last executing test programs:

7m15.381708765s ago: executing program 32 (id=453):
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040))
connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
kexec_load(0x1a1d6977, 0x1, &(0x7f00000009c0)=[{&(0x7f00000008c0)="fe05f0595ee687b6a6694e46aaa6856684f4430807118a3263a336ea3c3fa26dddbd68c0c9d2ad25da15b5fdf9c621a88502a21d939177e454061e392d604fb411335972b49a10123623971315a9fb06e238f5acf4d439ee1765718e005153439dc72eede5a508ca0dcd41e71385db5eeb73a45e51334da4a307a7a1aee7c27d7cc28ba10cfbb3e57e324d7b7adb6873e90b0f4e4462ba87d5dbbf7d5260349adc715dd7eacc682201cb2c7611c4fcbe7706388675940fca3493da007434225443d3f3409c922363ddc89fc295711d317e0173ecb6e35543e4d2ca1cfe8a5db2e8792c97c578", 0xe6, 0x3, 0x1}], 0x80000)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x0, 0x10, 0x4009}, 'syz0\x00', 0x9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@initdev, <r4=>0x0}, &(0x7f00000003c0)=0x14)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000004000000000011f98552559875727bb896d4f285"], 0x50)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000480)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r9}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r11], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r12, 0x0, 0x0}, 0x20)
r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x4860c0, 0x0)
r14 = syz_clone(0xb00200, 0x0, 0x0, 0x0, 0x0, 0x0)
r15 = syz_open_procfs(r14, &(0x7f0000000040)='wchan\x00')
pread64(r15, &(0x7f0000000140)=""/15, 0xf, 0x4)
r16 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r17 = dup(r16)
sendfile(r16, r17, 0x0, 0x80006)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, <r18=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x55}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x75, &(0x7f0000000300)=""/117, 0x40f00, 0x7b, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x8, 0x1e400000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r5, r6, r7, r12, 0xffffffffffffffff, r13, r15, r17, r0, r18], &(0x7f00000006c0)=[{0x4, 0x2, 0xd, 0x8}, {0x1, 0x2, 0x1, 0xc}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x1, 0x87, 0x4}, {0x3, 0x3, 0xe, 0x4}, {0x1, 0x5, 0x8, 0x4}, {0x0, 0x3, 0xb, 0x2}, {0x3, 0x2, 0xe, 0x2}], 0x10, 0xb5d5, @void, @value}, 0x94)

5m55.669295858s ago: executing program 33 (id=800):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1804, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

5m29.99513587s ago: executing program 34 (id=904):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4c000)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x342d}}, './file0\x00'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020040}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delvlan={0x48, 0x71, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x48}}, 0xc0c0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10)

5m25.470416338s ago: executing program 35 (id=916):
mkdir(&(0x7f0000000400)='./file1\x00', 0x8) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
unshare(0x50080)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}}) (async)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090a0000000000001000000000030006006c0000000200000000000000000000000000000002000100010000000000060b00000000030005000000000002000000ac1414bb0000000001000000"], 0x50}, 0x1, 0x7}, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r5])
socket$nl_rdma(0x10, 0x3, 0x14) (async)
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5m19.92080465s ago: executing program 36 (id=945):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0x4})

3m13.018963643s ago: executing program 37 (id=1484):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x6fd})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e27, 0x402, @loopback, 0x20}], 0x1c)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xffffffff}, 0x1c)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4, 0x6, 0xce, 0x0, 0x9ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', '\x00', ["1af0b1ba1cb8fd54c9c939a1", '\x00\x00\x00\x00\n\x00', '\x00', "0e4a8ce4ea1c3c00"]})
r4 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x6, 0xfffffffffffffffe, 0x4, 0xffffffff, 0xff, 0x4063, "57c1169b6664ea61326ac71ae7213059"})
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0xe, 0x7}, &(0x7f00000005c0)=0x90)
pipe2$watch_queue(&(0x7f0000000480)={<r5=>0xffffffffffffffff}, 0x80)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000440)={0x40, 0x5, 0x2})
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000003c0))
dup2(0xffffffffffffffff, r6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
gettid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})

3m9.627639949s ago: executing program 38 (id=1499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1044)

2m42.231498875s ago: executing program 7 (id=1642):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2m42.060155654s ago: executing program 7 (id=1645):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000011006bcc9e3be35c6e17aa31076f876c1d0000007ea60864160af36514001ac008000f0007000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x600000, 0x8, 0x2}, 0x18)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"])
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x5fa, 0x8000, 0x9, 0x4}, {0x4, 0x1, 0x40, 0x5}}}, &(0x7f0000000140), 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00')
readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf8, 0x2, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x88, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xdaf}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xf8}}, 0x4004000)

2m27.04792651s ago: executing program 39 (id=1645):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000011006bcc9e3be35c6e17aa31076f876c1d0000007ea60864160af36514001ac008000f0007000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x600000, 0x8, 0x2}, 0x18)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"])
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x5fa, 0x8000, 0x9, 0x4}, {0x4, 0x1, 0x40, 0x5}}}, &(0x7f0000000140), 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00')
readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf8, 0x2, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x88, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xdaf}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xf8}}, 0x4004000)

2m3.911953324s ago: executing program 1 (id=1802):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioperm(0x0, 0x82, 0x1f)
sched_getattr(0x0, &(0x7f00000011c0)={0x38}, 0x38, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = inotify_init()
r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r8 = inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x8c7)
write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69)
close(r7)
r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0xe1, 0x0, 0xb88, 0x20303159, [0x8, 0x6], [0x8001, 0x7], 0x108}})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100))

2m2.780334287s ago: executing program 1 (id=1806):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x88002, @private2, 0x1}, 0x1c)

2m2.556271978s ago: executing program 1 (id=1809):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x8, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}}, 0xb8}}, 0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x8, 0x43, 0x0, 0x2, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x3ffd, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x2c}}, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x29)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r4, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x4e23, @loopback}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

2m1.44402104s ago: executing program 1 (id=1816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003300)={0x106c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf9d4, 0x25}}}}, [@NL80211_ATTR_TID_CONFIG={0x264, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x4, 0x0, 0xe, 0x2, 0x5de3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x3ff, 0x8, 0xff, 0xd9, 0x4, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x100, 0xffff, 0x81, 0x20e4, 0x95, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x5, 0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x7}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb20383ad58be5c1f, 0x6, 0xc, 0x12, 0x5, 0x5, 0x6, 0x3, 0x6c, 0x3, 0x0, 0xc, 0x24, 0x48, 0x36, 0x3, 0x48, 0x4, 0x1, 0x6c, 0x60]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x5}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x7}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x2}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x3}, {0x3, 0x9}, {0x5}, {}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0xa}, {0x6}, {0x1, 0x9}, {0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x1}, {}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0x3}, {0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x2, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x2}, {0x0, 0x7}, {0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xed5c, 0x1, 0x9, 0x1, 0x5, 0x5, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffc0, 0x200, 0x2, 0x7, 0x9, 0x6, 0x401, 0x8800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}]}]}, @NL80211_ATTR_TID_CONFIG={0x29c, 0x11d, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x4, 0x1, 0x30, 0x3, 0x2, 0x2, 0x24, 0x60, 0x16, 0xb, 0x5, 0x6, 0x36, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xd7, 0x1, 0x2, 0x4, 0x101, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x0, 0x2, 0x1, 0x9, 0x800, 0xfffc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x1b, 0xc, 0x30, 0x4, 0x12, 0x18, 0xb, 0x9, 0x1, 0x1, 0x5, 0x1b, 0x9, 0x6c, 0x95b58b4606c3130, 0x60, 0x18, 0x1b]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x6}, {0x6, 0x3}, {0x7, 0x4}, {0x2}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x3}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x8}, {0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0x18}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x7}, {0x6, 0x3}, {0x3}, {0x5, 0x9}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {}, {0x2, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {}, {0x0, 0xa}, {0x0, 0x9}, {}, {0x6}, {0x2, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x8, 0xf64a, 0x9, 0x247f, 0x4, 0x2]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x30, 0x0, 0x6fc, 0xd, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x5}, {0x3, 0x1}, {0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x2}, {0x6, 0xa}, {}, {0x5, 0x2}, {0x5, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x7}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x7}, {0x2}, {0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x5, 0x5, 0x81, 0x6, 0x4, 0x401]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x7}, {0x3, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb7ba, 0xd89, 0x8, 0x7, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x0, 0x0, 0x24]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x4, 0x2}, {0x5, 0x2}, {0x7}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0xfff9, 0x7, 0x9, 0x5, 0x8, 0xfbd4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xac, 0xc, 0x8, 0x7f, 0x3800, 0x30, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8, 0x100, 0x5, 0x1575, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x5, 0x9, 0xffff, 0x5, 0x3, 0x817e]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x3, 0x8}, {}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x5, 0x5}, {0x6}, {0x0, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x8}, {0x1}, {0x7, 0x8}, {0x7}, {0x0, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}]}]}, @NL80211_ATTR_TID_CONFIG={0x32c, 0x11d, 0x0, 0x1, [{0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x4, 0x6, 0x16, 0x24, 0xc, 0xc, 0x5, 0x48, 0x24, 0x60, 0xc, 0x16, 0xb, 0x6c, 0xc, 0x5, 0xc, 0x3, 0x6, 0x5, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1000, 0x3, 0x7, 0xfff1, 0x4fca, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x9, 0x5, 0x12, 0x2, 0x2, 0x36, 0x9, 0x5, 0x2, 0x16, 0x6c, 0x48, 0x36, 0x0, 0x9, 0x30, 0x6c, 0xb, 0x36, 0x1, 0x5, 0x1b, 0x24, 0x5, 0xc, 0x5, 0x1b, 0x16, 0x2]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x7, 0x5, 0x0, 0x2, 0x9, 0xc]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x5, 0xe, 0x9, 0x3, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xca, 0x7, 0x100, 0xfffd, 0x400, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x0, 0x476d, 0xe, 0x1, 0x5, 0x1, 0xb30]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3, 0x6, 0x81, 0xfff7, 0x5, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x9, 0x0, 0x1, 0x0, 0xfff7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x2373, 0x3, 0x1, 0x7f, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x200, 0x3, 0xa388, 0x1a6, 0x5e5, 0x2, 0x3617]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd94a, 0xfffb, 0x6, 0xc71, 0x8, 0x9, 0x6]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x36, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x2, 0x43, 0x5, 0xb, 0x47, 0xb, 0xd, 0x60, 0x6b, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x3e, 0x9, 0x2, 0x6, 0x0, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7, 0x3, 0x8, 0x9, 0x1, 0x7, 0xd35f]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x36, 0x24, 0x4, 0x1, 0x36, 0xb, 0x3, 0x6c, 0x6, 0x60, 0x5f, 0x12, 0xc, 0x18, 0xc, 0x24, 0x6, 0x9, 0x24, 0x6a, 0x12, 0xb, 0x60]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x48, 0xc, 0x3, 0x4071167199836c48, 0x30, 0x12, 0x30, 0xb, 0x6, 0x1b, 0x24, 0x24, 0xc, 0xc, 0x1, 0xa, 0x24, 0x2, 0x4, 0x30]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x100, 0x5, 0x4, 0x3, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0xb, 0x5, 0x30, 0x18, 0x60, 0x3, 0x60, 0xc, 0x24, 0x2, 0x60, 0x6, 0x30, 0x77]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x1, 0x8, 0x7fff, 0x9, 0x401, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x588, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x45}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x93}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xe6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x3, 0x401, 0xdfe5, 0x1, 0x9, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x60, 0x9, 0x9, 0x6c, 0x9, 0x60, 0x30, 0xc, 0xc, 0xb, 0x3, 0x18, 0x1, 0x0, 0x12, 0x9, 0x48, 0x6c, 0x6c, 0x1b, 0x16]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0xde, 0x3, 0x2, 0x2, 0x5cd, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x7ff, 0x2, 0xb, 0x8418, 0x3ff, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x18, 0x0, 0x0, 0x1b, 0x6c, 0x2, 0x18, 0xc, 0xb]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x4}, {0x0, 0x7}, {0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x7}, {0x5}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x2}, {0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x2}, {0x1, 0x3}, {0x3}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0xa}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0x261, 0x8, 0x1000, 0x9, 0x4b3e, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x380, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x1b, 0x48, 0x3, 0x16, 0x6, 0x3, 0x1, 0x0, 0xb, 0xc, 0x60, 0x4, 0x9, 0x16, 0x60, 0x30, 0x16, 0x3, 0x16, 0x18, 0xc, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5913, 0xfffd, 0x7f, 0x9, 0xb1, 0x1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x9, 0x5, 0x4, 0x24, 0xb, 0x4, 0x30, 0x3, 0xb, 0xb, 0xb, 0x60, 0x36, 0x60, 0x48, 0x4d, 0x2, 0x60, 0x6, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x401, 0x6e5f, 0x10, 0xff, 0xa, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x4}, {0x1, 0x7}, {0x2, 0xa}, {0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x6}, {}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x19, 0x8, 0x9, 0x3, 0xff, 0xdd5c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x401, 0x1, 0xe8e0, 0x3, 0xa421, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x7f, 0x69d8, 0x5, 0x80, 0xe, 0x1e]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x5, 0xb0, 0x100, 0x6, 0x4, 0xd82]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x800, 0xa, 0x4, 0x3, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3c33, 0x9, 0x8000, 0x2, 0x8, 0x401, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x2, 0x7, 0x3, 0x2, 0x7fff, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x6, 0x2, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x60, 0x6, 0x60, 0x3, 0x16, 0x5, 0x18, 0x2, 0x24, 0x16, 0x12, 0x5, 0xb, 0x2, 0x30, 0x1b, 0xc, 0x1b, 0x3, 0x16, 0x3, 0x30, 0x60, 0x1b, 0x9, 0x18, 0x1b, 0x2, 0x12, 0x3, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x9, 0x0, 0x4, 0x401, 0xb9a, 0xe]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xb, 0x18, 0x24, 0x1b, 0x4, 0x1b, 0x30, 0x2, 0x36, 0x1, 0x6c, 0x60, 0x2, 0x6, 0x6, 0x12, 0x4, 0x48, 0x30, 0x5, 0x24]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x9}, {0x2}, {0x2, 0x1}, {0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x4}, {0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x3}, {0x6, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x4, 0x1}, {}, {0x0, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x7, 0x7, 0x5, 0xd, 0x380, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0x22f, 0x2, 0x0, 0x8000, 0xbe38]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf425, 0xfff7, 0x6, 0x3, 0x8, 0x0, 0xd, 0xb3c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x9, 0x3, 0x8000, 0x2, 0x9, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x80, 0x2, 0x736, 0x3b, 0x5, 0xb39, 0x6]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0xb, 0x1, 0x48, 0x60, 0x36, 0x36, 0x48]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x1, 0x16, 0x12, 0x3, 0x18, 0x9, 0x6, 0x30, 0x30, 0x1b, 0xb, 0x6, 0xcf45389f2f7da30c, 0x18, 0x9, 0x5, 0x3, 0x1b, 0x12, 0x1b, 0x1, 0x50, 0x4, 0xb, 0x16, 0x1, 0x9, 0x36, 0x4, 0x36, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x1ff, 0x7, 0x5, 0x2, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x5, 0x1, 0x7e, 0x18, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x7ff, 0xc, 0x2, 0x3ff, 0x4, 0x7ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3a76}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb61, 0x7, 0x0, 0xcaa, 0x1, 0x9, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xf31a, 0xff, 0x8, 0xa, 0xe, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x9}, {0x1}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x5, 0x1}, {0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x1a}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x9, 0xd, 0x5, 0xfff7, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x4, 0xd, 0xde14, 0x1, 0x800, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x8000, 0x3, 0x5, 0xe2, 0x3, 0xfbff]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x8}, {0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x4}, {0x6, 0x4}, {0x4}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff, 0xa753, 0x0, 0x59, 0x3, 0xe5, 0x9000]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x3fc0, 0x6, 0x3, 0x7, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x5}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x2}, {0x6}, {0x3}, {0x0, 0x9}, {0x2}, {0x6, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x9, 0xfff, 0x5, 0x0, 0x5, 0x7ff, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}]}]}]}, 0x106c}, 0x1, 0x0, 0x0, 0x40001}, 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r5 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0)
getdents(r5, &(0x7f0000001280)=""/4075, 0xffb)

