90
[ 1520.336616][T17552]        ksys_write+0x145/0x250
[ 1520.341484][T17552]        do_syscall_64+0xfa/0x3b0
[ 1520.346538][T17552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.352977][T17552] 
[ 1520.352977][T17552] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1520.360732][T17552]        lock_acquire+0x120/0x360
[ 1520.365765][T17552]        __mutex_lock+0x182/0xe80
[ 1520.370803][T17552]        autofs_notify_daemon+0x735/0xe50
[ 1520.376542][T17552]        autofs_wait+0x11dc/0x1870
[ 1520.381688][T17552]        autofs_mount_wait+0x16b/0x330
[ 1520.387175][T17552]        autofs_d_automount+0x393/0x720
[ 1520.392774][T17552]        __traverse_mounts+0x308/0x5b0
[ 1520.398344][T17552]        step_into+0x534/0xf30
[ 1520.403113][T17552]        path_lookupat+0x163/0x430
[ 1520.408236][T17552]        filename_lookup+0x212/0x570
[ 1520.413532][T17552]        kern_path+0x35/0x50
[ 1520.418140][T17552]        lookup_bdev+0xc0/0x280
[ 1520.422998][T17552]        resume_store+0x169/0x460
[ 1520.428033][T17552]        kernfs_fop_write_iter+0x378/0x4f0
[ 1520.433853][T17552]        vfs_write+0x54b/0xa90
[ 1520.438632][T17552]        ksys_write+0x145/0x250
[ 1520.443496][T17552]        do_syscall_64+0xfa/0x3b0
[ 1520.448525][T17552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.454945][T17552] 
[ 1520.454945][T17552] -> #0 (&of->mutex){+.+.}-{4:4}:
[ 1520.462182][T17552]        validate_chain+0xb9b/0x2140
[ 1520.467479][T17552]        __lock_acquire+0xab9/0xd20
[ 1520.472684][T17552]        lock_acquire+0x120/0x360
[ 1520.477714][T17552]        __mutex_lock+0x182/0xe80
[ 1520.482745][T17552]        kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.488569][T17552]        iter_file_splice_write+0x937/0x1000
[ 1520.494564][T17552]        do_splice+0xc79/0x1660
[ 1520.499432][T17552]        __se_sys_splice+0x2e1/0x460
[ 1520.504734][T17552]        do_syscall_64+0xfa/0x3b0
[ 1520.509763][T17552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.516183][T17552] 
[ 1520.516183][T17552] other info that might help us debug this:
[ 1520.516183][T17552] 
[ 1520.526464][T17552] Chain exists of:
[ 1520.526464][T17552]   &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex
[ 1520.526464][T17552] 
[ 1520.538917][T17552]  Possible unsafe locking scenario:
[ 1520.538917][T17552] 
[ 1520.546370][T17552]        CPU0                    CPU1
[ 1520.551739][T17552]        ----                    ----
[ 1520.557108][T17552]   lock(&pipe->mutex);
[ 1520.561282][T17552]                                lock(&sbi->pipe_mutex);
[ 1520.568318][T17552]                                lock(&pipe->mutex);
[ 1520.575006][T17552]   lock(&of->mutex);
[ 1520.579002][T17552] 
[ 1520.579002][T17552]  *** DEADLOCK ***
[ 1520.579002][T17552] 
[ 1520.587151][T17552] 2 locks held by syz.3.2735/17552:
[ 1520.592358][T17552]  #0: ffff888076da6428 (sb_writers#10){.+.+}-{0:0}, at: do_splice+0xbff/0x1660
[ 1520.601455][T17552]  #1: ffff8880284c0c68 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e6/0x1000
[ 1520.611581][T17552] 
[ 1520.611581][T17552] stack backtrace:
[ 1520.617475][T17552] CPU: 0 UID: 0 PID: 17552 Comm: syz.3.2735 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 1520.617497][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1520.617508][T17552] Call Trace:
[ 1520.617517][T17552]  <TASK>
[ 1520.617526][T17552]  dump_stack_lvl+0x189/0x250