1m59.782373521s ago: executing program 1 (id=1821):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

1m58.833254644s ago: executing program 1 (id=1827):
openat$vicodec1(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x11}}, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xe000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_uring_setup(0x6db7, &(0x7f00000003c0)={0x0, 0x6c51, 0x0, 0x1, 0x321, 0x0, r2})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendto$x25(r7, &(0x7f0000000540)="10cd22", 0x3, 0x20008880, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x33, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e08000111ea78cd83c352435b811ce1c019078000000000000000000000000986220f304ff46d008d4a13632e344d62016188b4f6cd01d0eca7e041a1318d353db43e768a5a040fdee0546c4327fb7306cb089319ca5f083ac474ef5c6d344090000009723e474d4f90766592134b732c7575f0dbd02789e7093f649a892fdd9f09907c28983f2"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r0], 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x808)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1m47.435322722s ago: executing program 40 (id=1811):
unshare(0x68040200)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000500000002000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000421927c5d6198372d3b142f90e634299bdd82710cd315147da512db35531912ee3fbe5cc3dd381bdb7d8a915b42b559df7ec7d56b8c8dc16cfaf5116c811c1173a43fdfc58107feca2de05948b597209a5301cc74137a29cd221", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async)
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) (async)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r4, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0xfffffffffffffff5, 0x1000000000000, {{0x3, 0xec, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$nl_generic(r3, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3f8, 0x2b, 0x100, 0x70bd25, 0x25dfdbff, {0xa}, [@nested={0x189, 0x18, 0x0, 0x1, [@typed={0x4, 0x8d}, @generic="73dc928d5ffa9df717b9e4fb77643f6c31d1b209e47d2b90a3cba97707b12cf472243739b303654e6fd99a4a846ec7cd3ce266c7beef423dd5f35348e362bc75397eb0407be08523bb58825b2410b9ffcdd847faaef03c4bbf9097", @generic="f3dbdbc6519bc3e45bfb8f9649c17295636ca54c935ff43bc4dd138a078fc2fe9bacb22886c80544082a83e59ab68bf18c3ee59c9e8cf31889d2d1783f1019c6890f86e5c4bcd9a5add8db565329d33d6547285815c5af44cf4a2404d3dbe48871886e175e75436b95b4d33d79d61646f26b398204c86d9123e6ef970f2ab4dc505bc5ed8174ca74e79306c3634f73d1f6878ba9956fe4ddec42fc14512d50778610", @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x3}, @generic="404844628fa98b3b264fac092c0c0da36db52552560d4ae42605bb702216d2624716ac60c7769b386ae1e082e4dd90d9e1fcb1cb518e587094551001e76a710e8530644be2c5557a931b7b40f42efecda62cc03d31dbebd6a39fee2fba1bc87a226f1bfdf4280c5d2b7bd2f1", @nested={0x4, 0x25}, @nested={0x4, 0x59}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r2}]}, @nested={0xb8, 0x7c, 0x0, 0x1, [@generic="7e63f6048fad217985c81be0d6fd2d20e9a018b80a2f3f47c174296fc132acbfbbcf8edf23093ae8d31a917e523a2032950c83c45c3dfea3f315ff24e7f03836e02b90ab749359acee9a104093a8fb49718ca387c8f095dcbf241916b7822661d7ab246959fb9c124cd4b8f0fc2c8aee8bb0339dbebe479b58c09625438ec78aa05675ba414054a7d65143165ddeb3de7f148f72ea2170edd6ceb368c32bbd10a0726351b083de7af7d10923287b04c6c0ccdfd3"]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x9}, @nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x143}]}, @typed={0x8, 0x5e, 0x0, 0x0, @pid=r6}, @generic="d0acd173eeac510ba880350618895a498c402dac4da6e173fc715bbda8a91994fdef0b1a4ed6ba22ce090920f6888eca08881ac1722712a201cfe773c84d78dedd5bc2d9eed3ac3b64249a6a44d6460c315762864aa4d700996f87af3729a70dd51119ce64f19e4f76bdb0a79da8b4c736a1d7393ddbb96a2a91fd482e718bdf98d48d2445e59c25e284ad6a343efc5c0106321dfabe2f", @generic="17aaefd83b716638d98b2f9e732ec6d01176dcf01ad14a686f9dca660c93302f4aacf1516e04737f10026b4e1f7e52bdfac6caae07c8ca705c6bf411498540f5f34613242811a84f62ce3ef81db126b112b7144e4498c63b419bc81b52719437cc5a97e1b3d7ac2bad18a9a58849f67f7e4179e76e310faf95ee9019b8d7b530e35627e540796362212afe1cebe149fc10158728d45ae17bb248f5d2ab06c99e351a589da035b6ea63aa", @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="2d53f9807c252aaace9eb037fdee21693c76def36493dbec94a1d59ba3277dbd20b4f45bb9a8fcc115cdf10ae62f6107f9fef00bb9b406f36025"]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40080}, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
close_range(r8, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) (async)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x81, 0x4000105, 0x10001, 0x8001, 0x9]}, &(0x7f0000000400)=0x54)

1m42.80912172s ago: executing program 41 (id=1827):
openat$vicodec1(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x11}}, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xe000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_uring_setup(0x6db7, &(0x7f00000003c0)={0x0, 0x6c51, 0x0, 0x1, 0x321, 0x0, r2})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendto$x25(r7, &(0x7f0000000540)="10cd22", 0x3, 0x20008880, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x33, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e08000111ea78cd83c352435b811ce1c019078000000000000000000000000986220f304ff46d008d4a13632e344d62016188b4f6cd01d0eca7e041a1318d353db43e768a5a040fdee0546c4327fb7306cb089319ca5f083ac474ef5c6d344090000009723e474d4f90766592134b732c7575f0dbd02789e7093f649a892fdd9f09907c28983f2"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r0], 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x808)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1m8.377040354s ago: executing program 8 (id=2009):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
io_setup(0x8, &(0x7f0000000600)=<r3=>0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x82)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x400000}])
listen(r2, 0x40)

1m6.866960389s ago: executing program 4 (id=2017):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006240)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
writev(r3, 0x0, 0x0)
r4 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0)
ftruncate(r4, 0x51a9497)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), &(0x7f0000000140)=0x14)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1m6.412374931s ago: executing program 8 (id=2018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x40)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1m6.242356479s ago: executing program 4 (id=2020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1804, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

1m6.230426174s ago: executing program 8 (id=2021):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x8500, 0x110}, 0x18)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x6}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x44000)

1m4.796004122s ago: executing program 8 (id=2024):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
setresuid(0x0, 0xee01, 0xee00)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x300000000000000, 0x0)

1m4.230485842s ago: executing program 8 (id=2027):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(0x0, 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

1m3.114168776s ago: executing program 4 (id=2031):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async)
r0 = gettid()
rt_tgsigqueueinfo(0x0, r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async)
io_uring_setup(0x4111, &(0x7f0000000200)={0x0, 0x10000000, 0x0, 0xfdfffffc, 0xd8}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x3, r5, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x3, @private1, 0x1}}}, 0xa0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
signalfd(r4, &(0x7f0000000080)={[0x9]}, 0x8) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)
r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4c202, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1m2.6874694s ago: executing program 8 (id=2032):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e76862b97e45d3f81c93bc1c3ed41116033905b9196b45c350674ea38f8cd38410daa63dfa57a7f77bd41063b5fd2e6fdfe5351ebbc5dc5944c5acc2c86d4771fa6442e0762644173ede749c058360cec81d53b0ee58670af9516ea083ae5ee13951176c6648dd6600b553c7e91e12422e27a1c80caca732fbe361274c877da67f7917dfaecaafdd99cb380a3b41e99dbeca1b852b03553414be47e8f1505ac483751079e72d77b04f543b9afa1a32aa876a8be9a0a87b4aa099350c06c115e637239efe8950"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x0, 0x7, 0x4, 0x3, 0xad, 0x6, 0x4, 0x1}}}, 0x120)
r4 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000700)=0xe8)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5})
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fab05216380652ef0000000000000000000000008e5ec64b84d7ad3dcab40366ef6ec19ddc40644a34cf7783a408550f9f3c6167602e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000c0ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000030000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m2.491358126s ago: executing program 4 (id=2036):
syz_open_dev$sg(&(0x7f0000000240), 0x1, 0x105000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4, 0xc)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x874, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = fcntl$dupfd(r2, 0x406, r2)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000001a80))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x13, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0xa4}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m1.145339904s ago: executing program 4 (id=2042):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, 0x0, 0x0)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

1m0.738058526s ago: executing program 2 (id=2046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x4000000)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
r11 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010210010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r11, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x30, 0x14, {0x14, 0xa, "20880c1d761bce6542f60d1bd9e482d0aa4b"}}, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xe0, "34444e08571237573b837455e57b63968cb3ae204becd10e3fb6e7cadc31b17364bf21e0f3458e562b6ffe477230860a482b7c378b0291c05ffdfc3437eaf6bbce279557cd964f1ec3d68820d987fdf999ec2b133595a5c4463f75ff2cc8ff6d94cc65022433217718941711e9eff7eb7ba10ebe8bc86b7157be629818192e224c867984471547dc4db8bb9f18c90fc3aaca868dcfc175ee8004cc0634e89d2852c4eefe4996f44effa82b18f25480f64e6d2d4038a30b877dd8cdaf89a6b5ee4f2e89786bea9a88b572fce58d08ce342e1cd1088a50e075edb0b8805f19d7a6"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x8, 0x0, 0xe, 0x6, 0xd, 0x7, 0x7, 0x4, 0x5, 0x6}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2}})
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20005001}, 0x84)

1m0.181873585s ago: executing program 4 (id=2048):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887f"], 0x38}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100104b3ec10030478fa03000000030109021200010004004009049a0000a2"], 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080))

57.33105119s ago: executing program 2 (id=2053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000010000100f4ff0000000000000000000a40000000060a090400000000000000000200000014000480100001800c0001006e976711aa8198b34c00010073797a3000000000090002004f117a3200000000380000001c0a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0xa0}}, 0x0)

57.28264373s ago: executing program 2 (id=2055):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
rename(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x5}}, './file0\x00'})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = syz_io_uring_setup(0x76e9, &(0x7f0000000340)={0x0, 0x6aba, 0x40, 0x1, 0x82}, &(0x7f0000000600), &(0x7f0000000000))
io_uring_enter(r1, 0x1e05, 0xc4f6, 0x5a, &(0x7f00000000c0)={[0x10]}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0x0, 0x0)

56.365491406s ago: executing program 2 (id=2057):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11)
ioctl$TCSETS(r3, 0x8910, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x7, 0x0, "bb5dee4cbd49ae22ae0200"})
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB])
r4 = syz_open_procfs(0x0, 0x0)
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"})

55.458240747s ago: executing program 2 (id=2058):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, 0x0, 0x0)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

54.759183708s ago: executing program 0 (id=2060):
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0xffffffffffefffff, 0x400}, 0x10)

54.535344253s ago: executing program 2 (id=2061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045009, &(0x7f0000000040))
getrlimit(0x2, &(0x7f0000000140))
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r3}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677220f8705f69643d", @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)

53.840123855s ago: executing program 0 (id=2062):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c08, 0x0)
read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="e6b4", 0x2}], 0x1)
syz_usb_disconnect(r0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/ip_vs_stats\x00')
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000280)=""/247, 0xf7}], 0x1, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="401113000000000000ef4281d22c16eebf6da24ae9af222bcd"], &(0x7f0000000b00)=ANY=[@ANYBLOB="00039e0000009e03be147ee73c7c2a86996f2c39dbca7548495af69ec42b212d29f988e2fe5a84b859e0f25db20bd5976f7849fe1356744d2484a4eb4052b5a20d39c069143f2208d394c74384926ecbd718c57937b088e5d0b75c142a52a822e26f7cd773e95e01ef51f34f8b0ccf4b805a9feb5b10215e659b6c20a193ff5575f82559568b18200da5d2f81df67d66f9fa1ab5d927c984cbc2ce278a272d02598745ee858be07389b245"], &(0x7f0000000100)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "99374aa197653a7f2f895bcd7b46a57f"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8e, 0x4, 0x2, 0xf00, 0x8, [0xff, 0x0, 0x30, 0x0]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x5, 0x67, "87f200f4", "f9052425"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0xfe, 0x0, 0xfc, 0xf}}}, &(0x7f00000007c0)={0x9e, &(0x7f0000000400)={0x40, 0x17, 0xce, "45bc147058e6d42c0efe0a227de43e4e04f077471b4447395cf89ed92678c0d4236e09c14606a8882a8362749a61a2071e962954bb2aff157e06b6348e9b8e8ded42b2c89ec90414bcddb37cd2944464daecc5ff880f16e13fc992760799ad974d5a2de9b001f2ec9210e85d915ff122e8a6ae53b8c6fd9c6f0ce7ceda75a32e33d13004a9291620a5502baf2540bc968d147be0b2ece50e50b131dbfb7d89e30cd234dc106697672d0caee0621ef29c138586507cdcb239ef1ce0d4e430befd8529ec3a8d5cf6a82e62d50299ac"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x27}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000880)=ANY=[@ANYBLOB="2000085b00000000000000000000000000009019ef517846bff6c1c1a00350cb207dca5f7b6fea4ce352410e44b7d0b11e626abc119fe624506ec98789d2915e144f5c4824b6cee918c346a8161e3ad74b663b45657eae"], &(0x7f0000000380)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "b22a"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "83b3"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6d}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3}})
mount(&(0x7f0000000a00)=@md0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='tmpfs\x00', 0x12003, &(0x7f0000000ac0)='!,\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, &(0x7f0000000000)=0x100)
r5 = socket$inet(0x2, 0x3, 0x33)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="ac000000020601040000000000000000000000014400078008000b40000080001800028014000240fe8000000000000000000000000000aa05f00793192fcb624a5674001400040000000800174000000004080017400000000505001400090000000500010007000000050004000000000012000300686173683a6e65742c706f72740000000c00078008000840000000a4683a6e65742c616e65740000000005000100070000"], 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x10)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)
r8 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x201, 0x0)
writev(r8, &(0x7f0000000a40), 0x0)
socket$kcm(0x29, 0x2, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x0, 0x0, 0x7fff0000}]})
socket$l2tp(0x2, 0x2, 0x73)

50.628226782s ago: executing program 0 (id=2064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4000000000000000, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
brk(0x689d80000000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff32, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000009060102000000000000000003000000090002fd5dbfa1c810fee49d9aa90005000100070000e40800000000000000080d7a697c6647b78ee687d0000140fffffffe0c001480080001407f00000105000200280a419645e6a97669f64b907d972ca539ee8399bae40aeae7c790ef5b4bfda3ad1d1d3847b4843e47"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050)

48.744445911s ago: executing program 0 (id=2070):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x8, 0xe, &(0x7f00000001c0)="6530a273264a5a6630e7c452fe", 0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100001000, 0x1000000, 0x9, 0x0, 0x0, 0x2004c5, 0x8000000, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x3fd, 0x1], 0xeeee0000, 0x42800})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3)

48.188368804s ago: executing program 0 (id=2071):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, 0x0, 0x0)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

46.959451998s ago: executing program 42 (id=2032):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e76862b97e45d3f81c93bc1c3ed41116033905b9196b45c350674ea38f8cd38410daa63dfa57a7f77bd41063b5fd2e6fdfe5351ebbc5dc5944c5acc2c86d4771fa6442e0762644173ede749c058360cec81d53b0ee58670af9516ea083ae5ee13951176c6648dd6600b553c7e91e12422e27a1c80caca732fbe361274c877da67f7917dfaecaafdd99cb380a3b41e99dbeca1b852b03553414be47e8f1505ac483751079e72d77b04f543b9afa1a32aa876a8be9a0a87b4aa099350c06c115e637239efe8950"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x0, 0x7, 0x4, 0x3, 0xad, 0x6, 0x4, 0x1}}}, 0x120)
r4 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000700)=0xe8)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5})
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fab05216380652ef0000000000000000000000008e5ec64b84d7ad3dcab40366ef6ec19ddc40644a34cf7783a408550f9f3c6167602e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000c0ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000030000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

46.94972971s ago: executing program 0 (id=2075):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x30000)
r1 = epoll_create1(0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x23, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
open_by_handle_at(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

44.62913458s ago: executing program 43 (id=2048):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887f"], 0x38}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100104b3ec10030478fa03000000030109021200010004004009049a0000a2"], 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080))

39.444225491s ago: executing program 44 (id=2061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045009, &(0x7f0000000040))
getrlimit(0x2, &(0x7f0000000140))
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r3}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677220f8705f69643d", @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)

31.9316225s ago: executing program 45 (id=2075):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x30000)
r1 = epoll_create1(0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x23, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
open_by_handle_at(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

30.626134828s ago: executing program 7 (id=2089):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@bloom_filter={0x1e, 0x80000000, 0x6, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1})
io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000087c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="5cf1269bc7029e16db904a2de6e205646dcc84084711a452c86661627eb1559e9c9afe9c8cb879234d2b84e65e07", 0x2e}, {&(0x7f0000000400)="7bc9318d03c9fd99b504a0d578bb7bded3e16287fd0e194a0d594a022bac651ebc877ce8becb68590b8d52503b6394f4ee79320e3a147944f386b71a84e753bc3ead04332603741796b8158084e9c85d3b33c96f53125b91536865ce5471a4903eb2e51ea656ad0b97b0f1f8b3041f1727965151e48a3d955f5bab79580c86f67a2d678bfc6bf5c2f7d826370c3049ae15e7ebdc9e72497351022043a1c65a16778d5fdbef5a433271", 0xa9}, {&(0x7f00000004c0)="647263c525f9279c7cfef8002670c36a85fbc31b389f59d8b6777909157b2c02da1b4900d959386cc08de5fa9d430c092df9d48d3d6c53972b1cde5bb307346ae76e764e4bda23e0ddce995495537b3d36b15310c5c41906bb96700bf069204b10d44919f9b6e6852a044a8667e1f0c7699575816460005682626a11e7589e033e370cc541a37e46c9ce657951a432242ba78a78774b89dae2441089283213d69e7044f711207daaceeee6e9d1599dec1ce50873151e6d686b678bedd6af796e63259974e76a01", 0xc7}, {&(0x7f0000000100)="8b43bb420db731804232615732b49f154c2a3d556d6efd", 0x17}, {&(0x7f0000000300)="d1855c309bb9ae3592a54f2df82d35e92e1883fc7d61134851c6aed2589da07d6bd3f5b54824e1f7d4369cb4d584cf962aad285722c2", 0x36}], 0x5, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1, &(0x7f0000001780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r10, r9, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r9, r10, r11, r11, r11, r4, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001880)="cc9b5a6afc69d13ac2acf806001e2d12c0d64ad4cc9227ca042b1b0a883304af7fff1ad809f9261f02170da2356ec63b2f54f4ac80af9d976f452a33403ba835c35f8bdd22eeac082e8e6cc26dba2d0b94323ca046672d6f0d992677a64c5c7570ee588f23490c58830dc5fefaab15e45b16e5b2b740695335dae6a21740", 0x7e}, {&(0x7f0000001900)="1f045541d6ad92e97a402ab2ef28d5edad2ff0ad84f8ac06e4f4c8fabbb88a09b9b253d3f0e3344eeffbb85650e0a0a39dfcf71802cab50c369ee0d86416ea6090beefc587712bcf7c5dfb55eb93419f2e1e9415eeafc71ca989a283aca7f1d19bad3aa19c145e196f202127c9ad3a6f6dc84827560171a539422b42f995edf748e6d996e614f32f1665f13d5f07db950fac32faf71caff9214c20ffaa0cd8c7c9fca083d9fc4fc3ee295a191fc037a7e17baec3ee1799adcc422f166d7460e5dda604665ac705d991170ddf4e4e9ddc55b8adfa4ae13131b5dcaeafd331fcd0af2139640a27d046a9d3183f6b04a1e3b390e43ca83da680655224", 0xfb}, {&(0x7f0000001a00)="62d1df0e0c820b55907a7fed197db0c8a89a9c0987d2b3ed3568414fccdbc46e32aab17e1de26f6ce63fec3429e9b83ea4", 0x31}, {&(0x7f0000001a40)="5ec63aea3688e28ed7fa73f98d3ebb0f856a9d32ae7161252a07250c43bf1b91a3eebbc561a3680c9fa67e9a86a67e34a4d0a9e8e84f616c368868f3ba94a6590f6f50a9a2c7bcfb81dee89c5a75ea60caf04318ba90f39ced98f85e0056e90982e49ca31648bf74213061e04ee8e08810e563ddaa714d77bec820b6433e7de2762b4d4c3974bc6d736223d440ce3246673d23f9b548498cdf41a7c39b239e164318aecb578d9299fac6b6cc1b3837bfb416cb85a3de2abcdcccdce6f1d21b84edcb8bd4", 0xc4}, {&(0x7f0000001b40)="b45b4b431b84a0fd8b9ade62c73fbe8e0788938a7161b7c58b8fbb20a2c5d6a4b32e5426e68b07257a2c767fbb1bc3d404bc8709d00265e751c58410df797f6663db75452eae93b9b4e8a8d2926e434de089830f5854a4236dc6c5d4f067895804", 0x61}], 0x5, &(0x7f0000001f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, r10, r9]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r11, r0, r2, r11]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0xd7}}, {{&(0x7f0000002000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002180), 0x0, &(0x7f00000062c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r7, r4]}}], 0x58, 0x4480}}, {{&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000008440)="68b91abc1e0de4bcc390117d1967a5acbb2e107cf6c8c0b5e59a38eaebea013f4d44b569fdccb79d53a3489acdc70691d0719fef2281ee516ee064b7ffb9ddda8b8b6eb057329a4ffd7b061748274d3c63f219ea4e6ac04cb294c4fd8d776e9bd3afc8187fe2de10050f70de0255224f490c50b3acd4ce46ad2537a8305939a9191e06f1aac20c2aee2074", 0x8b}, {&(0x7f0000008500)="0cd7504c23df4270ac4cd61dfe7a91a4365e6ab05ef1b69cc0005e62cfa7b981c180d11ba0dd53a5401e58497c7449d9e1b2f42ae2ac9032e2744ab7b83c6291d4efaef4416354597b0351259c023d7cb651d06d029e2f07622fc5e455712080a6703e3d54083401fe3db8f5505ca6958a2a584b", 0x74}], 0x2, &(0x7f0000008680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r11, r0, r4, r0, 0xffffffffffffffff, r2, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r2, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x8000}}], 0x5, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

29.588228405s ago: executing program 7 (id=2108):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a)

26.491672091s ago: executing program 7 (id=2115):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xfffffffffffffe85)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1a, 0x803, 0xc)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,acces', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, 0x0, 0x0)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0)
symlinkat(0x0, r6, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
accept4(r0, 0x0, 0x0, 0x0)

25.552852518s ago: executing program 7 (id=2118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x40)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

15.498424141s ago: executing program 5 (id=2149):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x28241, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_emit_vhci(0x0, 0x14)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000400ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000979ac7f077f1491e132f8892d388ea82baefc7a5869353b8e42c3b765c40859893653e890e4253a09c5d52995807f3479c833ced861c0589cc0e399df384bf84688c7992659b044ef6f3f0075cb0f59915e9b887d6f7b014b42410b7b31aaf599c05ae804c473d4eb114eedd99044c65daa2952bd4b6df5e858a465e033c7cf90a3d3a5b0d59f92615"], 0x54}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000009c0)={0x0, 0x1b, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)

14.481953741s ago: executing program 5 (id=2153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r4 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0)
socket$isdn(0x22, 0x3, 0x24)
mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000600)=ANY=[])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000804)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00')
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000040)={r9})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={<r10=>0x0, 0xcc2e}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000180)={r10, 0x1, 0xb, 0x4, 0x7fff}, 0x14)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r11 = userfaultfd(0x801)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

12.346937814s ago: executing program 5 (id=2158):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ae62c616ebca1c927952aba77d7573d83addbdf05a0317bcbfd40a0503d7f0c4f9a2e54bbe8528a7950acff8e3c40dec8d996805747e19310a76de78bb86bf7052d3b1a4ba251245ab523dd22fcb7d6e7889", 0x52)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac8000004030000017c000004e707800c000180060006008035000008000280"], 0x76}, 0x1, 0x0, 0x0, 0x40}, 0x4008)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000), 0x0)
r3 = syz_usb_connect$hid(0x5, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000404f045ab600000000000109022d0001000000000904000001030001000921090008032207000905810300000d"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, 'a'}, @local=@item_4={0x3, 0x2, 0x9, "ba5eeea0"}]}}, 0x0}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
recvmmsg(r4, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x40, 0x0)

10.167271496s ago: executing program 46 (id=2118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x40)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.403893654s ago: executing program 6 (id=2169):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
read(r0, 0x0, 0x0)
socket(0xa, 0x80000, 0x401)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000373e1000000eeffffff0e000000000000000df45015d396de0dcc6c7095f88f7d4686173ff3a4214f45764f9cdde3d83ed70befa3aa616b24830b358a1759fe16ea6e3d8a819bb4035f2dbe278a90c74cce93660c3a31bec0a9f486", @ANYRES8=r5, @ANYBLOB="9b150100000800001c0012800b0001006d616373656300000c000280050003000c00000008000500", @ANYRES32=r5, @ANYRESOCT=0x0], 0x44}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x143000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001500), 0x4d, 0x80000001, 0x9be)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x24044084)
r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000300)={0x0, 0x0, [0xf, 0x6, 0x8, 0xffff8000, 0x400001ff, 0x70000000, 0x1, 0x2]})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8)
io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x1e83, 0x2, 0x2, 0xf2})
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r9, 0x5425, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0)

7.802816503s ago: executing program 6 (id=2173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0)
setrlimit(0x5, &(0x7f0000000200)={0x800, 0x8})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r4 = io_uring_setup(0x5570, &(0x7f0000000100)={0x0, 0x167b, 0x800, 0x80000002, 0x2c})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)
close(r4)
ioctl$TCSETSW2(r3, 0x5425, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r6)

6.895371189s ago: executing program 5 (id=2176):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}, 0x1, 0x0, 0x0, 0x404c881}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESHEX=r7, @ANYRES64=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200030000000000fcffffe20a170000080001000163800000"], 0x1c}}, 0x0)
rseq(&(0x7f0000000540), 0x20, 0x0, 0x0)
setpriority(0x2, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r8}, 0x10)
r10 = syz_clone(0x40000000, 0x0, 0xfffffffffffffdb5, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r10})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

6.278085451s ago: executing program 6 (id=2178):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum', 0x1, 0x10)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)="14f8d9a7c5b78c4fc7a070cf97281217ca76987e2b32ed976fb288efd5015a2f9d9dae2d96a3ac6c6208f455dfce91f9286c1fcc02f23d0fa23258161e64b37c2a3b4a65375d6171c762a65ab2ad8b93e266574c641be25bd3441e5500f588d8e31793190f17d59d4ce5635b2748f21225798a3212f4b5c49b1d610198271731207093d994d169b173ce4fa244ff9a92d71b9ddbf50645ccb2a1349eea2a2c2848bb63af58cda7772ec8def77a46a975598d9488e2db1cfd4971ea60dec81447e165cd3d6c075a1f92")
sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}], 0x1, 0x4000000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
io_pgetevents(r4, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0xfffffffe}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000140)={r10, 0x8}, &(0x7f0000000180)=0x8)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

6.1518725s ago: executing program 3 (id=2179):
r0 = fanotify_init(0x40, 0x180802)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000015})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000ab2a00ab000a20000000000a01040000000000000000010000000900010073797a3100000000e4000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000080007006e6174000b00070066696c74657200000900030073797a3100000000700008"], 0x184}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]})
syz_open_dev$hidraw(&(0x7f0000000100), 0x8d, 0x288200)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4080)

5.376389969s ago: executing program 3 (id=2181):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4100, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r1 = syz_open_dev$loop(0x0, 0x75f, 0xa382)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000d00400"])
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x1a, 0x89, 0xf4, 0x10, 0x421, 0x3a, 0x5966, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x7, 0x2, 0xb0, 0x7, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x2, 0x2, 0xff, 0x20, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x3, 0x1}]}]}}]}}]}}, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xa2)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00')
preadv(r5, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x3749f0d8, 0x80)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

4.089533925s ago: executing program 6 (id=2184):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
gettid()
readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/172, 0xac}], 0x1)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.80831571s ago: executing program 9 (id=2187):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190002000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000340)="50de4f350a8540f52ee87139a5ab38e722d6a8165618fd2b7e2919151257d3dc69aa16f0fde15aed85252da3a241667dd0e2deee44ac0093d768bd128d6586fe0867", 0x42}, {&(0x7f0000000500)="5ab9413e884d85a224e7df387b31acf03d57b212b1a6e9d7b70f850d84114181257e70d987f8044412e762d2431d070d55dc8eeac838b8ab1219f9f8d3216ab6bc456b3fd1e8bc992290fdf60554d6bba39d4604cb58e40f6d8cef6ece1b7cd11706f33b2ff40098afce3aca5184c094b460de6b4cb37702ab5f5cd8fcbf533d837ef7c6ab5cb5eb0e1bb18c52d1362bf9c91940c1c3d38f02000000000000001b2b42aeec7c5f", 0xa7}], 0x3, 0x0, 0x1b, 0x1f00c00e}, 0x4)
r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r3, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/92, 0x5c}, {0x0}], 0x2)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
readv(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/232, 0xe8}], 0x1)
ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x2)

2.660770374s ago: executing program 5 (id=2188):
socket$l2tp(0x2, 0x2, 0x73)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000200ed0000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="11000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="10005a800c0003800500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2048080}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000042, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}}, 0x8008044)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2.514182492s ago: executing program 9 (id=2189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x40)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2.076176136s ago: executing program 3 (id=2190):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fallocate(0xffffffffffffffff, 0x24, 0x4, 0xa)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xfffffffe}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7f, 0x0, 0x67f4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000080)='./file0\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r6, <r7=>0xffffffffffffffff})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000040)=[{r7, 0x2}, {r6, 0x8002}, {r7, 0x209}], 0x3, 0x0, 0x0, 0x0)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

2.069741792s ago: executing program 9 (id=2191):
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000ffffff"], 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000540), 0x6, 0x101000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x4, 0x0)
read$msr(r4, &(0x7f000001b700)=""/102400, 0x19000)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x400, 0x1, 0x4, 0x0, 0x20})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e2c00031000ad44abb9212553ac075f00bc244a"], 0xf)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.87791466s ago: executing program 6 (id=2192):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f0000000480)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @random="a31fe3b74df8"}, 0x14)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
io_setup(0x8, &(0x7f0000002740)=<r1=>0x0)
io_getevents(r1, 0x4, 0x63, &(0x7f0000000000), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '_'}}]})
io_submit(r1, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r2, 0x0, 0x0, 0x5}])
io_destroy(r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000580))
openat2(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00)={0x200, 0x18a, 0x1}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8884)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='efs\x00', 0x2000000, 0x0)

1.728290718s ago: executing program 5 (id=2193):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x1, 0x100)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(r2, 0x6, 0x0, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r7, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x4d, 0xfffffffc}, 0x9c)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000c40)={0x14, &(0x7f0000001000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r7, @ANYRESDEC=r6, @ANYRES32=r8], 0x0}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r10, {0x8000}}, './file0\x00'})

1.728038748s ago: executing program 3 (id=2194):
r0 = socket$inet(0x2, 0x1, 0x82)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
listen(r0, 0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r1, 0x50)

888.21132ms ago: executing program 9 (id=2195):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000019200)={'sit0\x00', &(0x7f0000019140)={'gre0\x00', 0x0, 0x7, 0x7800, 0x7, 0x0, {{0x19, 0x4, 0x2, 0x7, 0x64, 0x67, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x86, 0xb, "b0e495ac69c1eddd7d"}, @ssrr={0x89, 0xb, 0x7e, [@empty, @empty]}, @rr={0x7, 0x17, 0x4a, [@loopback, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x23, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @empty, @broadcast, @local, @multicast2, @multicast2]}]}}}}})
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

284.462667ms ago: executing program 9 (id=2196):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0xf)
syz_open_dev$sg(&(0x7f0000000240), 0x1, 0x105000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
close(r0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x13, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0xa4}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

265.373856ms ago: executing program 6 (id=2197):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
shutdown(r4, 0x1)
io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x7584, 0x2000, 0x2, 0x2b2})
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r7, 0x0, 0x0)
socket(0xf, 0x2, 0x0)
syz_io_uring_setup(0x3f0f, &(0x7f0000000140)={0x0, 0xb602, 0x4, 0x1000000}, &(0x7f0000000280)=<r8=>0x0, &(0x7f0000000240)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1185}})

264.853532ms ago: executing program 3 (id=2198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xe703, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x28}}, 0x0)

248.311µs ago: executing program 3 (id=2199):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) (fail_nth: 3)

0s ago: executing program 9 (id=2200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x4814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x40)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

kernel console output (not intermixed with test programs):

 The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.206542][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.216681][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.232822][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.244459][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.258507][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.270206][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.284585][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.300226][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.312423][T12313] veth0_vlan: entered promiscuous mode
[  531.321934][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.333507][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.343820][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.350479][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  531.354872][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.371749][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.382182][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.392722][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.404184][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.415236][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.437812][T12256] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.446696][T12256] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.455567][T12256] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.466688][T12256] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.478273][T12313] veth1_vlan: entered promiscuous mode
[  531.510592][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  531.530984][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.536777][T12313] veth0_macvtap: entered promiscuous mode
[  531.552162][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57856, setting to 1024
[  531.563496][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  531.566929][T12313] veth1_macvtap: entered promiscuous mode
[  531.582777][ T5867] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  531.595754][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.625266][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.647057][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.650814][ T5867] usb 1-1: config 0 descriptor??
[  531.657361][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.672879][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.682720][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.693356][   T30] audit: type=1400 audit(1742040897.923:651): avc:  denied  { accept } for  pid=12449 comm="syz.4.1930" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  531.715877][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.726197][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.737166][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.747146][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.757824][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.769526][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.779069][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.792908][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.802972][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.816158][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.827286][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.837906][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.858555][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.869352][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.879187][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.899655][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.920951][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.946484][T12313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.960515][T12313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.976579][T12313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.988247][T12313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.103632][T11198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.109913][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  532.118990][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  532.126385][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  532.133620][ T5867] usbhid 1-1:0.0: can't add hid device: -32
[  532.139587][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  532.167116][T11198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.175054][ T5867] usb 1-1: USB disconnect, device number 21
[  532.270290][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.278122][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.294884][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.302967][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.325503][T11198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.334280][T11198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.347544][   T30] audit: type=1400 audit(1742040898.583:652): avc:  denied  { mounton } for  pid=12256 comm="syz-executor" path="/root/syzkaller.u0tloW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  533.040390][T12476] netlink: 'syz.0.1936': attribute type 9 has an invalid length.
[  533.049620][T12476] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1936'.
[  533.251698][T12480] dlm: no local IP address has been set
[  533.257270][T12480] dlm: cannot start dlm midcomms -107
[  534.391515][T12497] cgroup: name respecified
[  534.516312][T12494] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.341992][T12549] siw: device registration error -23
[  537.680929][  T976] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  537.688429][T12557] loop4: detected capacity change from 0 to 524255232
[  537.904628][  T976] usb 3-1: Using ep0 maxpacket: 32
[  537.926299][  T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  537.968563][  T976] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  537.994536][  T976] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  538.039309][  T976] usb 3-1: Product: syz
[  538.059297][  T976] usb 3-1: Manufacturer: syz
[  538.066953][  T976] usb 3-1: SerialNumber: syz
[  538.076626][   T30] audit: type=1400 audit(1742040904.313:653): avc:  denied  { setopt } for  pid=12564 comm="syz.8.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  538.120307][  T976] usb 3-1: config 0 descriptor??
[  538.126864][T12555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  538.149561][ T5819] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  538.172435][  T976] hub 3-1:0.0: bad descriptor, ignoring hub
[  538.195448][  T976] hub 3-1:0.0: probe with driver hub failed with error -5
[  538.264953][T12567] dlm: no local IP address has been set
[  538.270629][T12567] dlm: cannot start dlm midcomms -107
[  538.345670][ T5819] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7
[  538.357794][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.377987][ T5819] usb 6-1: Product: syz
[  538.397881][ T5819] usb 6-1: Manufacturer: syz
[  538.403191][ T5819] usb 6-1: SerialNumber: syz
[  538.413448][ T5819] usb 6-1: config 0 descriptor??
[  538.447624][ T5819] ldusb 6-1:0.0: Interrupt in endpoint not found
[  538.479595][  T976] usb 3-1: USB disconnect, device number 17
[  538.578931][T12555] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  538.599512][T12555] UDF-fs: Scanning with blocksize 512 failed
[  538.622012][T12555] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  538.659419][T12555] UDF-fs: Scanning with blocksize 1024 failed
[  538.662505][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1959'.
[  538.689809][T12555] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  538.743759][T12555] UDF-fs: Scanning with blocksize 2048 failed
[  538.780207][T12555] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  538.807623][ T5899] usb 6-1: USB disconnect, device number 10
[  538.814276][T12555] UDF-fs: Scanning with blocksize 4096 failed
[  538.830618][ T5823] syz_tun (unregistering): left promiscuous mode
[  538.863165][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  538.881849][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  538.890947][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  538.903413][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  538.912823][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  538.920239][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  538.948924][T12577] wlan0 speed is unknown, defaulting to 1000
[  539.214755][T12577] chnl_net:caif_netlink_parms(): no params data found
[  539.320365][T12577] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.327456][T12577] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.335707][T12577] bridge_slave_0: entered allmulticast mode
[  539.342593][T12577] bridge_slave_0: entered promiscuous mode
[  539.350474][T12577] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.357605][T12577] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.364948][T12577] bridge_slave_1: entered allmulticast mode
[  539.371824][T12577] bridge_slave_1: entered promiscuous mode
[  539.604664][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.628683][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.691928][T12595] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  540.127707][   T30] audit: type=1400 audit(1742040905.923:654): avc:  denied  { read write } for  pid=12588 comm="syz.0.1966" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  540.459340][   T30] audit: type=1400 audit(1742040905.933:655): avc:  denied  { open } for  pid=12588 comm="syz.0.1966" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  540.779088][T12590] block nbd5: shutting down sockets
[  540.814705][T12577] team0: Port device team_slave_0 added
[  540.861390][T12577] team0: Port device team_slave_1 added
[  540.956493][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.009493][ T5822] Bluetooth: hci2: command tx timeout
[  541.025419][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.110979][   T30] audit: type=1400 audit(1742040907.313:656): avc:  denied  { bind } for  pid=12604 comm="syz.2.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  541.132602][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.238890][ T5867] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  541.426737][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.434993][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.467531][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.703423][T12577] hsr_slave_0: entered promiscuous mode
[  541.713704][T12577] hsr_slave_1: entered promiscuous mode
[  541.722619][T12577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  541.730477][T12577] Cannot create hsr debugfs directory
[  542.299875][ T5819] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  542.423844][ T5867] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  542.439351][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.447474][ T5867] usb 6-1: Product: syz
[  542.451712][ T5867] usb 6-1: Manufacturer: syz
[  542.456603][ T5867] usb 6-1: SerialNumber: syz
[  542.739379][ T5819] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  542.776208][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.788370][T12577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.879352][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  542.890381][   T30] audit: type=1400 audit(1742040909.123:657): avc:  denied  { create } for  pid=12625 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  542.929397][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  542.945929][   T30] audit: type=1400 audit(1742040909.133:658): avc:  denied  { sys_admin } for  pid=12625 comm="syz.0.1976" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  542.977350][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  543.009429][ T5867] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  543.015880][ T5867] cdc_ncm 6-1:1.0: setting tx_max = 44
[  543.025790][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  543.038354][T12577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.050145][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.064188][ T5819] usb 3-1: config 0 descriptor??
[  543.070054][T12609] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  543.088214][   T30] audit: type=1400 audit(1742040909.323:659): avc:  denied  { sys_ptrace } for  pid=12625 comm="syz.0.1976" capability=19  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  543.094573][T12626] fuse: Bad value for 'fd'
[  543.109687][ T5822] Bluetooth: hci2: command tx timeout
[  543.144492][T12577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.231082][T12577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.412579][T12607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.413179][T12577] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  543.421221][T12607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.440003][T12577] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  543.464235][ T5867] cdc_ncm 6-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  543.476219][T12577] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  543.486343][T12577] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  543.500418][ T5867] usb 6-1: USB disconnect, device number 11
[  543.517587][ T5867] cdc_ncm 6-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  543.621250][T12577] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.652922][ T5819] usbhid 3-1:0.0: can't add hid device: -71
[  543.665824][ T5819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  543.693872][T12577] 8021q: adding VLAN 0 to HW filter on device team0
[  544.239351][ T5819] usb 3-1: USB disconnect, device number 18
[  544.266118][T12577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  544.276869][T12577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  544.341044][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.348119][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.361270][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.368398][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.547301][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.169605][ T5822] Bluetooth: hci2: command tx timeout
[  545.215759][T12577] veth0_vlan: entered promiscuous mode
[  545.238135][T12577] veth1_vlan: entered promiscuous mode
[  545.336624][T12577] veth0_macvtap: entered promiscuous mode
[  545.368276][T12658] loop6: detected capacity change from 0 to 524287999
[  545.381515][T12577] veth1_macvtap: entered promiscuous mode
[  545.424484][    C1] blk_print_req_error: 7 callbacks suppressed
[  545.424502][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.425566][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.430667][    C1] buffer_io_error: 7 callbacks suppressed
[  545.430679][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.465133][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.474326][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.487168][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.496326][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.505906][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.516877][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.528186][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.536444][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.547172][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.550531][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.568531][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.577725][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.586772][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.595952][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.603821][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.614310][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.623526][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.632757][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.642741][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.651659][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.654943][   T30] audit: type=1400 audit(1742040911.863:660): avc:  denied  { ioctl } for  pid=12656 comm="syz.0.1981" path="socket:[44331]" dev="sockfs" ino=44331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  545.660810][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.660950][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.687007][T12658] ldm_validate_partition_table(): Disk read failed.
[  545.704546][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.704568][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.704581][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.704594][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.704605][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.705438][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.775292][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  545.784485][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  545.810728][T12658] Dev loop6: unable to read RDB block 0
[  545.817721][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.836037][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.846973][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.859913][T12658]  loop6: unable to read partition table
[  545.863732][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.877109][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.878171][T12658] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  545.887545][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.887566][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.887580][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.887597][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.887607][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.887621][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.887632][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.888488][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.060532][   T30] audit: type=1400 audit(1742040912.293:661): avc:  denied  { mount } for  pid=12667 comm="syz.5.1985" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  546.140030][   T30] audit: type=1400 audit(1742040912.303:662): avc:  denied  { search } for  pid=12667 comm="syz.5.1985" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  546.247395][   T30] audit: type=1400 audit(1742040912.303:663): avc:  denied  { write } for  pid=12667 comm="syz.5.1985" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  546.276074][T12577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.359059][T12675] FAULT_INJECTION: forcing a failure.
[  546.359059][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  546.372637][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.8.1986 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  546.372660][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  546.372669][T12675] Call Trace:
[  546.372674][T12675]  <TASK>
[  546.372681][T12675]  dump_stack_lvl+0x16c/0x1f0
[  546.372710][T12675]  should_fail_ex+0x50a/0x650
[  546.372745][T12675]  _copy_to_user+0x32/0xd0
[  546.372766][T12675]  simple_read_from_buffer+0xd0/0x160
[  546.372793][T12675]  proc_fail_nth_read+0x198/0x270
[  546.372818][T12675]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  546.372844][T12675]  ? rw_verify_area+0xcf/0x680
[  546.372869][T12675]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  546.372893][T12675]  vfs_read+0x1df/0xbf0
[  546.372919][T12675]  ? __fget_files+0x1fc/0x3a0
[  546.372936][T12675]  ? __pfx___mutex_lock+0x10/0x10
[  546.372959][T12675]  ? __pfx_vfs_read+0x10/0x10
[  546.372990][T12675]  ? __fget_files+0x206/0x3a0
[  546.373014][T12675]  ksys_read+0x12b/0x250
[  546.373029][T12675]  ? __pfx_ksys_read+0x10/0x10
[  546.373052][T12675]  do_syscall_64+0xcd/0x250
[  546.373076][T12675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.373099][T12675] RIP: 0033:0x7f289858bb7c
[  546.373113][T12675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  546.373129][T12675] RSP: 002b:00007f28963f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  546.373146][T12675] RAX: ffffffffffffffda RBX: 00007f28987a6160 RCX: 00007f289858bb7c
[  546.373157][T12675] RDX: 000000000000000f RSI: 00007f28963f60a0 RDI: 0000000000000006
[  546.373166][T12675] RBP: 00007f28963f6090 R08: 0000000000000000 R09: 0000000000000000
[  546.373176][T12675] R10: 0000000000000097 R11: 0000000000000246 R12: 0000000000000001
[  546.373185][T12675] R13: 0000000000000000 R14: 00007f28987a6160 R15: 00007ffc2fca5af8
[  546.373209][T12675]  </TASK>
[  546.379216][   T30] audit: type=1400 audit(1742040912.333:664): avc:  denied  { unmount } for  pid=12256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  546.919684][T12577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.000547][T12577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.079351][T12577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.136085][   T30] audit: type=1400 audit(1742040912.593:665): avc:  denied  { write } for  pid=12669 comm="syz.8.1986" name="ip6_flowlabel" dev="proc" ino=4026534333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  547.159455][    C0] vkms_vblank_simulate: vblank timer overrun
[  547.249317][ T5822] Bluetooth: hci2: command tx timeout
[  547.759058][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.775252][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.797379][   T30] audit: type=1804 audit(1742040914.023:666): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1991" name="/newroot/193/file0" dev="tmpfs" ino=1062 res=1 errno=0
[  547.819833][    C0] vkms_vblank_simulate: vblank timer overrun
[  548.434131][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.452379][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.770133][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  549.011897][ T5869] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  549.341452][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.353468][ T5869] usb 6-1: Product: syz
[  549.357760][ T5869] usb 6-1: Manufacturer: syz
[  549.362866][ T5869] usb 6-1: SerialNumber: syz
[  549.449354][T11332] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  549.667460][ T5869] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  549.690291][ T5899] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  550.769365][ T5899] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  550.776503][ T5899] ath9k_htc: Failed to initialize the device
[  550.805991][ T5899] usb 6-1: ath9k_htc: USB layer deinitialized
[  551.018329][ T5819] usb 6-1: USB disconnect, device number 12
[  551.879695][ T5867] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  552.081893][ T5867] usb 3-1: config 0 has an invalid interface number: 13 but max is 0
[  552.091866][ T5867] usb 3-1: config 0 has no interface number 0
[  552.098001][ T5867] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=b0.9b
[  552.107445][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.127302][ T5867] usb 3-1: config 0 descriptor??
[  552.715783][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2004'.
[  552.772460][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2004'.
[  553.015313][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'.
[  553.081006][T12763] xt_l2tp: invalid flags combination: c
[  553.087584][   T30] audit: type=1400 audit(1742040919.323:667): avc:  denied  { append } for  pid=12752 comm="syz.4.2006" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  553.110723][    C1] vkms_vblank_simulate: vblank timer overrun
[  553.550056][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034cb2000: rx timeout, send abort
[  553.766313][   T30] audit: type=1400 audit(1742040920.003:668): avc:  denied  { lock } for  pid=12771 comm="syz.5.2008" path="socket:[44693]" dev="sockfs" ino=44693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  553.790322][    C1] vkms_vblank_simulate: vblank timer overrun
[  553.807426][T12773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2008'.
[  554.058363][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034cb2000: abort rx timeout. Force session deactivation
[  554.345653][ T5867] usb 3-1: string descriptor 0 read error: -71
[  554.354637][ T5867] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  554.364863][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  554.377581][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  554.391737][ T5867] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  554.529425][ T5867] usb 3-1: media controller created
[  554.559496][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  554.635329][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  554.646527][ T5867] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  554.691460][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32
[  554.747565][ T5867] dvb-usb: schedule remote query interval to 50 msecs.
[  554.939552][ T5899] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  554.942225][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  555.201663][T11346] dvb-usb: bulk message failed: -22 (1/0)
[  555.209325][ T5867] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  555.226337][T11346] dvb-usb: error while querying for an remote control event.
[  555.246162][ T5867] usb 3-1: USB disconnect, device number 19
[  555.305090][ T5867] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  555.319428][ T5899] usb 6-1: device descriptor read/64, error -71
[  555.579486][ T5899] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  555.669371][ T5867] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  555.729587][ T5899] usb 6-1: device descriptor read/64, error -71
[  555.870586][ T5899] usb usb6-port1: attempt power cycle
[  555.884919][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  555.925657][ T5867] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  555.949401][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  555.988639][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  556.008920][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  556.037007][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  556.058376][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  556.078693][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  556.088797][ T5867] usb 3-1: Manufacturer: syz
[  556.144519][ T5867] usb 3-1: config 0 descriptor??
[  557.341457][ T5899] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  557.369450][ T5867] rc_core: IR keymap rc-hauppauge not found
[  557.385506][ T5867] Registered IR keymap rc-empty
[  557.391464][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.488531][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.519884][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  557.541919][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  557.559525][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.579539][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.601331][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.663236][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.704453][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.771279][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.841553][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.921250][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  557.991371][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  558.042988][ T5899] usb 6-1: device not accepting address 15, error -71
[  558.089627][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71
[  558.110911][ T5867] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  558.148667][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  558.165818][ T5867] usb 3-1: USB disconnect, device number 20
[  558.191703][   T30] audit: type=1400 audit(1742040924.433:669): avc:  denied  { mount } for  pid=12837 comm="syz.8.2027" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  558.216057][T12838] overlay: filesystem on ./bus not supported
[  558.293531][T12841] dlm: no local IP address has been set
[  558.299344][T12841] dlm: cannot start dlm midcomms -107
[  558.339546][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b170400: rx timeout, send abort
[  558.847775][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b170400: abort rx timeout. Force session deactivation
[  559.503129][ T5820] Bluetooth: hci1: command 0x0406 tx timeout
[  559.718605][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'.
[  560.593783][T12875] FAULT_INJECTION: forcing a failure.
[  560.593783][T12875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  560.607702][T12875] CPU: 0 UID: 0 PID: 12875 Comm: syz.2.2037 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  560.607723][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  560.607732][T12875] Call Trace:
[  560.607736][T12875]  <TASK>
[  560.607741][T12875]  dump_stack_lvl+0x16c/0x1f0
[  560.607765][T12875]  should_fail_ex+0x50a/0x650
[  560.607791][T12875]  _copy_to_user+0x32/0xd0
[  560.607817][T12875]  rng_dev_read+0x1f1/0x800
[  560.607842][T12875]  ? __pfx_virtio_read+0x10/0x10
[  560.607865][T12875]  ? __pfx_rng_dev_read+0x10/0x10
[  560.607890][T12875]  ? bpf_lsm_file_permission+0x9/0x10
[  560.607908][T12875]  ? security_file_permission+0x71/0x210
[  560.607934][T12875]  ? rw_verify_area+0xcf/0x680
[  560.607958][T12875]  ? __pfx_rng_dev_read+0x10/0x10
[  560.607981][T12875]  vfs_readv+0x6c2/0x8a0
[  560.608003][T12875]  ? __pfx___lock_acquire+0x10/0x10
[  560.608026][T12875]  ? find_held_lock+0x2d/0x110
[  560.608048][T12875]  ? __pfx_vfs_readv+0x10/0x10
[  560.608076][T12875]  ? __fget_files+0x1fc/0x3a0
[  560.608093][T12875]  ? __pfx_lock_release+0x10/0x10
[  560.608125][T12875]  ? __fget_files+0x206/0x3a0
[  560.608146][T12875]  ? do_preadv+0x1b1/0x270
[  560.608168][T12875]  do_preadv+0x1b1/0x270
[  560.608192][T12875]  ? __pfx_do_preadv+0x10/0x10
[  560.608223][T12875]  do_syscall_64+0xcd/0x250
[  560.608243][T12875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.608262][T12875] RIP: 0033:0x7fce9c78d169
[  560.608274][T12875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  560.608290][T12875] RSP: 002b:00007fce9d624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  560.608306][T12875] RAX: ffffffffffffffda RBX: 00007fce9c9a6080 RCX: 00007fce9c78d169
[  560.608317][T12875] RDX: 0000000000000001 RSI: 0000400000001880 RDI: 0000000000000006
[  560.608327][T12875] RBP: 00007fce9d624090 R08: 0000000000000000 R09: 0000000000000000
[  560.608336][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.608344][T12875] R13: 0000000000000000 R14: 00007fce9c9a6080 R15: 00007ffc6ac880d8
[  560.608365][T12875]  </TASK>
[  561.244168][T12882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2040'.
[  561.279181][T12882] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.337264][T12888] overlay: filesystem on ./bus not supported
[  561.370219][T12892] FAULT_INJECTION: forcing a failure.
[  561.370219][T12892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.406571][T12892] CPU: 1 UID: 0 PID: 12892 Comm: syz.0.2044 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  561.406596][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  561.406605][T12892] Call Trace:
[  561.406610][T12892]  <TASK>
[  561.406617][T12892]  dump_stack_lvl+0x16c/0x1f0
[  561.406644][T12892]  should_fail_ex+0x50a/0x650
[  561.406671][T12892]  _copy_from_user+0x2e/0xd0
[  561.406689][T12892]  copy_msghdr_from_user+0x99/0x160
[  561.406711][T12892]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  561.406747][T12892]  ___sys_sendmsg+0xff/0x1e0
[  561.406769][T12892]  ? __pfx____sys_sendmsg+0x10/0x10
[  561.406803][T12892]  ? __pfx_lock_release+0x10/0x10
[  561.406824][T12892]  ? trace_lock_acquire+0x14e/0x1f0
[  561.406849][T12892]  ? __fget_files+0x206/0x3a0
[  561.406872][T12892]  __sys_sendmsg+0x16e/0x220
[  561.406897][T12892]  ? __pfx___sys_sendmsg+0x10/0x10
[  561.406934][T12892]  do_syscall_64+0xcd/0x250
[  561.406956][T12892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.406976][T12892] RIP: 0033:0x7ffb1db8d169
[  561.406988][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.407000][T12892] RSP: 002b:00007ffb1e913038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.407014][T12892] RAX: ffffffffffffffda RBX: 00007ffb1dda5fa0 RCX: 00007ffb1db8d169
[  561.407024][T12892] RDX: 0000000020000800 RSI: 00004000000000c0 RDI: 0000000000000003
[  561.407033][T12892] RBP: 00007ffb1e913090 R08: 0000000000000000 R09: 0000000000000000
[  561.407042][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.407050][T12892] R13: 0000000000000000 R14: 00007ffb1dda5fa0 R15: 00007fffa3d20348
[  561.407070][T12892]  </TASK>
[  562.759552][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  562.765825][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.029821][T12301] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  563.260477][   T30] audit: type=1400 audit(1742040929.503:670): avc:  denied  { create } for  pid=12902 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  563.323675][T12301] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  563.835401][   T30] audit: type=1400 audit(1742040930.073:671): avc:  denied  { connect } for  pid=12902 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  563.935765][T12301] usb 3-1: config 0 has no interface number 0
[  563.974244][T12913] usb usb7: usbfs: process 12913 (syz.0.2050) did not claim interface 0 before use
[  563.987047][T12301] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  564.015669][T12301] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  564.046398][T12301] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  564.131370][T12301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16
[  564.159921][T12301] usb 3-1: Product: syz
[  564.164999][T12301] usb 3-1: Manufacturer: syz
[  564.174634][T12301] usb 3-1: SerialNumber: syz
[  564.727360][T12301] usb 3-1: config 0 descriptor??
[  564.737054][T12905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  564.748655][T12301] usb-storage 3-1:0.20: USB Mass Storage device detected
[  564.773236][T12301] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  564.938837][T12301] scsi host1: usb-storage 3-1:0.20
[  564.949468][T12301] usb 3-1: USB disconnect, device number 21
[  564.994359][T12919] netlink: 'syz.5.2051': attribute type 4 has an invalid length.
[  564.996607][T12925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'.
[  565.007822][T12919] netlink: 'syz.5.2051': attribute type 4 has an invalid length.
[  565.691157][   T30] audit: type=1400 audit(1742040931.933:672): avc:  denied  { append } for  pid=12934 comm="syz.0.2056" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  565.715100][T12935] random: crng reseeded on system resumption
[  566.006860][   T30] audit: type=1400 audit(1742040931.953:673): avc:  denied  { open } for  pid=12934 comm="syz.0.2056" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  566.808300][   T30] audit: type=1400 audit(1742040933.043:674): avc:  denied  { ioctl } for  pid=12934 comm="syz.0.2056" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  566.955214][T12942] overlay: filesystem on ./bus not supported
[  568.739425][T12301] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  568.759324][ T5869] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  568.902716][T12301] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  568.911926][T12301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.919993][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  568.925078][T12301] usb 6-1: Product: syz
[  568.929303][T12301] usb 6-1: Manufacturer: syz
[  568.934089][T12301] usb 6-1: SerialNumber: syz
[  568.939463][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  568.946876][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  568.958473][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  568.971674][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  568.983778][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  568.996692][T12301] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  569.007179][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  569.016357][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  569.027685][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  569.039536][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  569.050704][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  569.063069][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  569.070689][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  569.084360][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  569.096186][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  569.107299][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  569.125661][ T5899] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  569.136229][ T5869] usb 1-1: string descriptor 0 read error: -22
[  569.142562][ T5869] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  569.151681][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.166483][ T5869] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  569.373615][ T5869] usb 1-1: USB disconnect, device number 22
[  569.682044][ T5822] Bluetooth: hci6: SCO packet for unknown connection handle 2608
[  569.829391][ T5869] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  569.999375][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  570.006281][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  570.013771][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  570.025055][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  570.036744][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  570.047825][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  570.060626][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  570.068061][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  570.079480][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  570.091198][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  570.103248][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  570.115288][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  570.122940][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  570.134190][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  570.145870][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  570.156923][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  570.170734][ T5869] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  570.179999][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.188008][ T5869] usb 1-1: Product: syz
[  570.192230][ T5869] usb 1-1: Manufacturer: syz
[  570.196844][ T5869] usb 1-1: SerialNumber: syz
[  570.209420][ T5899] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  570.216425][ T5899] ath9k_htc: Failed to initialize the device
[  570.238388][ T5899] usb 6-1: ath9k_htc: USB layer deinitialized
[  570.447385][ T5899] usb 6-1: USB disconnect, device number 17
[  570.608607][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.618032][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.626878][T12952] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2062'.
[  570.843915][ T5869] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  570.854656][ T5869] usb 1-1: USB disconnect, device number 23
[  571.742574][T12959] __vm_enough_memory: pid: 12959, comm: syz.0.2064, bytes: 21200117444608 not enough memory for the allocation
[  571.936546][T12963] dlm: no local IP address has been set
[  571.942163][T12963] dlm: cannot start dlm midcomms -107
[  571.973851][   T30] audit: type=1400 audit(1742040938.213:675): avc:  denied  { accept } for  pid=12964 comm="syz.5.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  571.994051][T11332] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  572.006619][   T30] audit: type=1400 audit(1742040938.243:676): avc:  denied  { write } for  pid=12964 comm="syz.5.2067" path="socket:[46176]" dev="sockfs" ino=46176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  572.779399][T11332] usb 1-1: config 3 has an invalid interface number: 168 but max is 0
[  572.787599][T11332] usb 1-1: config 3 has no interface number 0
[  572.800037][T11332] usb 1-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  572.811726][T11332] usb 1-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024
[  572.823096][T11332] usb 1-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  572.833340][T11332] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  572.842447][T11332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.852977][T12959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  573.067130][T12959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2064'.
[  573.077530][T11332] usb 1-1: string descriptor 0 read error: -71
[  573.084838][T11332] keyspan 1-1:3.168: Keyspan 2 port adapter converter detected
[  573.092924][T11332] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 1
[  573.101556][T11332] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 84
[  573.111566][T11332] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 2
[  573.122909][T11332] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  573.138406][T11332] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 88
[  573.146401][T11332] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 6
[  573.155254][T11332] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  573.165829][T11332] usb 1-1: USB disconnect, device number 24
[  573.176044][T11332] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  573.191460][T12971] wlan0 speed is unknown, defaulting to 1000
[  573.197091][T11332] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  573.207357][T11332] keyspan 1-1:3.168: device disconnected
[  573.657871][T12975] FAULT_INJECTION: forcing a failure.
[  573.657871][T12975] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.671194][T12975] CPU: 0 UID: 0 PID: 12975 Comm: syz.0.2070 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  573.671215][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  573.671224][T12975] Call Trace:
[  573.671228][T12975]  <TASK>
[  573.671234][T12975]  dump_stack_lvl+0x16c/0x1f0
[  573.671260][T12975]  should_fail_ex+0x50a/0x650
[  573.671288][T12975]  __kvm_read_guest_page+0x16b/0x210
[  573.671310][T12975]  kvm_fetch_guest_virt+0x128/0x1a0
[  573.671329][T12975]  __do_insn_fetch_bytes+0x420/0x6d0
[  573.671362][T12975]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  573.671386][T12975]  ? kvm_tdp_mmu_map+0x90c/0x1f80
[  573.671402][T12975]  ? kvm_handle_noslot_fault+0x442/0x800
[  573.671500][T12975]  x86_decode_insn+0xb91/0x5530
[  573.671526][T12975]  ? kvm_tdp_page_fault+0x295/0x3d0
[  573.671545][T12975]  ? vmx_segment_cache_test_set+0x14b/0x400
[  573.671567][T12975]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  573.671592][T12975]  ? __pfx_x86_decode_insn+0x10/0x10
[  573.671610][T12975]  ? vmx_cache_reg+0x333/0x5e0
[  573.671632][T12975]  ? kvm_register_read_raw+0xe9/0x240
[  573.671657][T12975]  ? init_decode_cache+0xd/0x210
[  573.671675][T12975]  ? init_emulate_ctxt+0x338/0x510
[  573.671691][T12975]  ? kvm_tdp_page_fault+0x45/0x3d0
[  573.671706][T12975]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  573.671725][T12975]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  573.671745][T12975]  x86_emulate_instruction+0x9c1/0x1a90
[  573.671765][T12975]  ? hlock_class+0x4e/0x130
[  573.671784][T12975]  kvm_mmu_page_fault+0xb5f/0x1bd0
[  573.671807][T12975]  ? __pfx___lock_acquire+0x10/0x10
[  573.671827][T12975]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[  573.671842][T12975]  ? __pfx_mark_lock+0x10/0x10
[  573.671861][T12975]  ? clear_bhb_loop+0x35/0x90
[  573.671891][T12975]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  573.671911][T12975]  handle_ept_violation+0x25a/0x640
[  573.671921][T12975]  ? __pfx_handle_ept_violation+0x10/0x10
[  573.671932][T12975]  vmx_handle_exit+0x6a4/0x1a30
[  573.671943][T12975]  vcpu_run+0x2af3/0x4cc0
[  573.671959][T12975]  ? __pfx_vcpu_run+0x10/0x10
[  573.671969][T12975]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  573.671983][T12975]  ? rcu_is_watching+0x12/0xc0
[  573.671996][T12975]  ? trace_lock_acquire+0x14e/0x1f0
[  573.672006][T12975]  ? __local_bh_enable_ip+0xa4/0x120
[  573.672022][T12975]  ? lockdep_hardirqs_on+0x7c/0x110
[  573.672035][T12975]  ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0
[  573.672046][T12975]  ? complete_emulated_mmio+0x394/0x7f0
[  573.672059][T12975]  ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0
[  573.672070][T12975]  kvm_arch_vcpu_ioctl_run+0x865/0x17f0
[  573.672085][T12975]  kvm_vcpu_ioctl+0x5ea/0x16b0
[  573.672098][T12975]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  573.672113][T12975]  ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450
[  573.672131][T12975]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  573.672149][T12975]  ? __pfx_lock_release+0x10/0x10
[  573.672168][T12975]  ? selinux_file_ioctl+0x180/0x270
[  573.672183][T12975]  ? selinux_file_ioctl+0xb4/0x270
[  573.672199][T12975]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  573.672212][T12975]  __x64_sys_ioctl+0x190/0x200
[  573.672228][T12975]  do_syscall_64+0xcd/0x250
[  573.672242][T12975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.672255][T12975] RIP: 0033:0x7ffb1db8d169
[  573.672264][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  573.672274][T12975] RSP: 002b:00007ffb1e913038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  573.672284][T12975] RAX: ffffffffffffffda RBX: 00007ffb1dda5fa0 RCX: 00007ffb1db8d169
[  573.672290][T12975] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  573.672296][T12975] RBP: 00007ffb1e913090 R08: 0000000000000000 R09: 0000000000000000
[  573.672301][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  573.672306][T12975] R13: 0000000000000000 R14: 00007ffb1dda5fa0 R15: 00007fffa3d20348
[  573.672318][T12975]  </TASK>
[  574.185982][T12978] overlay: filesystem on ./bus not supported
[  574.465945][T12983] cgroup: name respecified
[  574.654886][   T30] audit: type=1400 audit(1742040940.893:677): avc:  denied  { listen } for  pid=12984 comm="syz.5.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  575.618067][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  575.635454][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  575.644826][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  575.653477][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  575.660985][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  575.668779][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  575.723503][T12994] dlm: no local IP address has been set
[  575.729074][T12994] dlm: cannot start dlm midcomms -107
[  575.747495][T12990] wlan0 speed is unknown, defaulting to 1000
[  575.970594][T12990] chnl_net:caif_netlink_parms(): no params data found
[  576.072951][T13001] overlayfs: failed to resolve './file1': -2
[  576.116104][   T30] audit: type=1400 audit(1742040942.273:678): avc:  denied  { setopt } for  pid=12995 comm="syz.5.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  576.447300][ T5922] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.466485][ T5922] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  576.500536][T12990] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.507641][T12990] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.516842][T12990] bridge_slave_0: entered allmulticast mode
[  576.523441][T12990] bridge_slave_0: entered promiscuous mode
[  576.535915][T12990] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.543460][T12990] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.550742][T12990] bridge_slave_1: entered allmulticast mode
[  576.557987][T12990] bridge_slave_1: entered promiscuous mode
[  576.580658][ T5922] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.591315][ T5922] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  576.630908][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.652906][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.701406][ T5922] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.714343][ T5922] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  576.854132][ T5922] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.885106][ T5922] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  577.502840][ T5922] bridge_slave_1: left allmulticast mode
[  577.520211][ T5922] bridge_slave_1: left promiscuous mode
[  577.542873][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.584461][ T5922] bridge_slave_0: left allmulticast mode
[  577.603886][ T5922] bridge_slave_0: left promiscuous mode
[  577.623900][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.729379][ T5820] Bluetooth: hci4: command tx timeout
[  578.088209][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  578.107522][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  578.117616][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  578.134734][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  578.142249][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  578.149972][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  578.258196][ T5922] bond1 (unregistering): (slave geneve2): Releasing active interface
[  578.560206][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.573893][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.583598][ T5922] bond0 (unregistering): Released all slaves
[  578.703316][ T5922] bond1 (unregistering): Released all slaves
[  578.720352][T12990] team0: Port device team_slave_0 added
[  578.730773][T12990] team0: Port device team_slave_1 added
[  578.787169][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.795346][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.821280][    C1] vkms_vblank_simulate: vblank timer overrun
[  578.828853][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.846415][ T5922] tipc: Left network mode
[  578.851106][T13012] wlan0 speed is unknown, defaulting to 1000
[  578.858560][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.866562][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.892452][    C1] vkms_vblank_simulate: vblank timer overrun
[  578.919324][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.983008][T12990] hsr_slave_0: entered promiscuous mode
[  578.989162][T12990] hsr_slave_1: entered promiscuous mode
[  578.995750][T12990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  579.005293][T12990] Cannot create hsr debugfs directory
[  579.198093][ T5922] hsr_slave_0: left promiscuous mode
[  579.206304][ T5922] hsr_slave_1: left promiscuous mode
[  579.211996][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  579.220549][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.228117][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.235846][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.252187][ T5922] veth1_macvtap: left promiscuous mode
[  579.257717][ T5922] veth0_macvtap: left promiscuous mode
[  579.264763][ T5922] veth1_vlan: left promiscuous mode
[  579.273611][ T5922] veth0_vlan: left promiscuous mode
[  579.620429][ T5922] team0 (unregistering): Port device team_slave_1 removed
[  579.664199][ T5922] team0 (unregistering): Port device team_slave_0 removed
[  579.809439][ T5822] Bluetooth: hci4: command tx timeout
[  580.081372][T13022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57436 sclass=netlink_route_socket pid=13022 comm=syz.5.2084
[  580.209439][ T5822] Bluetooth: hci0: command tx timeout
[  580.305474][T13012] chnl_net:caif_netlink_parms(): no params data found
[  580.415922][T13012] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.579695][T13012] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.613563][T13012] bridge_slave_0: entered allmulticast mode
[  580.673498][T13012] bridge_slave_0: entered promiscuous mode
[  580.905356][T13012] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.940363][T13012] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.947595][T13012] bridge_slave_1: entered allmulticast mode
[  580.954468][T13012] bridge_slave_1: entered promiscuous mode
[  580.986882][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.998547][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.007824][T12990] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  581.025276][T12990] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  581.036729][T12990] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  581.048799][T12990] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  581.065166][T13012] team0: Port device team_slave_0 added
[  581.074351][T13012] team0: Port device team_slave_1 added
[  581.098084][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.105285][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.131488][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.171000][ T5922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.191677][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.199015][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.228157][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.279880][ T5922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.301673][T13012] hsr_slave_0: entered promiscuous mode
[  581.307599][T13012] hsr_slave_1: entered promiscuous mode
[  581.346247][ T5922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.415542][ T5922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.457735][T12990] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.502156][T12990] 8021q: adding VLAN 0 to HW filter on device team0
[  581.516120][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.523205][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.548948][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.556031][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.596593][ T5922] bridge_slave_1: left allmulticast mode
[  581.603256][ T5922] bridge_slave_1: left promiscuous mode
[  581.608902][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.617940][ T5922] bridge_slave_0: left allmulticast mode
[  581.624535][ T5922] bridge_slave_0: left promiscuous mode
[  581.631036][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.889544][ T5822] Bluetooth: hci4: command tx timeout
[  581.914028][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.924973][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  581.934639][ T5922] bond0 (unregistering): Released all slaves
[  582.101253][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.216327][T13012] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  582.227755][T13012] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  582.242664][T13012] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  582.264791][T13012] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  582.289540][ T5822] Bluetooth: hci0: command tx timeout
[  582.358450][ T5922] hsr_slave_0: left promiscuous mode
[  582.364746][ T5922] hsr_slave_1: left promiscuous mode
[  582.380255][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.387650][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.398666][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.406287][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.423150][ T5922] veth1_macvtap: left promiscuous mode
[  582.428639][ T5922] veth0_macvtap: left promiscuous mode
[  582.434486][ T5922] veth1_vlan: left promiscuous mode
[  582.439948][ T5922] veth0_vlan: left promiscuous mode
[  582.777389][ T5922] team0 (unregistering): Port device team_slave_1 removed
[  582.815787][ T5922] team0 (unregistering): Port device team_slave_0 removed
[  583.253341][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  583.264035][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  583.277260][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  583.285028][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  583.298623][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  583.316778][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  583.546994][T13012] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.579077][T13012] 8021q: adding VLAN 0 to HW filter on device team0
[  583.635115][T13012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  583.649638][T13012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  583.979647][ T5820] Bluetooth: hci4: command tx timeout
[  584.042025][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.049111][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.063842][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.070933][ T9880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.141767][T13052] wlan0 speed is unknown, defaulting to 1000
[  584.176044][T12990] veth0_vlan: entered promiscuous mode
[  584.213105][T12990] veth1_vlan: entered promiscuous mode
[  584.263687][T12990] veth0_macvtap: entered promiscuous mode
[  584.276780][T12990] veth1_macvtap: entered promiscuous mode
[  584.326625][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.351570][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.367123][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.377639][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.379314][ T5820] Bluetooth: hci0: command tx timeout
[  584.395004][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.407673][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.423603][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.437547][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.448135][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  584.458869][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.478841][T12990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.513593][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.524633][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.535658][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.546862][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.556724][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.567202][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.577033][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.587911][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.597726][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  584.608307][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  584.618976][T12990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.628766][T12990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.637554][T12990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.646996][T12990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.655775][T12990] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.701032][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.831066][ T5878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.838915][ T5878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.891274][ T5922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.909113][T13052] chnl_net:caif_netlink_parms(): no params data found
[  584.949760][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.957605][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.024297][ T5922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.112114][ T5922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.142021][T13052] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.149457][T13052] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.157499][T13052] bridge_slave_0: entered allmulticast mode
[  585.165066][T13052] bridge_slave_0: entered promiscuous mode
[  585.196222][ T5922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.210633][T13052] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.217822][T13052] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.225171][T13052] bridge_slave_1: entered allmulticast mode
[  585.232210][T13052] bridge_slave_1: entered promiscuous mode
[  585.269064][T13052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.293446][T13012] veth0_vlan: entered promiscuous mode
[  585.317161][T13012] veth1_vlan: entered promiscuous mode
[  585.335321][T13052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.381002][T13052] team0: Port device team_slave_0 added
[  585.388756][T13052] team0: Port device team_slave_1 added
[  585.409325][ T5820] Bluetooth: hci2: command tx timeout
[  585.426111][T13052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.433554][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.461310][T13052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.489063][T13052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.498620][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.524520][    C1] vkms_vblank_simulate: vblank timer overrun
[  585.531418][T13052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.599418][ T5899] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  585.703053][ T5922] bridge_slave_1: left allmulticast mode
[  585.708813][ T5922] bridge_slave_1: left promiscuous mode
[  585.715235][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.729707][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.739576][ T5899] usb 6-1: device descriptor read/64, error -71
[  585.989956][ T5899] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  586.139378][ T5899] usb 6-1: device descriptor read/64, error -71
[  586.171466][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.183175][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.193477][ T5922] bond0 (unregistering): Released all slaves
[  586.222087][T13052] hsr_slave_0: entered promiscuous mode
[  586.228091][T13052] hsr_slave_1: entered promiscuous mode
[  586.238923][T13052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  586.247533][T13052] Cannot create hsr debugfs directory
[  586.258504][ T5899] usb usb6-port1: attempt power cycle
[  586.294011][T13012] veth0_macvtap: entered promiscuous mode
[  586.316750][T13012] veth1_macvtap: entered promiscuous mode
[  586.395555][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.407134][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.417305][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.428353][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.438699][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.449452][ T5820] Bluetooth: hci0: command tx timeout
[  586.455132][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.464957][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.478395][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.488617][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.499168][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.509927][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.520451][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.531423][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.577701][T13052] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.601783][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.614023][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.624383][ T5899] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  586.632029][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.642600][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.652883][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.663481][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.673737][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.684237][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.695388][ T5899] usb 6-1: device descriptor read/8, error -71
[  586.700046][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.712426][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.722932][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.733525][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.744432][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.787050][T13052] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.804593][T13012] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.814209][T13012] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.823165][T13012] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.831987][T13012] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.899184][T13052] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.940040][ T5899] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  586.981260][T13052] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.992410][ T5899] usb 6-1: device descriptor read/8, error -71
[  587.007931][ T5922] hsr_slave_0: left promiscuous mode
[  587.018441][ T5922] hsr_slave_1: left promiscuous mode
[  587.024952][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.033110][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.044859][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.054453][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.071632][ T5922] veth1_macvtap: left promiscuous mode
[  587.077172][ T5922] veth0_macvtap: left promiscuous mode
[  587.083103][ T5922] veth1_vlan: left promiscuous mode
[  587.088393][ T5922] veth0_vlan: left promiscuous mode
[  587.101107][ T5899] usb usb6-port1: unable to enumerate USB device
[  587.444084][ T5922] team0 (unregistering): Port device team_slave_1 removed
[  587.484206][ T5922] team0 (unregistering): Port device team_slave_0 removed
[  587.508917][ T5820] Bluetooth: hci2: command tx timeout
[  587.833369][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.849663][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.897186][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.905609][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.937794][T13052] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  587.946777][T13052] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  587.968241][T13052] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  587.990442][T13052] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  588.155900][T13089] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2081'.
[  588.192611][T13089] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  588.219377][T13089] 0ªî{X¹¦: entered allmulticast mode
[  588.228949][T13089] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  588.480015][T13052] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.533971][T13052] 8021q: adding VLAN 0 to HW filter on device team0
[  588.573121][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.580228][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.603197][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.610314][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.678829][T13052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  588.732694][T13052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  589.622645][ T5820] Bluetooth: hci2: command tx timeout
[  590.108276][T13052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.232531][T13052] veth0_vlan: entered promiscuous mode
[  590.245144][T13052] veth1_vlan: entered promiscuous mode
[  590.264517][T13052] veth0_macvtap: entered promiscuous mode
[  590.272037][T13052] veth1_macvtap: entered promiscuous mode
[  590.284796][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.295903][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.305731][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.316216][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.326063][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.336533][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.346417][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.349364][ T3076] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  590.368439][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.379599][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.390047][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.399931][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.410403][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.440255][T13052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.460947][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.472053][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.482961][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.493559][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.503524][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.509408][ T3076] usb 6-1: Using ep0 maxpacket: 32
[  590.513944][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.513964][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.530073][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805968dc00: rx timeout, send abort
[  590.549116][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.556510][ T3076] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  590.569262][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.572160][ T3076] usb 6-1: config 0 interface 0 has no altsetting 0
[  590.589599][ T3076] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00
[  590.598638][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.606741][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.608069][ T3076] usb 6-1: config 0 descriptor??
[  590.629360][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  590.640096][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.651451][T13052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.680529][T13052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.709355][T13052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.722160][T13052] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.723427][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  590.731218][T13052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.756236][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  590.765293][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  590.784854][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  590.798473][ T5822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  590.805947][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  590.844515][T13127] wlan0 speed is unknown, defaulting to 1000
[  590.871135][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.909564][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.922914][ T9881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.956403][ T9881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.011412][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.023187][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.047561][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805968dc00: abort rx timeout. Force session deactivation
[  591.246430][ T3076] hid_mf 0003:0079:1844.000F: hidraw0: USB HID v0.00 Device [HID 0079:1844] on usb-dummy_hcd.5-1/input0
[  591.271258][T13133] can0: slcan on ptm0.
[  591.374865][ T3076] hid_mf 0003:0079:1844.000F: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  591.435399][T13139] cgroup: name respecified
[  591.463942][ T3076] usb 6-1: USB disconnect, device number 22
[  591.649369][ T5820] Bluetooth: hci2: command tx timeout
[  591.784992][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.870776][T13127] chnl_net:caif_netlink_parms(): no params data found
[  591.941147][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.962128][T13129] can0 (unregistered): slcan off ptm0.
[  592.089360][ T5819] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[  592.345089][ T5819] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  592.531362][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.715451][ T5819] usb 10-1: Product: syz
[  592.720285][ T5819] usb 10-1: Manufacturer: syz
[  592.725973][ T5819] usb 10-1: SerialNumber: syz
[  592.732824][ T5819] usb 10-1: config 0 descriptor??
[  592.738784][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.871053][ T5820] Bluetooth: hci5: command tx timeout
[  593.398648][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.418624][ T5819] airspy 10-1:0.0: Board ID: 00
[  593.431750][T13127] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.440744][ T5819] airspy 10-1:0.0: Firmware version: 
[  593.448810][T13127] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.456548][T13127] bridge_slave_0: entered allmulticast mode
[  593.464415][T13127] bridge_slave_0: entered promiscuous mode
[  593.470536][T11346] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  593.478571][T13127] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.485984][T13127] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.493341][T13127] bridge_slave_1: entered allmulticast mode
[  593.500119][T13127] bridge_slave_1: entered promiscuous mode
[  593.528125][T13127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.592218][T13127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.619967][T11346] usb 8-1: Using ep0 maxpacket: 8
[  593.626180][ T5819] airspy 10-1:0.0: usb_control_msg() failed -71 request 11
[  593.641289][T11346] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  593.655077][ T5819] airspy 10-1:0.0: Registered as swradio24
[  593.662955][T11346] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  593.672242][ T5819] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  593.674819][T13127] team0: Port device team_slave_0 added
[  593.682954][T11346] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  593.701442][ T5819] usb 10-1: USB disconnect, device number 11
[  593.714804][T11346] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  593.724130][T13127] team0: Port device team_slave_1 added
[  593.726334][T11346] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  593.747507][   T36] bridge_slave_1: left promiscuous mode
[  593.773535][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.795625][   T36] bridge_slave_0: left allmulticast mode
[  593.808500][   T36] bridge_slave_0: left promiscuous mode
[  593.815517][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.815609][T11346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.842079][T11346] hub 8-1:1.0: bad descriptor, ignoring hub
[  593.979493][T11346] hub 8-1:1.0: probe with driver hub failed with error -5
[  593.997162][T11346] cdc_wdm 8-1:1.0: skipping garbage
[  594.007698][T11346] cdc_wdm 8-1:1.0: skipping garbage
[  594.019432][T11346] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  594.031626][T11346] cdc_wdm 8-1:1.0: Unknown control protocol
[  594.068370][T11346] usb 8-1: USB disconnect, device number 13
[  594.397770][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.411368][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  594.420994][   T36] bond0 (unregistering): Released all slaves
[  594.439319][T13127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  594.446338][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.480821][T13127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.538191][T13127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.540041][T11346] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  594.545799][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.580368][T13127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.626117][T13127] hsr_slave_0: entered promiscuous mode
[  594.633478][T13127] hsr_slave_1: entered promiscuous mode
[  594.639552][T13127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.647237][T13127] Cannot create hsr debugfs directory
[  594.669437][ T5867] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  594.679327][T11346] usb 8-1: device descriptor read/64, error -71
[  594.799949][ T5867] usb 10-1: device descriptor read/64, error -71
[  594.845384][   T36] hsr_slave_0: left promiscuous mode
[  594.858650][   T36] hsr_slave_1: left promiscuous mode
[  594.869352][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.876776][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.887278][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.894761][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.910275][   T36] veth1_macvtap: left promiscuous mode
[  594.915810][   T36] veth0_macvtap: left promiscuous mode
[  594.919898][T11346] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  594.921467][   T36] veth1_vlan: left promiscuous mode
[  594.934102][ T5820] Bluetooth: hci5: command tx timeout
[  594.939715][   T36] veth0_vlan: left promiscuous mode
[  595.059443][ T5867] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  595.070769][T11346] usb 8-1: device descriptor read/64, error -71
[  595.179770][T11346] usb usb8-port1: attempt power cycle
[  595.199519][ T5867] usb 10-1: device descriptor read/64, error -71
[  595.310202][ T5867] usb usb10-port1: attempt power cycle
[  595.324123][   T36] team0 (unregistering): Port device team_slave_1 removed
[  595.368550][   T36] team0 (unregistering): Port device team_slave_0 removed
[  595.529376][T11346] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  595.600189][T11346] usb 8-1: device descriptor read/8, error -71
[  595.659437][ T5867] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  595.709892][ T5867] usb 10-1: device descriptor read/8, error -71
[  595.724258][T13177] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  595.849496][T11346] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  596.051423][T13181] overlay: filesystem on ./bus not supported
[  596.292280][ T5867] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  596.309331][T11346] usb 8-1: device not accepting address 17, error -71
[  596.344292][T11346] usb usb8-port1: unable to enumerate USB device
[  596.359691][ T5867] usb 10-1: device descriptor read/8, error -71
[  596.469652][ T5867] usb usb10-port1: unable to enumerate USB device
[  596.747048][T13127] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  596.810360][T13127] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  596.835548][T13127] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  596.863917][T13127] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  596.954271][T13127] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.968215][T13127] 8021q: adding VLAN 0 to HW filter on device team0
[  596.982492][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.989590][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.015316][ T5820] Bluetooth: hci5: command tx timeout
[  597.023597][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.030688][ T9881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.247482][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.260179][T13195] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2117'.
[  597.312838][T13127] veth0_vlan: entered promiscuous mode
[  597.340398][T13127] veth1_vlan: entered promiscuous mode
[  597.501822][T13127] veth0_macvtap: entered promiscuous mode
[  597.526341][T13127] veth1_macvtap: entered promiscuous mode
[  597.566610][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.578786][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.595690][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.606422][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.623404][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.635972][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.653261][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.667315][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.679400][ T3076] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  597.693847][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.705845][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.723527][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.766168][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.785613][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.818619][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.849238][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.859676][ T3076] usb 10-1: Using ep0 maxpacket: 8
[  597.873517][ T3076] usb 10-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  597.882925][ T3076] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.899339][ T3076] usb 10-1: Product: syz
[  597.903628][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.907544][ T3076] usb 10-1: Manufacturer: syz
[  597.928965][ T3076] usb 10-1: SerialNumber: syz
[  597.929244][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.940397][ T3076] usb 10-1: config 0 descriptor??
[  597.956858][ T3076] hub 10-1:0.0: bad descriptor, ignoring hub
[  597.959249][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.973637][ T3076] hub 10-1:0.0: probe with driver hub failed with error -5
[  597.982407][ T3076] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  597.991436][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.001563][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.012096][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.021969][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.049362][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.069468][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.085223][T13208] dlm: no local IP address has been set
[  598.091005][T13208] dlm: cannot start dlm midcomms -107
[  598.109384][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.130039][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.139672][T13127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.139823][   T30] audit: type=1400 audit(1742040964.383:679): avc:  denied  { name_bind } for  pid=13209 comm="syz.5.2122" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  598.148353][T13127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.148379][T13127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.174340][   T30] audit: type=1326 audit(1742040964.413:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13209 comm="syz.5.2122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd6f38d169 code=0x0
[  598.181977][T13127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.254056][T13203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.265969][   T30] audit: type=1400 audit(1742040964.493:681): avc:  denied  { bind } for  pid=13202 comm="syz.9.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  598.285857][T13203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.341577][ T5869] usb 10-1: USB disconnect, device number 16
[  598.405195][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.496083][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.504096][T13251] dns_resolver: Unsupported content type (152)
[  598.527200][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.547782][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.609442][   T30] audit: type=1400 audit(1742040964.843:682): avc:  denied  { name_connect } for  pid=13209 comm="syz.5.2122" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  598.703542][   T30] audit: type=1400 audit(1742040964.943:683): avc:  denied  { create } for  pid=13258 comm="syz.6.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  599.126602][ T5820] Bluetooth: hci5: command tx timeout
[  600.616406][T13273] can0: slcan on ptm0.
[  600.897198][T13285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  600.941186][T13267] can0 (unregistered): slcan off ptm0.
[  601.964892][T13295] cgroup: name respecified
[  602.213590][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'.
[  604.714691][T13321] cgroup: name respecified
[  606.408301][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880526cac00: rx timeout, send abort
[  606.486614][   T30] audit: type=1326 audit(1742040972.723:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.3.2148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb61678d169 code=0x0
[  606.555541][T13348] cgroup: name respecified
[  606.729782][T13350] cgroup: name respecified
[  606.916565][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880526cac00: abort rx timeout. Force session deactivation
[  607.190949][T13359] tipc: Started in network mode
[  607.195972][T13359] tipc: Node identity ac1414aa, cluster identity 4711
[  607.207319][T13359] tipc: Enabled bearer <udp:syz2>, priority 10
[  607.222617][T13359] tipc: Disabling bearer <udp:syz2>
[  607.893168][T13362] cgroup: name respecified
[  608.989463][T13376] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  610.979116][T13384] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  611.246842][T13376] syz.6.2156: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  611.280684][T13376] CPU: 1 UID: 0 PID: 13376 Comm: syz.6.2156 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  611.280703][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  611.280709][T13376] Call Trace:
[  611.280712][T13376]  <TASK>
[  611.280717][T13376]  dump_stack_lvl+0x16c/0x1f0
[  611.280734][T13376]  warn_alloc+0x24d/0x3a0
[  611.280747][T13376]  ? __pfx_warn_alloc+0x10/0x10
[  611.280762][T13376]  ? __get_vm_area_node+0x1b0/0x2f0
[  611.280777][T13376]  ? __get_vm_area_node+0x1dc/0x2f0
[  611.280794][T13376]  __vmalloc_node_range_noprof+0x1102/0x1530
[  611.280815][T13376]  ? packet_set_ring+0xb13/0x18f0
[  611.280832][T13376]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  611.280849][T13376]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  611.280861][T13376]  ? rcu_is_watching+0x12/0xc0
[  611.280872][T13376]  ? trace_kmalloc+0x2d/0xd0
[  611.280885][T13376]  ? __kmalloc_noprof+0x23b/0x510
[  611.280896][T13376]  ? packet_set_ring+0xb13/0x18f0
[  611.280918][T13376]  vzalloc_noprof+0x6b/0x90
[  611.280934][T13376]  ? packet_set_ring+0xb13/0x18f0
[  611.280948][T13376]  packet_set_ring+0xb13/0x18f0
[  611.280966][T13376]  packet_setsockopt+0x1658/0x21f0
[  611.280983][T13376]  ? __pfx_packet_setsockopt+0x10/0x10
[  611.280998][T13376]  ? __pfx_sock_has_perm+0x10/0x10
[  611.281011][T13376]  ? selinux_netlbl_socket_setsockopt+0x184/0x470
[  611.281027][T13376]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  611.281049][T13376]  ? selinux_socket_setsockopt+0x6a/0x80
[  611.281062][T13376]  ? __pfx_packet_setsockopt+0x10/0x10
[  611.281081][T13376]  do_sock_setsockopt+0x222/0x480
[  611.281092][T13376]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  611.281103][T13376]  ? lock_acquire+0x2f/0xb0
[  611.281124][T13376]  __sys_setsockopt+0x1a0/0x230
[  611.281142][T13376]  __x64_sys_setsockopt+0xbd/0x160
[  611.281155][T13376]  ? do_syscall_64+0x91/0x250
[  611.281169][T13376]  ? lockdep_hardirqs_on+0x7c/0x110
[  611.281181][T13376]  do_syscall_64+0xcd/0x250
[  611.281195][T13376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.281210][T13376] RIP: 0033:0x7fdb0598d169
[  611.281220][T13376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.281230][T13376] RSP: 002b:00007fdb0672f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  611.281241][T13376] RAX: ffffffffffffffda RBX: 00007fdb05ba6080 RCX: 00007fdb0598d169
[  611.281247][T13376] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000c
[  611.281253][T13376] RBP: 00007fdb05a0e2a0 R08: 000000000000001c R09: 0000000000000000
[  611.281259][T13376] R10: 0000400000000380 R11: 0000000000000246 R12: 0000000000000000
[  611.281265][T13376] R13: 0000000000000000 R14: 00007fdb05ba6080 R15: 00007ffe34c78b68
[  611.281278][T13376]  </TASK>
[  611.281297][T13376] Mem-Info:
[  611.575754][T13376] active_anon:4333 inactive_anon:0 isolated_anon:0
[  611.575754][T13376]  active_file:22782 inactive_file:38820 isolated_file:0
[  611.575754][T13376]  unevictable:768 dirty:333 writeback:0
[  611.575754][T13376]  slab_reclaimable:11488 slab_unreclaimable:119503
[  611.575754][T13376]  mapped:34616 shmem:1440 pagetables:808
[  611.575754][T13376]  sec_pagetables:0 bounce:0
[  611.575754][T13376]  kernel_misc_reclaimable:0
[  611.575754][T13376]  free:1260860 free_pcp:11807 free_cma:0
[  611.627181][T13376] Node 0 active_anon:17332kB inactive_anon:0kB active_file:91128kB inactive_file:155208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138464kB dirty:1332kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no
[  611.662205][T13376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no
[  611.685136][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2162'.
[  611.703069][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2162'.
[  611.719394][ T5869] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  611.774864][T13376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  611.826037][T13376] lowmem_reserve[]: 0 2487 2487 2487 2487
[  611.834015][T13376] Node 0 DMA32 free:1180864kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:17424kB inactive_anon:0kB active_file:91128kB inactive_file:155108kB unevictable:3036kB writepending:1328kB present:3129332kB managed:2547360kB mlocked:7600kB bounce:0kB free_pcp:10576kB local_pcp:584kB free_cma:0kB
[  611.874895][T13376] lowmem_reserve[]: 0 0 0 0 0
[  611.898682][T13376] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  611.932703][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.937019][T13396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.944304][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.966367][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.969282][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.009100][T13376] lowmem_reserve[]: 0 0 0 0 0
[  612.017202][ T5869] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[  612.028067][T13376] Node 1 Normal free:3828584kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:48728kB local_pcp:25956kB free_cma:0kB
[  612.058749][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.070882][ T5869] usb 6-1: config 0 descriptor??
[  612.079400][T13376] lowmem_reserve[]: 0 0 0 0 0
[  612.093922][T13376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  612.111564][T13376] Node 0 DMA32: 437*4kB (UE) 640*8kB (UME) 1134*16kB (UME) 696*32kB (UME) 360*64kB (ME) 65*128kB (UME) 56*256kB (M) 33*512kB (ME) 23*1024kB (UME) 11*2048kB (UME) 252*4096kB (UM) = 1188148kB
[  612.162351][T13376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  612.202312][T13376] Node 1 Normal: 2*4kB (ME) 6*8kB (UE) 1*16kB (M) 3*32kB (ME) 9*64kB (E) 3*128kB (UE) 3*256kB (UME) 0*512kB 3*1024kB (UME) 3*2048kB (UME) 932*4096kB (UM) = 3828584kB
[  612.416720][T13376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  612.427861][T13376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  612.454873][T13376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  612.465006][T13400] xt_socket: unknown flags 0x4
[  612.471267][T13376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  612.491216][T13376] 65912 total pagecache pages
[  612.496975][T13376] 0 pages in swap cache
[  612.524007][T13376] Free swap  = 124664kB
[  612.531770][T13376] Total swap = 124996kB
[  612.543829][T13376] 2097051 pages RAM
[  612.548576][T13376] 0 pages HighMem/MovableOnly
[  612.575958][T13376] 428553 pages reserved
[  612.587601][T13376] 0 pages cma reserved
[  612.610919][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  612.620356][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  612.629420][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  612.638308][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  612.649952][ T5822] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  612.657799][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  612.685372][T13402] wlan0 speed is unknown, defaulting to 1000
[  612.706991][ T5869] thrustmaster 0003:044F:B65A.0010: hidraw0: USB HID v0.09 Device [HID 044f:b65a] on usb-dummy_hcd.5-1/input0
[  613.158583][ T5869] thrustmaster 0003:044F:B65A.0010: no inputs found
[  613.467254][T13409] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2167'.
[  613.776005][T13409] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  613.920546][T13409] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  614.027009][T11198] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.036499][T13419] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2169'.
[  614.057968][T11346] usb 6-1: USB disconnect, device number 23
[  614.221278][T11198] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.406096][T11198] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.463086][T13402] chnl_net:caif_netlink_parms(): no params data found
[  614.700373][ T5820] Bluetooth: hci1: command tx timeout
[  615.283536][T13445] slcan: can't register candev
[  615.288411][T13445] Falling back ldisc for ptm0.
[  615.397808][T13449] cgroup: name respecified
[  615.844461][T11198] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.054286][T13402] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.071627][T13402] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.079759][T13402] bridge_slave_0: entered allmulticast mode
[  616.086569][T13402] bridge_slave_0: entered promiscuous mode
[  616.097247][T13402] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.104746][T13402] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.105098][T13453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2176'.
[  616.112082][T13402] bridge_slave_1: entered allmulticast mode
[  616.127793][T13402] bridge_slave_1: entered promiscuous mode
[  616.494713][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.586871][T13470] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2180'.
[  616.627092][T13470] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  616.657160][T13470] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  616.732615][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.735298][T13469] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2179'.
[  616.769852][ T5820] Bluetooth: hci1: command tx timeout
[  616.928040][   T30] audit: type=1326 audit(1742040983.163:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb61678d169 code=0x0
[  617.005795][T13402] team0: Port device team_slave_0 added
[  617.175305][T13402] team0: Port device team_slave_1 added
[  617.853434][T11198] bridge_slave_1: left allmulticast mode
[  617.859139][T11198] bridge_slave_1: left promiscuous mode
[  617.869362][T11198] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.923017][T11198] bridge_slave_0: left allmulticast mode
[  617.928787][T11198] bridge_slave_0: left promiscuous mode
[  617.944622][T11198] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.956297][T13484] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  617.963969][T13484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.974988][T13484] FAULT_INJECTION: forcing a failure.
[  617.974988][T13484] name failslab, interval 1, probability 0, space 0, times 0
[  617.988173][T13484] CPU: 0 UID: 0 PID: 13484 Comm: syz.9.2183 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  617.988196][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  617.988206][T13484] Call Trace:
[  617.988211][T13484]  <TASK>
[  617.988218][T13484]  dump_stack_lvl+0x16c/0x1f0
[  617.988250][T13484]  should_fail_ex+0x50a/0x650
[  617.988276][T13484]  ? fs_reclaim_acquire+0xae/0x150
[  617.988302][T13484]  should_failslab+0xc2/0x120
[  617.988322][T13484]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  617.988340][T13484]  ? __alloc_skb+0x2b1/0x380
[  617.988364][T13484]  __alloc_skb+0x2b1/0x380
[  617.988384][T13484]  ? __pfx___alloc_skb+0x10/0x10
[  617.988406][T13484]  ? genl_rcv_msg+0x4a0/0x800
[  617.988429][T13484]  ? genl_rcv_msg+0x4bd/0x800
[  617.988459][T13484]  netlink_ack+0x15f/0xb80
[  617.988487][T13484]  netlink_rcv_skb+0x348/0x440
[  617.988510][T13484]  ? __pfx_genl_rcv_msg+0x10/0x10
[  617.988536][T13484]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  617.988569][T13484]  ? down_read+0xc9/0x330
[  617.988592][T13484]  ? __pfx_down_read+0x10/0x10
[  617.988616][T13484]  ? netlink_deliver_tap+0x1ae/0xd30
[  617.988642][T13484]  genl_rcv+0x28/0x40
[  617.988665][T13484]  netlink_unicast+0x53c/0x7f0
[  617.988691][T13484]  ? __pfx_netlink_unicast+0x10/0x10
[  617.988720][T13484]  netlink_sendmsg+0x8b8/0xd70
[  617.988747][T13484]  ? __pfx_netlink_sendmsg+0x10/0x10
[  617.988780][T13484]  ____sys_sendmsg+0xaaf/0xc90
[  617.988799][T13484]  ? copy_msghdr_from_user+0x10b/0x160
[  617.988823][T13484]  ? __pfx_____sys_sendmsg+0x10/0x10
[  617.988854][T13484]  ___sys_sendmsg+0x135/0x1e0
[  617.988880][T13484]  ? __pfx____sys_sendmsg+0x10/0x10
[  617.988914][T13484]  ? __pfx_lock_release+0x10/0x10
[  617.988938][T13484]  ? trace_lock_acquire+0x14e/0x1f0
[  617.988965][T13484]  ? __fget_files+0x206/0x3a0
[  617.988989][T13484]  __sys_sendmsg+0x16e/0x220
[  617.989013][T13484]  ? __pfx___sys_sendmsg+0x10/0x10
[  617.989042][T13484]  do_syscall_64+0xcd/0x250
[  617.989063][T13484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.989082][T13484] RIP: 0033:0x7f9aa2d8d169
[  617.989094][T13484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  617.989106][T13484] RSP: 002b:00007f9aa3b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  617.989120][T13484] RAX: ffffffffffffffda RBX: 00007f9aa2fa5fa0 RCX: 00007f9aa2d8d169
[  617.989131][T13484] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003
[  617.989141][T13484] RBP: 00007f9aa3b74090 R08: 0000000000000000 R09: 0000000000000000
[  617.989150][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  617.989158][T13484] R13: 0000000000000000 R14: 00007f9aa2fa5fa0 R15: 00007ffc9b1d0568
[  617.989180][T13484]  </TASK>
[  618.329793][T12301] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  618.509359][ T5917] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  618.669405][ T5917] usb 7-1: Using ep0 maxpacket: 32
[  618.678553][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.723762][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57856, setting to 1024
[  618.782651][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  618.847162][ T5917] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  618.862305][ T5820] Bluetooth: hci1: command tx timeout
[  618.935933][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.016808][ T5917] usb 7-1: config 0 descriptor??
[  619.031908][T12301] usb 4-1: Using ep0 maxpacket: 16
[  619.054828][T12301] usb 4-1: config 7 has an invalid interface number: 39 but max is 0
[  619.064530][T12301] usb 4-1: config 7 has no interface number 0
[  619.072620][T12301] usb 4-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=59.66
[  619.087622][T12301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.095717][T12301] usb 4-1: Product: syz
[  619.099904][T12301] usb 4-1: Manufacturer: syz
[  619.104537][T12301] usb 4-1: SerialNumber: syz
[  619.113780][T11198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  619.129345][T11198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  619.139431][T11198] bond0 (unregistering): Released all slaves
[  619.162032][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.169070][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.196904][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.208189][T13490] slcan: can't register candev
[  619.213168][T13490] Falling back ldisc for ptm0.
[  619.302854][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.310540][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.348841][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.423540][T12301] usb 4-1: bad CDC descriptors
[  619.435800][T12301] usb 4-1: USB disconnect, device number 26
[  619.445142][ T5917] hid (null): unknown global tag 0xa6
[  619.484595][ T5917] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0011/input/input34
[  619.511328][T13402] hsr_slave_0: entered promiscuous mode
[  619.517575][T13402] hsr_slave_1: entered promiscuous mode
[  619.523755][T13402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  619.549505][T13402] Cannot create hsr debugfs directory
[  619.565577][ T5917] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0011/input/input35
[  619.586120][ T5917] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0
[  619.734103][T11198] hsr_slave_0: left promiscuous mode
[  619.746263][T11198] hsr_slave_1: left promiscuous mode
[  619.752792][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  619.760540][T11198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.769829][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  619.777972][T11198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.796367][   T30] audit: type=1326 audit(1742040986.033:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.5.2188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd6f38d169 code=0x0
[  619.828360][T11198] veth1_macvtap: left promiscuous mode
[  619.840982][T11198] veth0_macvtap: left promiscuous mode
[  619.846788][T11198] veth1_vlan: left promiscuous mode
[  619.857139][T12301] usb 7-1: USB disconnect, device number 18
[  619.863251][T11198] veth0_vlan: left promiscuous mode
[  620.338407][T13508] vimc link validate: Sensor B:src:1766x16 (0x33424752, 9, 2, 0, 2) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  620.361070][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'.
[  620.370187][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'.
[  620.484119][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'.
[  620.929456][ T5820] Bluetooth: hci1: command tx timeout
[  621.398882][T13520] cgroup: name respecified
[  622.104715][ T5820] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  622.837181][   T31] INFO: task syz.7.1645:11506 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  623.001312][   T31]       Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  623.009308][ T5820] Bluetooth: hci1: command tx timeout
[  623.015068][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  623.023851][   T31] task:syz.7.1645      state:D stack:28416 pid:11506 tgid:11498 ppid:9264   task_flags:0x400740 flags:0x00004006
[  623.039242][   T31] Call Trace:
[  623.086152][   T31]  <TASK>
[  623.111254][   T31]  __schedule+0xf43/0x5890
[  623.121838][   T31]  ? __pfx___lock_acquire+0x10/0x10
[  623.419416][   T31]  ? find_held_lock+0x2d/0x110
[  623.461269][   T30] audit: type=1400 audit(1742040989.693:687): avc:  denied  { write } for  pid=13541 comm="syz.3.2199" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  623.489422][   T31]  ? __pfx___schedule+0x10/0x10
[  623.494312][   T31]  ? schedule+0x298/0x350
[  623.498641][   T31]  ? __pfx_lock_release+0x10/0x10
[  623.549438][   T31]  ? finish_task_switch.isra.0+0x217/0xcc0
[  623.566123][   T31]  ? lock_acquire+0x2f/0xb0
[  623.570910][   T30] audit: type=1400 audit(1742040989.693:688): avc:  denied  { write open } for  pid=13541 comm="syz.3.2199" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  623.592854][   T31]  ? schedule+0x1fd/0x350
[  623.597205][   T31]  schedule+0xe7/0x350
[  623.607624][   T31]  schedule_timeout+0x244/0x280
[  623.612538][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  623.617924][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  623.623321][   T31]  __wait_for_common+0x3e1/0x600
[  623.628270][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  623.633700][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  623.639176][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  623.644590][   T31]  wait_for_completion_state+0x1c/0x40
[  623.650468][   T31]  do_coredump+0x86f/0x4410
[  623.655039][   T31]  ? unwind_get_return_address+0x59/0xa0
[  623.662864][   T31]  ? __pfx_do_coredump+0x10/0x10
[  623.667846][   T31]  ? stack_trace_save+0x95/0xd0
[  623.679149][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  623.686536][   T31]  ? hlock_class+0x4e/0x130
[  623.697416][   T31]  ? stack_depot_save_flags+0x28/0x9c0
[  623.702932][   T31]  ? kasan_save_stack+0x42/0x60
[  623.707784][   T31]  ? kasan_save_stack+0x33/0x60
[  623.718977][   T31]  ? kasan_save_track+0x14/0x30
[  623.723872][   T31]  ? kasan_save_free_info+0x3b/0x60
[  623.729081][   T31]  ? __kasan_slab_free+0x51/0x70
[  623.739220][   T31]  ? kmem_cache_free+0x2e2/0x4d0
[  623.744173][   T31]  ? __sigqueue_free+0xba/0x2a0
[  623.749031][   T31]  ? get_signal+0xcbc/0x26c0
[  623.760827][   T31]  ? arch_do_signal_or_restart+0x90/0x7e0
[  623.766539][   T31]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  623.772698][   T31]  ? find_held_lock+0x2d/0x110
[  623.777462][   T31]  ? proc_coredump_connector+0x2d2/0x4f0
[  623.783304][   T31]  ? __pfx_proc_coredump_connector+0x10/0x10
[  623.790990][   T31]  get_signal+0x230b/0x26c0
[  623.795510][   T31]  ? __pfx_get_signal+0x10/0x10
[  623.800369][   T31]  ? rcu_is_watching+0x12/0xc0
[  623.805125][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  623.811409][   T31]  arch_do_signal_or_restart+0x90/0x7e0
[  623.816960][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  623.823122][   T31]  ? __pfx_do_readv+0x10/0x10
[  623.827783][   T31]  syscall_exit_to_user_mode+0x150/0x2a0
[  623.833443][   T31]  do_syscall_64+0xda/0x250
[  623.837938][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.843826][   T31] RIP: 0033:0x7f9fcb24e750
[  623.848214][   T31] RSP: 002b:00007f9fc91d43f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  623.856626][   T31] RAX: 0000000000000000 RBX: 00007f9fcb5a6088 RCX: 00007f9fcb38d169
[  623.864945][   T31] RDX: 00007f9fc91d4400 RSI: 00007f9fc91d4530 RDI: 000000000000000b
[  623.873003][   T31] RBP: 00007f9fcb5a6080 R08: 00007f9fcc0e8000 R09: 0000000000000000
[  623.881021][   T31] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f9fcb5a608c
[  623.888981][   T31] R13: 0000000000000000 R14: 00007ffeb806da80 R15: 00007ffeb806db68
[  623.897059][   T31]  </TASK>
[  623.900226][   T31] 
[  623.900226][   T31] Showing all locks held in the system:
[  623.907934][   T31] 1 lock held by khungtaskd/31:
[  623.913747][   T31]  #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  623.924186][   T31] 2 locks held by getty/5577:
[  623.929119][   T31]  #0: ffff888035ed20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  623.938971][   T31]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  623.949111][   T31] 3 locks held by kworker/u8:11/9880:
[  623.954507][   T31]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  623.966124][   T31]  #1: ffffc900051f7d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  623.978403][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  623.978442][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  623.995427][   T31]  #2: ffffffff8fef8068 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  624.004644][   T31] 5 locks held by kworker/u8:13/11198:
[  624.017212][   T31]  #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  624.028194][   T31]  #1: ffffc9000c5bfd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  624.045994][   T31]  #2: ffffffff8fee2350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30
[  624.076659][   T31]  #3: ffffffff8fef8068 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8c/0xae0
[  624.089216][   T31]  #4: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[  624.105135][   T31] 2 locks held by syz-executor/13402:
[  624.110551][   T31]  #0: ffffffff8f29dee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0
[  624.126783][   T31]  #1: ffffffff8fef8068 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60
[  624.138556][   T31] 1 lock held by syz.5.2193/13518:
[  624.150845][   T31]  #0: ffffffff8fef8068 (rtnl_mutex){+.+.}-{4:4}, at: wext_handle_ioctl+0x155/0x2b0
[  624.164404][   T31] 1 lock held by syz.6.2197/13532:
[  624.170118][   T31]  #0: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[  624.180360][   T31] 
[  624.218379][   T31] =============================================
[  624.218379][   T31] 
[  624.321108][   T31] NMI backtrace for cpu 0
[  624.321124][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  624.321145][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  624.321154][   T31] Call Trace:
[  624.321160][   T31]  <TASK>
[  624.321167][   T31]  dump_stack_lvl+0x116/0x1f0
[  624.321195][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  624.321213][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  624.321237][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  624.321256][   T31]  watchdog+0xf62/0x12b0
[  624.321287][   T31]  ? __pfx_watchdog+0x10/0x10
[  624.321310][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  624.321332][   T31]  ? __kthread_parkme+0x148/0x220
[  624.321351][   T31]  ? __pfx_watchdog+0x10/0x10
[  624.321376][   T31]  kthread+0x3af/0x750
[  624.321397][   T31]  ? __pfx_kthread+0x10/0x10
[  624.321421][   T31]  ? __pfx_kthread+0x10/0x10
[  624.321442][   T31]  ret_from_fork+0x45/0x80
[  624.321464][   T31]  ? __pfx_kthread+0x10/0x10
[  624.321484][   T31]  ret_from_fork_asm+0x1a/0x30
[  624.321513][   T31]  </TASK>
[  624.321519][   T31] Sending NMI from CPU 0 to CPUs 1:
[  624.434599][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20
[  624.435691][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  624.450671][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  624.461142][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  624.471176][   T31] Call Trace:
[  624.474438][   T31]  <TASK>
[  624.477352][   T31]  dump_stack_lvl+0x3d/0x1f0
[  624.481938][   T31]  panic+0x71d/0x800
[  624.485817][   T31]  ? __pfx_panic+0x10/0x10
[  624.490216][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  624.495576][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  624.501547][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  624.506905][   T31]  ? watchdog+0xdcc/0x12b0
[  624.511310][   T31]  ? watchdog+0xdbf/0x12b0
[  624.515714][   T31]  watchdog+0xddd/0x12b0
[  624.519945][   T31]  ? __pfx_watchdog+0x10/0x10
[  624.524609][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  624.529794][   T31]  ? __kthread_parkme+0x148/0x220
[  624.534802][   T31]  ? __pfx_watchdog+0x10/0x10
[  624.539465][   T31]  kthread+0x3af/0x750
[  624.543517][   T31]  ? __pfx_kthread+0x10/0x10
[  624.548090][   T31]  ? __pfx_kthread+0x10/0x10
[  624.552664][   T31]  ret_from_fork+0x45/0x80
[  624.557065][   T31]  ? __pfx_kthread+0x10/0x10
[  624.561638][   T31]  ret_from_fork_asm+0x1a/0x30
[  624.566389][   T31]  </TASK>
[  624.569578][   T31] Kernel Offset: disabled
[  624.573880][   T31] Rebooting in 86400 seconds..