[ 1520.617549][T17552]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1520.617568][T17552]  ? __pfx__printk+0x10/0x10
[ 1520.617590][T17552]  ? print_lock_name+0xde/0x100
[ 1520.617612][T17552]  print_circular_bug+0x2ee/0x310
[ 1520.617634][T17552]  check_noncircular+0x134/0x160
[ 1520.617656][T17552]  validate_chain+0xb9b/0x2140
[ 1520.617681][T17552]  ? look_up_lock_class+0x74/0x170
[ 1520.617707][T17552]  ? register_lock_class+0x51/0x320
[ 1520.617725][T17552]  __lock_acquire+0xab9/0xd20
[ 1520.617742][T17552]  ? kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.617763][T17552]  lock_acquire+0x120/0x360
[ 1520.617777][T17552]  ? kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.617804][T17552]  __mutex_lock+0x182/0xe80
[ 1520.617819][T17552]  ? kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.617842][T17552]  ? _copy_from_iter+0xa33/0x16f0
[ 1520.617865][T17552]  ? kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.617888][T17552]  ? __pfx___mutex_lock+0x10/0x10
[ 1520.617903][T17552]  ? __pfx__copy_from_iter+0x10/0x10
[ 1520.617919][T17552]  ? rcu_is_watching+0x15/0xb0
[ 1520.617937][T17552]  ? trace_kmalloc+0x1f/0xd0
[ 1520.617959][T17552]  ? kernfs_fop_write_iter+0x158/0x4f0
[ 1520.617982][T17552]  kernfs_fop_write_iter+0x1e0/0x4f0
[ 1520.618006][T17552]  iter_file_splice_write+0x937/0x1000
[ 1520.618041][T17552]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1520.618067][T17552]  ? rcu_read_lock_any_held+0xb3/0x120
[ 1520.618092][T17552]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1520.618118][T17552]  do_splice+0xc79/0x1660
[ 1520.618152][T17552]  ? __pfx_do_splice+0x10/0x10
[ 1520.618180][T17552]  __se_sys_splice+0x2e1/0x460
[ 1520.618207][T17552]  ? __pfx___se_sys_splice+0x10/0x10
[ 1520.618232][T17552]  ? rcu_is_watching+0x15/0xb0
[ 1520.618251][T17552]  ? __x64_sys_splice+0x21/0xf0
[ 1520.618277][T17552]  do_syscall_64+0xfa/0x3b0
[ 1520.618292][T17552]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1520.618316][T17552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.618332][T17552]  ? clear_bhb_loop+0x60/0xb0
[ 1520.618351][T17552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1520.618368][T17552] RIP: 0033:0x7f6a32d8e929
[ 1520.618395][T17552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1520.618409][T17552] RSP: 002b:00007f6a33bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1520.618427][T17552] RAX: ffffffffffffffda RBX: 00007f6a32fb5fa0 RCX: 00007f6a32d8e929
[ 1520.618439][T17552] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003
[ 1520.618449][T17552] RBP: 00007f6a32e10b39 R08: 0000000000000008 R09: 0000000000000000
[ 1520.618459][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1520.618469][T17552] R13: 0000000000000000 R14: 00007f6a32fb5fa0 R15: 00007ffc9706aa18
[ 1520.618488][T17552]  </TASK>
[ 1520.988761][T15802] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1521.160565][T15802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.170884][T15802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1521.180942][T15802] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1521.190092][T15802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1521.198104][T15802] usb 1-1: SerialNumber: syz
[ 1521.415464][T15802] usb 1-1: 0:2 : does not exist
[ 1521.433096][T15802] usb 1-1: USB disconnect, device number 18
[ 1521.453012][T15731] udevd[15731]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory