last executing test programs:

1m44.097681118s ago: executing program 2 (id=2835):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r0, 0x33d1, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0xffffffffffffff34)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000020000000010000000040100"})
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000009c0))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000540)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000700000000000000000000008500000020db5cd11bd648d50a5c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r3, 0xffffffffffffffff, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, 0x0)
ptrace(0x420f, r0)

1m43.096961356s ago: executing program 2 (id=2841):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r2=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="23000100", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)

1m42.851099185s ago: executing program 2 (id=2842):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2c2140, 0x38)
fcntl$setlease(r0, 0x400, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x6, @vbi={0x6, 0xd, 0x6, 0x4745504d, [0x5], [0xffff, 0x2], 0x1}}, 0x9})
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000936000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x5, 0x5, 0x39, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x5, 0xfffeffff}})

1m41.635640493s ago: executing program 2 (id=2845):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800f6ff", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}}, 0x20040005)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0xfffffffe]}}, 0x5c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0013"], 0x28}}, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
socket$inet(0x2, 0x2, 0x1)
time(0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})

1m41.145009813s ago: executing program 2 (id=2847):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0)

1m40.555190953s ago: executing program 2 (id=2848):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x9, &(0x7f0000000100)=[{0xb, 0x3, 0x2, 0x2000003}, {0x3ff, 0x7f, 0x0, 0x5}, {0x24, 0x56, 0x6, 0x1}, {0x2d, 0x7, 0x5, 0x7}, {0xb, 0x9, 0xb, 0x96}, {0x3, 0x5, 0x9, 0xfffffbff}, {0x800, 0x6, 0x8, 0x7f}, {0x3ff, 0x2, 0xfc, 0x354}, {0xff, 0x2, 0x7, 0x6f33}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = dup(r0)
timerfd_gettime(0xffffffffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x1ff, 0xfffd, 0xd6e}})
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100200009040000ff02020000052402000005240004000d240f01090000000000000000090581032000037fff09058202000000010009050302"], 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3d, 0x1101, 0x0, 0x2}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r9, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004c80)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x0)

1m24.759053407s ago: executing program 32 (id=2848):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x9, &(0x7f0000000100)=[{0xb, 0x3, 0x2, 0x2000003}, {0x3ff, 0x7f, 0x0, 0x5}, {0x24, 0x56, 0x6, 0x1}, {0x2d, 0x7, 0x5, 0x7}, {0xb, 0x9, 0xb, 0x96}, {0x3, 0x5, 0x9, 0xfffffbff}, {0x800, 0x6, 0x8, 0x7f}, {0x3ff, 0x2, 0xfc, 0x354}, {0xff, 0x2, 0x7, 0x6f33}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = dup(r0)
timerfd_gettime(0xffffffffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x1ff, 0xfffd, 0xd6e}})
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100200009040000ff02020000052402000005240004000d240f01090000000000000000090581032000037fff09058202000000010009050302"], 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3d, 0x1101, 0x0, 0x2}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r9, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004c80)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x0)

30.794067462s ago: executing program 0 (id=3062):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/17, 0x11, 0xc990, 0x3, 0x7f, 0x0, 0xc07}}, 0x11c)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

29.662839441s ago: executing program 0 (id=3064):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x80000000)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4608060381090000000000000003003e00800000001300000000000000400000000000000052030000000000000500000006003800010002000c0002000500000002000000050000000000000000000080000000000600000000000000000000000000000000000000000000000002000000000000e6420c0e113b1c702e29e308ea2518c20eb48df5d010e3945a5b302793d5c21ae2646449c8c2c7a59f2843a6af258390d391fc270f067cadfe57fa5df2ff0cbcf02a39c2d92eb2cec4e7327455f4fba3080ec467d0a2ad8d0b38748813b456bace281e620094719abab27dee08142133d0e437293fb9f4b565eee4ca6f00"/2293], 0x8f5)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x26000000, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSID(r4, 0x5429, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0xa, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002f80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000c2e5784dbc8823c27d143da644cfeba7a500000095000000000000000003000080aec34bdf61638606df5492fe2703284124dd1ff113dad2fa1ff3c8aec11f50e634d595f8b7bbaf6fe2001e66a4f1a4ee8a42e2d3d1406e174ba99d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f000072e000/0x1000)=nil, 0x1000, 0x11)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000000)={0x1, 0x1d})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

27.514694608s ago: executing program 0 (id=3070):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$uac1(0x2, 0xd4, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x2, 0x30, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0x8, "36c02ba1"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x7, 0x2, "7d34f77d2fbc"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0xa8, "98"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "b09653ee1925"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1, 0xc, "8ea433fdca5b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x9, 0x4e, {0x7, 0x25, 0x1, 0x82, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0xea, 0x9, "f8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x71, 0x4}, @as_header={0x7, 0x24, 0x1, 0x30, 0x6, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xcc, 0x8, 0xa4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4, "b7", "9b72"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0xa, 0xd3, {0x7, 0x25, 0x1, 0x81, 0x5, 0x200}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xfc, 0x5, 0xb, 0x20, 0x8}, 0xc4, &(0x7f00000002c0)={0x5, 0xf, 0xc4, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x3, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x1, 0x4, 0x1}, @ptm_cap={0x3}, @generic={0x9a, 0x10, 0x2, "ca93f87f47274232e9d765baa7bdbb672341bfc02b287055605c535dbaf3cb0d4a7cbd3abe4dbf95e7bdc718b102434f953fa3b7bfaca8b570600b49ca9523e23435ebac14c7c3d86dd696e150cba85f3032ed4464e0114e1c11f9897e9faa3e1d8a6d82b30ce0f05b82569c23987c88893610a6e5e5f9117a395a2bd210e8f8c38ca1febcf785d77bfc1c50b82a107e4c707585d0a9cc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0xe0}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}]})
syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0x23, 0x94, {0x94, 0x1, "5f17a8a7d88cda7be064cc384b5747772ba1725b959e71e2ba73bfd744b7a5c06c414202dcd51fd5fd137101f26c204d19605fccb487010401b12eace5deb08e3916ea9b7f396e572de9ca13fdffebf890b7be26c133ad6c5219afeb7f8fb9d699dfd075417d86b45a46fa83c3ff0dd66e4f3538c59aab240d3f84e3b064137ac3eb9ef7d0022ee2967fac8ebc4d1f7c4d37"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x0, 0x14, 0x73, "8fc941973b123330505a57c0fe2851e0bf188b3ee5c30f060140b7b481be8fa4853a620a99a130d3150970c08ce5e15e04ab94989f046941a862dc8a493cb6e9466ec320090d1ab11e9b898ee2d6812aa64b8075b963783dcd6f7884ef2a1441f0e318d010b40d48930ec5f8706ead6afa551b"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x81, 0x2, "d64f"}, &(0x7f0000000680)={0x20, 0x82, 0x1, "b6"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "d0b72e"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d1"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "0f0ff7"}})

11.40484816s ago: executing program 4 (id=3126):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000783afdfe8000000000000000000000000000bbff020000000000000000b4c70000000000009078000000000000000000000000180b00d414ce8ad4000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10)
unlinkat(0xffffffffffffffff, 0x0, 0x28c)
epoll_create(0x1ff)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000)
r9 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

8.009918077s ago: executing program 3 (id=3136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1cc, 0x0, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, 0x0)
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40c0)

7.91185686s ago: executing program 5 (id=3137):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x5, 0xfffffffd}, 0xc) (fail_nth: 1)

7.018899662s ago: executing program 3 (id=3138):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007b00), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000007c40)={0x0, 0x0, &(0x7f0000007c00)={&(0x7f0000007b80)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x60040840)

6.601579908s ago: executing program 5 (id=3140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x24, 0x1c, 0x1, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r6, 0x3, 0x3e, 0x6}, [@NDA_FLAGS_EXT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040055}, 0x0) (async)
dup(0xffffffffffffffff) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000020605000a000000000000000000000005000400000000000900020073797a3000000000050005000fcab800050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x4044064}, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6}, 0x8) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r9 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) (async)
r10 = socket(0x28, 0x5, 0x0) (async)
r11 = epoll_create1(0x80000) (async)
r12 = creat(&(0x7f00000001c0)='./bus\x00', 0x110)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="11"]) (async)
ioctl$NBD_SET_SOCK(r9, 0xab00, r10) (async)
bind$tipc(r7, &(0x7f0000000040), 0x10)

6.305873042s ago: executing program 3 (id=3141):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x3, @mcast1}}, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0xa1, 0xfe, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x24000040)
socket(0x10, 0x803, 0x0)
r6 = getpid()
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
recvfrom$inet(r2, &(0x7f00000002c0)=""/111, 0x6f, 0x2000, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001180)={r6, r8, 0x0, 0x0, 0x0}, 0x30)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r9, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)

6.014719341s ago: executing program 5 (id=3142):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.799705197s ago: executing program 5 (id=3143):
socket$kcm(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setresgid(0xee00, 0xee01, 0x0)
setregid(0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x80ff}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
listen(r7, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

5.102078651s ago: executing program 3 (id=3144):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000540)=@urb_type_control={0x2, {0x7, 0x1}, 0x5, 0xe0, &(0x7f0000000480)={0x60, 0x14, 0xe7, 0x3ff, 0x3}, 0x8, 0x8, 0xb, 0x0, 0x3f, 0x9, &(0x7f00000006c0)="fbb994d9d57f17839f31f8c393f81c98d2744608424c163c786fd810b38480f97e41e5dcdb26a39f51f7c6df05040be46f5ba0d74057b7580a76ff4cc4d65323d83e61160b734118fb52af"})
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.818588553s ago: executing program 5 (id=3145):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x800)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.660958904s ago: executing program 3 (id=3146):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="790d51aa8adb5b7e2e9e1842cc7e88af934aa1fd03d5c68af7fe2822761576f8fa7d0e9e9ee5022620ffe86df7331e2880705151805f341ede65a3fa67f961b01e0e3c869f8bf0be6bf390780048d55d128191e8cb034b1d8535a8cc552865328005317cd7a8020e082f47257eb22bf3dad4cc1616cfc39fe622eec58259e8a31513d41ffcece6946d2f943a7d46c05ac4a7c36c9dbf975b2d5bdf741f14465a891fa32757187a02385a6f510ed6928ec5df437c53df074ff87d73b66f1abf9e3c4aa288b599afa970e2"]}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x101, 0x1, 0x0, 0x3}, 0x1c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r4, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000640)={0xad6b, 0x2, {0x3, 0x0, 0x3, 0x0, 0x1}, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x800)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, &(0x7f0000000800), &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.454389333s ago: executing program 4 (id=3147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1cc, 0x0, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, 0x0)
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40c0)

4.309314287s ago: executing program 0 (id=3079):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x80000000)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4608060381090000000000000003003e00800000001300000000000000400000000000000052030000000000000500000006003800010002000c0002000500000002000000050000000000000000000080000000000600000000000000000000000000000000000000000000000002000000000000e6420c0e113b1c702e29e308ea2518c20eb48df5d010e3945a5b302793d5c21ae2646449c8c2c7a59f2843a6af258390d391fc270f067cadfe57fa5df2ff0cbcf02a39c2d92eb2cec4e7327455f4fba3080ec467d0a2ad8d0b38748813b456bace281e620094719abab27dee08142133d0e437293fb9f4b565eee4ca6f00"/2293], 0x8f5)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x26000000, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSID(r4, 0x5429, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0xa, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002f80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000c2e5784dbc8823c27d143da644cfeba7a500000095000000000000000003000080aec34bdf61638606df5492fe2703284124dd1ff113dad2fa1ff3c8aec11f50e634d595f8b7bbaf6fe2001e66a4f1a4ee8a42e2d3d1406e174ba99d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f000072e000/0x1000)=nil, 0x1000, 0x11)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000000)={0x1, 0x1d})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

3.307600008s ago: executing program 4 (id=3149):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0088000004000000010000000200000000005f00300061002e00"/58], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
set_mempolicy(0x1, 0x0, 0x4)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20088844)
r6 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, 0x0)
ioctl$CEC_DQEVENT(r6, 0x40046109, &(0x7f0000000340))
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x800, &(0x7f0000000440)=<r7=>0x0)
r8 = eventfd(0x5)
io_submit(r7, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x1, 0xfffe, r8, 0x0, 0x0, 0x2}])
socket$inet(0x2, 0x2, 0x1)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0xfeff, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}})
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x0)
r11 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0)
splice(r10, 0x0, r11, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000)

3.097888039s ago: executing program 1 (id=3150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r4 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000001540))
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r4, 0x184c, 0x0, 0xff00, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48)

2.992412428s ago: executing program 0 (id=3151):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$binder(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000440)={[{@stats}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x4, 0x0, 0x6350}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x4, r2, 0x7a}, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020)

2.860387193s ago: executing program 1 (id=3152):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.801709249s ago: executing program 1 (id=3153):
creat(&(0x7f00000002c0)='./file0\x00', 0x70)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r2)
sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b80)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYRES16=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r1, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r6 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r7)
timer_settime(r7, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f0000000400))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398ee, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000953e343740c24388e592377f0de41798d86d56911195ad8439a5afcb2f150509aa482b4b5aa41de3dfca845d449d6cb6b6182309c5f0ae2df24b1c01a1d7968cbf78bb485d35c925f45a6345ec66e7e894c6a33aa916add4b773c193d79068132e357a8b5f0ef9f7b8bb95bb77b34fedd66d1931af371107a946302eae55306ff39484c6362658becbb4eeac6137a250c83a76c3537bd99f0774141a1f4be30dfb2843f5d6c3adf6a73ad80ec30cc0ff991e66b4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r9=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r9}}, 0x48)

2.239549431s ago: executing program 1 (id=3154):
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x101}, &(0x7f0000000240)=0x8)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
openat$null(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r3 = dup(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8)
sendfile(r2, r3, 0x0, 0x80006)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x1}}]}]}]}, 0x48}}, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000440)=r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
gettid()
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x4}, 0x48, 0xffffffffffffffff)

1.969184399s ago: executing program 4 (id=3155):
socket(0x11, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000001c0)={0x1, 0x3, 0x4})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

1.84851337s ago: executing program 0 (id=3156):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000783afdfe8000000000000000000000000000bbff020000000000000000b4c70000000000009078000000000000000000000000180b00d414ce8ad4000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10)
unlinkat(0xffffffffffffffff, 0x0, 0x28c)
epoll_create(0x1ff)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000)
r9 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.589739197s ago: executing program 1 (id=3157):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x126ea8)
mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1000004, 0x810, r0, 0x7f5c6000)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @broadcast}, 0x40a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='pim6reg0\x00', 0x6, 0x800, 0x1e})
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
getpriority(0x1, r1)
r2 = userfaultfd(0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002180)={{r0}, 0x0, 0xa, @unused=[0x5e3, 0x38, 0x1ff, 0x7ff], @name="39ce1d9cb9650e5d80e13d7fa00775083e4724aefb7acd4f7bb1865dfc97bea9f98d29f31b3e0da17aa5148c875a132cddf05340ef817372249d950ca75a385fbe734f7219cfb377da8d6f371d7fa823c157116e462772f0678980470b9c7eecc6b7b46f9a48e3ca5cc4d083d2dca4c44971c2c9ec4a8a37e1cec0f20f6f998b9ae9b01e3482c1e6caa07865446a4e66c5f8a521af8625e24b3eb93ab9ba0060a95b9189a7e631b3b8dd8d33f8b75a87aa1cbbd6a5ef4989a48b2a41ddfb2795feb6bdca4538460d6337734de022d4849003ea4cdc6c3aaeff887b29b6f3563b6b9914ad8d53f9fbd7170fbe58d7acefba8a2ac3690c96b42a60d867ab4636cf84f4108fe2444056458e4d0ada4e52509ccd9e3b86457b485da93a930d238cf822cd861b51c69a0bd5c883befd832fa74a1d7c28c996cbb1d29d1eb6a2e09f0fc898e9ee5d6f79f32086cd76b57feb7ad06333dd7712850c4411f3c62d28f16c8f351133415ca7a63c47ef73a3475421c0c44d6c68c0ca7ee01b372619beb9b7f28ca89440c2077c3eeed468348ade5888de10a6a88ab2f329feeacd9f3f2639cdb1f7fc20a570bc119d11576b51c96f0955eac340b088454bfba35c2802729a6352329a0d62b07d2787b8e6fa413558147dbaa004576ee853f353f32259a9c592d8dc04323d497b56778514b33e358c7243dc7d6d944af56086c6eda467d9dab9e0aaa85f804c4d517a5e8dc25e9878ea8e204840b77bdebea30d06560c8e817e0e12e94c3df9f15dcbb3b21178b3d821806d933d4388a510809941f197569a063d70eb91d1f105bceb2d173e4ba4ec05995c6afb8667c3527b0743bc9b4b2549eeffec42866f05ee819193cda3312fb4b3e40cad0eac2357c3a4ec0a62f04eafeab768ab75614424f5a8bf802ceb97a746cc9816b4342b19d4fb7cc26de99ccbd8502a755c028c819836074c4863e790df203e249295d74691e41df4ea3e8f26bec4850c247be50a1b7f7638cdc6bc0c251c1ee5979a924ce879c75593cccf42c49cee22c63d3989cc58975d70bf6ebd37fa8b8b581f95ba0fb13fceb39fdee803cd83649e4702d3edbabea5feef84f675b64f98a809f1d87cbc3b89e9f4962fa859668087c4de1532f0ee292a901e84685bef5686ebf97ad8f569a568b41f71352efae6373e5fbc203ef2189e8710253101daf728861c659452d95e751b29e016283eae3cddad51a086e2920eebe7f2e7298532bececcaf29159fb75a9c53fd3ace35d2471981ebdb81a16f3a093a6b2b1281ff772733e242ac4a9f203cb33090342a078fa755b2e74ab1fbaee8bafffeb5c73cfb69469e745e63303db4f21da112619acc39d21e36058864480cff53742a2d45d6a35b0141429935f284b949b4b95ce0ec13d9812051ad5233eb55ad526b4579d5ba66377399f8d784aa8d20b4341a31fb153033cb671d909722a934d3c70d33ede393fe774ae2c1189952d62810c4b2482631789063b67dbf410814e9485ebdef7018d169251247d3ef22f7616d8e2c9f024270ffeca8a8dbf527634db39b8e312d9fe6830de259f27840f0cfd9605a4476d896c4221437f6ed06b7015e69f6291a9c505fa6dcee218f6af505d175c22baf2b9762db27186b32bdd36ace0b785aec2a01841c7339c5d50f77dc17a453f07ce41f105aea96430c414c8cfa30b16f52fad1ba2a074c46d331a8ffebf84dab0057c82f082c07616d68a502aebf6f46ef9195c32210ea5496bbe90bdcd6a2a71bc750a900c3c6208a2b00164ccf1015182dad7c9c131a3ccfb72dfe7ce0a17b623bff6d7be5403b6c3a6c40f359adc6d35cc217e85b07ce274967f858d332aed2eeaf7eee83b088d4a678f246f55c4cda7219f158b8494a8e83cdb0d86b24fb29f9e42a0083830741ac5af1edf8e64c35bc51213ebb5c47b9dd2b30d11739d633008da041b3e148766eb6a71f710964354e5453ffacfd2b8c1cae1167dff0bb0730ce404dd0067e3f14d250f527fcae2429038dcc818fcc8ba4f30164b543b7baa94a40763511c0d5fa4179b70fcdd90ce27871e9b860b26dec5875cba86d8e1ca49a579cbd15382dc619d2851db61b78b080ddcec087a3b46aa37437800789c8da6c1765914af38e02e7fc8ddc4ec9dafd0afcf4a0e302d4babb3440545fb76bcb14f82e98c202f6cfb6e3c6b8db0ac200af5ed1ab23f42d8adc7ea18d25e699f192c7a04ca413cd7bbd92259eaad50ad42ff117237534421d5b314e27e270265b926a9faaec359f3cd538f55140df62606d7e22d8072d9562618f0b1ef4fc7d6888b93fce537ff0edb1f23e04051d693278d78303cb7b9b4c97c66cd1ba2f95addfb7097d6b3f34a006f76f24cf61d3d999f45395a3f6a1377640de21c7fef09528f035745d84f3eef2a69cf3e77056a02d5822d0278901c6ca1ad9115343b2a3a69b8621ae4db924edb6dfc2d2882a6c0341338bdea5a223ccea474748664710125c05e62bb96187d5727fb0dbf4b4ca5f898b9e56200306dfffa0e0cdcbadfa0d64e78ae4ef442147b665f1c3b2b23c853fff7bdf95349fcea1db1364dc628a30b88ad80c905dd38c8b3e11d414772eb4b4d78aa13bcfb7869a68c845c59c5b7e30b4dd4400604233a8015f3dfa9dd3d82f7ebae6bcedcd3a521997cca21a61cee9636313746801a254e9b9e5c7583f807014469d7bc858e609c670b3d70b19b0665a338b9f21133fdebcc81e95a1ae9f387053c7fac30151de629420f85bb8049a77d69ce5a2fc286338c56efcbb42b667ac92bc16621e1ec3bed6c91b71e3406e0b04199ef8b76de98ce276899107f6a647844d3a6a68355596cf7ddab8f8ad50113a0a1eb97573c11144f66d8f4b9ddede94b3b65e54893927c367959efe0ad6be9c5f2c1a447f960e6db9daad266bf71c473c51dc9c97135fd27fdf564c9322fc15b30c5c4d7153be922fdc8ce368ff78117bc0fb0047c40c459b9defe4461a46227e2f3db6b31377b79220c2a65872d098e018ba1c7773fc6117a8c5b1cc07c840bddd8ca3b0000bf4a18ea3cabf9f94865741fe458044e20ea07eb8ea0720bdb85a6bf686ea0ca87045beac3b0bc88ad067cdbc7d458e069e3944f034193fe25d896636983a472fa3738259c93627737f043147048b34812cc1eb6443fbf5360011ad0413115cc8c3f3334de9bbc372d67fb5ea8f7ed9ba46120b3771be0023b2c381db705fa57a653151b452ec00e5b530ac552fb552e3d843e702b83cd3533b19a7a451fb262d0f33be36cb572da7e62660f2e45f59a862b16b7d53c2f218ca95f575ca5276d5315aa94c598ec7addbba56302838b99b07f877ec9e406de6a3cbdd48d072c774e7394f674f6dd1b89d4282351db554f34482401ad00a3ffcb487243902d2dc64bf13c9e54bf0cb82a7d6f17c5a448c146fd10318d4824a78a117b5148bd0be56b72318ad6d9edeab5ef429227d2152d4ed35e2192a6bbfa5ced0c80ff02547ed4399d618c96498f9c919763371eb53defb468de327b29a8a86f36d33ea5875ed66f4192be4b4103cd47cda05eb1dd8cd7c9bfe4dfe5016f7fd76a0c92a6d3aa2d9dbb3bad6a92f54eaac86832c4ec2399a5e8c09b8ed64d7829ad3a87e92ed1751d5fe29b920e9650f527cc6c315bafcf72aa4a1773a6331c0841e1860ceeb3b1eeb427274fa0a766505ff5dab1fe845520c13a2f9aaa002b8fa73cba3ea49fd927487c28a7d1e029a5a2a31d20a9a8adc7dd74e72262c6e18c95cc6b5b4c4c2ad1e2f6686c72787390664c0d11631afe49f6916786eede136b4333feeae021e444b5de681d3fa5cf46212b55c4fdc04f15413fcf387e501298e32e0d690980a660df888719d3c5786e68be4866322a804ec5f88e4d02cd9b6a6a519e472f6487f8aea57a3c74620e2c7f2b3b32f3b838ee5ac03320472c9963f7261eff7c548123a483958c6dae65eca331e0eb873d9db1dcce7d4168c8cde51e31fbe747e66ac1cb75540df60e3dcb4e2d734b2141ad93c394224af56ea77bd5790d820de7df02b778e5c3bac3ab0766fae973a88324e2a23b431751dbc3ae7e170bd50994e77a3c0668ff99055336450a380f6cd2240797640fe5dd05a1b41ff7c2df837a9be9ab4a3a59fcd139479bb41260e5c2673199c832978dff11d2f7b2e1347eb63098eebc3a4401cc99b8ce45c77a74a0916bb38fc26eeba9e28d1abe22823c4c43e40bc6369c5408243abc34f952b84dc8ca627c893b19af1dfaa208eb663c8e1bbced1aa79b052d4afa823005d7087651983a3bedaee40e83897dc7e847285f2a7a6921aa211b0d1bdbf62ef8242cbb37df45472a5186ca8b727da234356a6b772b235954b6c0f55a65485550a11527aac3a00df07da6ae7d749e7cc30a9a07a0ef2681ef734eb2a6651c242adb0ed5a19ef7875de7232a9b0513f991bd2dc610e01e4f95e61ca0769c16a0ebf808a34ac03ad7853f3d012f0060cce356e0e1ff73fa22f60e7c3e0ad9807c291e7f52ed4633b2bdd08d18e97b2921b0f12497b12b68c117d33ef45f71d8d274efc8c3e6f1d31e46d4443d4c30e588846c0a4dd7e9e7dc27945f054f853037dedc3aea042158f2e899533594ba07278035aed32fbbb0dae8fba39d3f7436af1a4e812ad8125e44a1867918988e2e711af608ecbb1776a2492d54b354a4a4c38ce61767747bba286a28712d95fefa038801a4c32c0757dc510e16ff28e420b618765feaaa4d13b1a667845c6fc4c6e69c7015ad2049692a3a74efb4caecafc9bfb6c2d2e5fbbf69a236afe826ad8b2b23973f800956128d03cb9599174e3704d528fabb87fdae9b810eaeea8584de029823de637506358ee58b4d7acc6d2de41814a89e75c3182c7dfb7d13a9d0428e0e36f65e6594bf198668942820407602955984498a5356bbe869bf02a2cd88d4b78e84a04e22f83c0defd9a763814b2d97e14e3e556f4de7c1f4aa00c95f8cf3076246d6c3af6b934ce56a8c7d207e299866080614b973f36276eac560373727d38904b1c3b6ce8888b34302c156d3e5eb9fa6aa487e97491124c737306f52d755b9225b4b8031e0b4ce30a5585233f366405f7d8d8e83e1177aad34f9cafd1c2c45047ba79757cb5cab94cf56e204cccda4f667355a7556c92e73633e38a49810e815fd5d4f2d698abd33bbb42ccc835f4042676f5e9d4cee8a86110b84f06b3a4f8461d6bb47035251f4094fddda2eb3ad4b79271504360c9c29baef6ae9e0fea22c498d9c4507afccae1388b5f46d590d0ca7ed5d2c1d00b9833f3d443a17cfb32fa52998a2fc91f51a359eb97e64ccb021cf7078fa8d7b3ae108a7c45e2e8488c34db25f9243f64e32a4da49dba61176c5341cf7621963da0e4407a6423f1abd0dc9318d7a8bd6a16b4a373919bc07ac5cebb396c5056cdce09f43b6ef5851f5ed7e84205acedd703a16cc70a721a390a3268ca4731a7a17f3c56f6f89c42905137f294e596cdcbb07ecb9207a175abd7fdc8e05dc0941c5c42d5d85632fc2d681b17ebc0cce742dd1c807e30c317e285f9a69077797920bdad9baae20548504036e6ec72afe5b0589bf053c3b08d19a2a3eaeea6cfd6ad6be63ce16c476aec94a6bc2904f4eaaec40e4a79f3499a7b18512454cf5e73e4fa4d4b103e117f4988d15fe0fea2fe896529a8d64491f30ba6eb792d83433fb3"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000e66000/0x1000)=nil, 0x1000, 0x3, 0x100010, r0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
migrate_pages(r1, 0x8, &(0x7f0000003180)=0xda, &(0x7f00000031c0)=0x9)
mremap(&(0x7f00008c1000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000a64000/0x3000)=nil)
ptrace$pokeuser(0x6, r1, 0x0, 0x585)
fgetxattr(r2, &(0x7f0000003200)=@random={'security.', ')^$\x00'}, &(0x7f0000003240)=""/133, 0x85)
bind$inet(r0, &(0x7f0000003300)={0x2, 0x4e21, @empty}, 0x10)
fsetxattr(r3, &(0x7f0000003340)=@random={'os2.', ':-\x00'}, &(0x7f0000003380)='-\x00', 0x2, 0x2)
r4 = signalfd(r3, &(0x7f00000033c0)={[0x2]}, 0x8)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000003400))
symlink(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)='./file0\x00')
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x68, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000003700)=0x5, 0x4)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000003740)={0x0, @frame_sync})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000003800)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
connect$inet6(r4, &(0x7f0000003840)={0xa, 0x4e22, 0xffffffff, @loopback, 0x9}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, &(0x7f0000003880))
ioctl(r3, 0x1, &(0x7f00000038c0)="2298d956dd15817d9d90a389c7f4bb60711d21c447bb56eb38f89a7de442dbc8a5a86a12d88f3db3fdfd7466d44530846321b3a490e4fe6dafb1896e0bd271b346ce96e68ad81bbe1db3d107b71b237fe73917eb973ffbdd26214d1b7f4afd493bbddd643096fe6f855037ffc47af75af839ccd85850")

1.48194408s ago: executing program 1 (id=3158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/17, 0x11, 0xc990, 0x3, 0x7f, 0x0, 0xc07}}, 0x11c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x2}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}})
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002800), 0x20000, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r8, 0x4004510f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r9, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

1.277746952s ago: executing program 4 (id=3159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1cc, 0x0, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, 0x0)
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40c0)

339.534363ms ago: executing program 5 (id=3160):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
setsockopt(0xffffffffffffffff, 0x7, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x9}, 0x8)
modify_ldt$write2(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x800c050}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioperm(0x3, 0x4, 0x1000009)

193.731826ms ago: executing program 3 (id=3161):
socket(0x11, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000001c0)={0x1, 0x3, 0x4})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

0s ago: executing program 4 (id=3162):
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0)
iopl(0x4)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000180)={&(0x7f0000000980)={{@host, 0x1}, {@hyper, 0xffffffff}, 0x400, "51fe06dc3c1dcc54c4ee9c640dbb2e120ebc104f25ffb6e8d04275d96523fb7cb3e38ed53dc73430e69de6c9159e2c3dd775ed4b4a7447897fafc076b2398fd425c4d19ce00ddd673ad551490b02049698f89a03323eccd6b502732e3d465a94940b14a54847185f0cb4f88d1a8a19ba612e50cb5dc18b4f8b02698a0ac6da33f1c8cd70f667565ca93fcdf10482efe4afc04935f5f9e7e65b35faed168e197d3cdc49c977375279087966a67feb71101c10041671477ab06206186edca7dec8e3322d47a85321fbfe6c682b16d984653814efa6ac45f10fa42510d4b7d4a83621bed09d1559cb4bf2aa28fc27a10cac111c5930e35092705849c17db43978808c9923cf32acee1bd628d4443968cad5b5d34c1ee567b37a931b1c4c6664d9fe17d0d42b6d29719113a60549d068736429a8c7c6643a6459498e1f0a4dc7e8fdc3a0cb98d816422214c6d1bc71dcd44db274cab602ecdf4efd432dd9e78622c5377ff9481f336fd4c0b1c64d63c5f6fecd8f418a35a822a6bf09739f0b854fb54244bf1cbaea6c8d07a57eedf7dbb4320a26f7d56709cdc4d935f7b7ad547058f4212ce08a1600d6992d4752ae37c9049e1264295ac4a1d043580f0b249d816c7c23049e59ee1827474b3d0f2d2ceb10a822790bc142ebf5cda5528972bbb4f28394a4791086b49d2f93229b501a377bfd626385a547a2c3db083bde18d0f52470ef0143ed7c2bc24090184d08789ecf9bfb261e20c48c842de6911545e5e9ccf4eec5d9c53b7ac19a16de50557806efa560bbd723b7b25258cc40359deb87c39b380be63d50dfa63103e6cf35b88aae55f0ab0ec2ec829cab51e76ade1bae264bb95106d3cf41a43d99a73a951598308148ce1f47d61b4017358b2c715f42a9e25c657f526ad90843a5d2883e37c2272a2f900a910174eb3dc81c312786afdaf7dbc3d8e3457007992a7f03b9b2eb09518e255f1f56edb5d90c5c849809cb5e0fb3b7ad717324ad843be529963d57e39accee6260e43ea42ab0d548d5075fdcd875937073179e95359a96560b619f63b3cdca9a72f76c0fd22a80382a69987457462bdbbdf8c0ab3d41afbbc98ae011347405738a682c8ec959fef5f4e7418101c942ce7241c08bf19611a8eeca4a22e0e395711fb64a1ee6aaeb9524fdaf28ad75fdd031ef03a5fc80c967d7a99899e0f568ee37d0c038f0f3809b09ad38174878c0debbb10858c4809620d2a9f064f998d7376e8649d5bf5ae60d9f6e14b00056733b48b8682fe71c7f5c95e4c36b52aa22cabab7c3239762b01f4f263586c7f6c86920d32389b10e858d0dfbd3624ec191c5c4c2946d4bc7046689dc7723884bd644928e2bad67a05abf4a8e0799ed513dec569419e4b6f7dbf1afe5f29a285ae9a84ccd724649a89ecd238a3a6903cf4bfb7940dc78ca2c5143ab7cb994"}, 0x418, 0xfffffff8})
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x24001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = epoll_create1(0x0)
r5 = epoll_create1(0x0)
r6 = getpid()
r7 = getpid()
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f00000000c0)={r5})
r8 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r8, r2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

kernel console output (not intermixed with test programs):

rror -19 while querying for an remote control event.
[  845.033716][  T971] m920x_read = error: -19
[  845.038053][  T971] dvb-usb: error -19 while querying for an remote control event.
[  845.813491][T13423] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  845.822620][  T971] m920x_read = error: -19
[  845.826946][  T971] dvb-usb: error -19 while querying for an remote control event.
[  845.991300][T13423] usb 5-1: Using ep0 maxpacket: 32
[  846.030864][  T971] m920x_read = error: -19
[  846.036663][  T971] dvb-usb: error -19 while querying for an remote control event.
[  846.047176][T13423] usb 5-1: config 9 has an invalid interface number: 96 but max is 0
[  846.079571][T13423] usb 5-1: config 9 has an invalid interface number: 53 but max is 0
[  846.097524][T16313] chnl_net:caif_netlink_parms(): no params data found
[  846.117269][T13423] usb 5-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[  846.149024][T13423] usb 5-1: config 9 has no interface number 0
[  846.155942][T13423] usb 5-1: config 9 has no interface number 1
[  846.164825][T13423] usb 5-1: config 9 interface 96 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64
[  846.176177][T13423] usb 5-1: config 9 interface 96 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  846.196875][ T5829] Bluetooth: hci6: command tx timeout
[  846.197252][T13423] usb 5-1: config 9 interface 96 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  846.251931][  T971] m920x_read = error: -19
[  846.256375][  T971] dvb-usb: error -19 while querying for an remote control event.
[  846.283984][   T36] bond0: (slave netdevsim0): Releasing backup interface
[  846.319773][T16334] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  846.336799][T13423] usb 5-1: config 9 interface 96 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 16
[  846.349860][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  846.408796][T13423] usb 5-1: config 9 interface 96 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[  846.430483][  T971] m920x_read = error: -19
[  846.436783][T16335] vivid-000: =================  START STATUS  =================
[  846.447638][  T971] dvb-usb: error -19 while querying for an remote control event.
[  846.464226][T16335] vivid-000: Radio HW Seek Mode: Bounded
[  846.474567][T16335] vivid-000: Radio Programmable HW Seek: false
[  846.479244][T13423] usb 5-1: config 9 interface 96 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  846.500542][T16335] 
[  846.514431][T16335] vivid-000: RDS Rx I/O Mode: Block I/O
[  846.544249][T16335] vivid-000: Generate RBDS Instead of RDS: 
[  846.569454][T13423] usb 5-1: config 9 interface 96 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[  846.588867][T16335] false
[  846.592984][T16335] vivid-000: RDS Reception: true
[  846.612840][T16335] vivid-000: RDS Program Type: 0 inactive
[  846.620482][T16335] vivid-000: RDS PS Name:  inactive
[  846.626555][T16335] vivid-000: RDS Radio Text:  inactive
[  846.632911][T16335] vivid-000: RDS Traffic Announcement: false inactive
[  846.633828][ T5895] m920x_read = error: -19
[  846.645410][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  846.653284][T13423] usb 5-1: too many endpoints for config 9 interface 53 altsetting 97: 122, using maximum allowed: 30
[  846.664441][T16335] 
[  846.666594][T13423] usb 5-1: config 9 interface 53 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 122
[  846.672548][T16335] vivid-000: RDS Traffic Program: 
[  846.680184][T13423] usb 5-1: config 9 interface 96 has no altsetting 0
[  846.692501][T16335] false inactive
[  846.692558][T13423] usb 5-1: config 9 interface 53 has no altsetting 0
[  846.703269][T16335] 
[  846.705749][T16335] vivid-000: RDS Music: false inactive
[  846.711744][T16335] vivid-000: ==================  END STATUS  ==================
[  846.729447][T13423] usb 5-1: New USB device found, idVendor=1546, idProduct=0503, bcdDevice=f1.07
[  846.738680][T13423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.789334][T16313] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.801002][T16313] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.808121][T16313] bridge_slave_0: entered allmulticast mode
[  846.810504][ T5895] m920x_read = error: -19
[  846.818337][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  846.830999][T13423] usb 5-1: Product:  
[  846.835178][T13423] usb 5-1: Manufacturer: ෯ꛟ䙯຅㟲緑얺舩度帠�䱪戧ꗪ��熀姿순ﰚ蔛侶�꿊亷ꀊ귱噩⮻솇엹튎檫䈊䡯맪͙둌账숨璌ﰽಡ䛚评ࡸ�‱���⠒䔘㱱ᒹᔭ�맢齇儜縔௬瑅�㦓�焻�ⱘ泼헸粎丠渀�攃飇ꋸ⮅㫴쪷䆞��밭鿶উ�龜�葼
[  846.864251][    C0] vkms_vblank_simulate: vblank timer overrun
[  846.871477][T13423] usb 5-1: SerialNumber: Ÿ颎鞙Ѹ헗兘ꄼ䡩熣繎罆㲟啜僌咙꿶ᰊ桓⟦쳧슽蓨�氪謕宵隺湽�院멌쭇ᶠ誼쉗�胎ᆲ蛢
[  846.875538][T16313] bridge_slave_0: entered promiscuous mode
[  846.955093][T16313] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.964315][T16320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  846.984909][T16313] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.002216][T16320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  847.009632][T16313] bridge_slave_1: entered allmulticast mode
[  847.030595][ T5895] m920x_read = error: -19
[  847.034973][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  847.099190][T16313] bridge_slave_1: entered promiscuous mode
[  847.200804][ T5895] m920x_read = error: -19
[  847.205183][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  847.234163][T16346] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  847.266755][T13423] ftdi_sio 5-1:9.96: FTDI USB Serial Device converter detected
[  847.294207][T16313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  847.304609][T13423] ftdi_sio ttyUSB0: unknown device type: 0xf107
[  847.307521][   T36] bridge_slave_1: left allmulticast mode
[  847.322330][   T36] bridge_slave_1: left promiscuous mode
[  847.333078][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.343162][T13423] ftdi_sio 5-1:9.53: FTDI USB Serial Device converter detected
[  847.357234][   T36] bridge_slave_0: left allmulticast mode
[  847.363465][   T36] bridge_slave_0: left promiscuous mode
[  847.367787][T13423] ftdi_sio ttyUSB1: unknown device type: 0xf107
[  847.371996][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.375699][  T971] m920x_read = error: -19
[  847.399844][  T971] dvb-usb: error -19 while querying for an remote control event.
[  847.411948][T13423] usb 5-1: USB disconnect, device number 105
[  847.465706][T16347] vivid-002: =================  START STATUS  =================
[  847.473757][T16347] vivid-002: Radio HW Seek Mode: Bounded
[  847.479404][T16347] vivid-002: Radio Programmable HW Seek: false
[  847.487439][T13423] ftdi_sio 5-1:9.96: device disconnected
[  847.491214][T16347] vivid-002: RDS Rx I/O Mode: Block I/O
[  847.504232][T16347] vivid-002: Generate RBDS Instead of RDS: false
[  847.521000][T16347] vivid-002: RDS Reception: true
[  847.523261][T13423] ftdi_sio 5-1:9.53: device disconnected
[  847.534801][T16347] vivid-002: RDS Program Type: 0 inactive
[  847.561965][T16347] vivid-002: RDS PS Name:  inactive
[  847.580382][T16347] vivid-002: RDS Radio Text:  inactive
[  847.617342][  T971] m920x_read = error: -19
[  847.636803][  T971] dvb-usb: error -19 while querying for an remote control event.
[  847.636868][T16347] vivid-002: RDS Traffic Announcement: false inactive
[  847.743866][T16347] vivid-002: RDS Traffic Program: false inactive
[  847.790480][T16347] vivid-002: RDS Music: false inactive
[  847.801131][T16347] vivid-002: ==================  END STATUS  ==================
[  847.832182][T13423] m920x_read = error: -19
[  847.836777][T13423] dvb-usb: error -19 while querying for an remote control event.
[  848.030627][T13423] m920x_read = error: -19
[  848.034983][T13423] dvb-usb: error -19 while querying for an remote control event.
[  848.147507][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  848.171391][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  848.187356][   T36] bond0 (unregistering): Released all slaves
[  848.204132][T16313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.214141][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'.
[  848.223429][T13423] m920x_read = error: -19
[  848.249703][T13423] dvb-usb: error -19 while querying for an remote control event.
[  848.283909][ T5829] Bluetooth: hci6: command tx timeout
[  848.289560][T16356] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  848.307743][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'.
[  848.348185][T16356] vivid-003: =================  START STATUS  =================
[  848.380778][T16356] vivid-003: Radio HW Seek Mode: Bounded
[  848.389106][T16356] vivid-003: Radio Programmable HW Seek: false
[  848.395827][T16356] vivid-003: RDS Rx I/O Mode: Block I/O
[  848.415544][T16364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  848.446225][T16356] vivid-003: Generate RBDS Instead of RDS: false
[  848.452840][T13423] m920x_read = error: -19
[  848.458498][T13423] dvb-usb: error -19 while querying for an remote control event.
[  848.466916][T16356] vivid-003: RDS Reception: true
[  848.476373][T16356] vivid-003: RDS Program Type: 0 inactive
[  848.485125][T16356] vivid-003: RDS PS Name:  inactive
[  848.492302][T16356] vivid-003: RDS Radio Text:  inactive
[  848.497955][T16356] vivid-003: RDS Traffic Announcement: false inactive
[  848.505253][T16356] vivid-003: RDS Traffic Program: false inactive
[  848.514114][T16356] vivid-003: RDS Music: false inactive
[  848.519828][T16356] vivid-003: ==================  END STATUS  ==================
[  848.547956][T16364] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.556252][T16364] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.604838][T16364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.615506][T16364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.623484][ T5895] m920x_read = error: -19
[  848.627797][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  848.749102][T16364] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.764176][T16364] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.774032][T16364] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.783596][T16364] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.810628][ T5895] m920x_read = error: -19
[  848.815163][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  848.884252][T16313] team0: Port device team_slave_0 added
[  848.890068][T16371] overlayfs: workdir and upperdir must reside under the same mount
[  848.914907][T16313] team0: Port device team_slave_1 added
[  848.954627][T16368] can0: slcan on ptm1.
[  848.980716][   T47] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  848.981237][  T971] m920x_read = error: -19
[  849.023236][  T971] dvb-usb: error -19 while querying for an remote control event.
[  849.200709][  T971] m920x_read = error: -19
[  849.223394][   T47] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  849.233753][  T971] dvb-usb: error -19 while querying for an remote control event.
[  849.243639][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.254515][   T47] usb 2-1: Product: syz
[  849.257143][T16313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.258751][   T47] usb 2-1: Manufacturer: syz
[  849.269042][T16313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  849.271455][   T47] usb 2-1: SerialNumber: syz
[  849.299541][T16313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  849.446942][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.458994][ T5897] m920x_read = error: -19
[  849.463533][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  849.687182][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.687807][   T47] usb 2-1: config 0 descriptor??
[  849.694702][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  849.714329][   T47] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 103
[  849.715872][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.732066][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.741715][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.755277][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.766582][   T36] hsr_slave_0: left promiscuous mode
[  849.772554][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.780017][   T36] hsr_slave_1: left promiscuous mode
[  849.785728][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.787544][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.793611][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.808475][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.817176][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.817345][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.827571][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.839498][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.847231][ T5897] m920x_read = error: -19
[  849.851823][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  849.859605][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.867642][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.875336][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.882982][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  849.889893][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  849.900695][  T971] hid-generic C990:0003:007F.004B: unknown main item tag 0x0
[  849.908329][ T5895] usb 6-1: config 0 has no interface number 0
[  849.916394][ T5895] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  849.934409][ T5895] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  849.945307][  T971] hid-generic C990:0003:007F.004B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  849.961568][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.992150][ T5895] usb 6-1: config 0 descriptor??
[  850.010469][  T971] m920x_read = error: -19
[  850.014890][  T971] dvb-usb: error -19 while querying for an remote control event.
[  850.034382][ T5895] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  850.238074][ T5895] m920x_read = error: -19
[  850.243131][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  850.249723][T13006] usb 6-1: USB disconnect, device number 3
[  850.360461][ T5829] Bluetooth: hci6: command tx timeout
[  850.380150][   T36] team0 (unregistering): Port device team_slave_1 removed
[  850.419519][   T36] team0 (unregistering): Port device team_slave_0 removed
[  850.427202][ T5895] m920x_read = error: -19
[  850.431655][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  850.610457][ T5895] m920x_read = error: -19
[  850.614876][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  850.789818][T16313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  850.797508][T13423] m920x_read = error: -19
[  850.805834][T16367] can0 (unregistered): slcan off ptm1.
[  850.812379][T13423] dvb-usb: error -19 while querying for an remote control event.
[  850.821396][T16313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.848645][T16313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.886110][T16370] macsec1: entered promiscuous mode
[  850.908942][T16370] dummy0: entered promiscuous mode
[  850.918744][T16370] macsec1: entered allmulticast mode
[  850.943070][T16370] dummy0: entered allmulticast mode
[  850.964038][T16370] dummy0: left allmulticast mode
[  850.969185][T16370] dummy0: left promiscuous mode
[  851.001998][T13423] m920x_read = error: -19
[  851.006568][T13423] dvb-usb: error -19 while querying for an remote control event.
[  851.051316][   T47] i2c i2c-2: failure reading functionality
[  851.069408][   T47] i2c i2c-2: connected i2c-tiny-usb device
[  851.086657][   T47] usb 2-1: USB disconnect, device number 103
[  851.129468][T16313] hsr_slave_0: entered promiscuous mode
[  851.147599][T16313] hsr_slave_1: entered promiscuous mode
[  851.158859][T16313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  851.178212][T16313] Cannot create hsr debugfs directory
[  851.183845][T13423] m920x_read = error: -19
[  851.190283][T13423] dvb-usb: error -19 while querying for an remote control event.
[  851.248136][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'.
[  851.257913][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'.
[  851.321707][   T36] IPVS: stop unused estimator thread 0...
[  851.380459][T13423] m920x_read = error: -19
[  851.393894][T13423] dvb-usb: error -19 while querying for an remote control event.
[  851.560872][T13423] m920x_read = error: -19
[  851.609115][T13423] dvb-usb: error -19 while querying for an remote control event.
[  851.714871][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'.
[  851.820488][T13423] m920x_read = error: -19
[  851.826704][T13423] dvb-usb: error -19 while querying for an remote control event.
[  851.928098][   T30] audit: type=1326 audit(1746266030.911:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2898d8e969 code=0x7ffc0000
[  851.961868][T16313] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  851.969134][   T30] audit: type=1326 audit(1746266030.911:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2898d8e969 code=0x7ffc0000
[  851.996562][T16313] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  852.000560][T13423] m920x_read = error: -19
[  852.008339][T13423] dvb-usb: error -19 while querying for an remote control event.
[  852.013084][   T30] audit: type=1326 audit(1746266030.941:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2898d8d2d0 code=0x7ffc0000
[  852.040830][   T30] audit: type=1326 audit(1746266030.941:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2898d8e56b code=0x7ffc0000
[  852.069277][   T30] audit: type=1326 audit(1746266030.941:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2898d8e56b code=0x7ffc0000
[  852.094393][   T30] audit: type=1326 audit(1746266030.951:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2898d8e56b code=0x7ffc0000
[  852.135469][T16313] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  852.154328][T16313] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  852.182600][   T30] audit: type=1326 audit(1746266030.951:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16386 comm="syz.0.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2898d8e56b code=0x7ffc0000
[  852.251610][T13423] m920x_read = error: -19
[  852.256039][T13423] dvb-usb: error -19 while querying for an remote control event.
[  852.396539][T16313] 8021q: adding VLAN 0 to HW filter on device bond0
[  852.421247][ T5895] m920x_read = error: -19
[  852.425609][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  852.437395][T16313] 8021q: adding VLAN 0 to HW filter on device team0
[  852.449684][ T5829] Bluetooth: hci6: command tx timeout
[  852.463984][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.471108][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  852.482839][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.489963][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  852.522895][T13423] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  852.601042][ T5895] m920x_read = error: -19
[  852.605481][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  852.703086][T13423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  852.730507][T13423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  852.743942][T13423] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  852.755234][T13423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.773714][T13423] usb 6-1: config 0 descriptor??
[  852.780617][ T5895] m920x_read = error: -19
[  852.784975][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.084505][T16313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  853.100723][ T5895] m920x_read = error: -19
[  853.105212][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.135913][T16313] veth0_vlan: entered promiscuous mode
[  853.149665][T16313] veth1_vlan: entered promiscuous mode
[  853.174944][T16313] veth0_macvtap: entered promiscuous mode
[  853.191960][T16313] veth1_macvtap: entered promiscuous mode
[  853.220212][T16313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  853.245092][T16313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  853.255467][T16313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.266649][T16313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.276976][T16313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.285721][ T5895] m920x_read = error: -19
[  853.285742][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.306043][T16313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.440848][ T5895] m920x_read = error: -19
[  853.445245][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.480456][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.488305][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.498289][T16408] netlink: 'syz.1.2994': attribute type 2 has an invalid length.
[  853.549476][T13423] usb 6-1: string descriptor 0 read error: -22
[  853.557466][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.569570][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.611559][ T5895] m920x_read = error: -19
[  853.620753][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.762068][T13423] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.004C/input/input68
[  853.791029][ T5895] m920x_read = error: -19
[  853.795668][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  853.880734][ T5867] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  853.924947][T13423] uclogic 0003:256C:006D.004C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[  854.031553][ T5895] m920x_read = error: -19
[  854.140402][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  854.143420][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  854.170964][ T5867] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  854.217632][ T5867] usb 2-1: config 0 has no interface number 0
[  854.237438][ T5867] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  854.256310][   T30] audit: type=1400 audit(1746266033.231:7331): avc:  denied  { bind } for  pid=16388 comm="syz.5.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  854.264301][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.290691][ T5867] usb 2-1: Product: syz
[  854.295057][ T5867] usb 2-1: Manufacturer: syz
[  854.303780][ T5867] usb 2-1: SerialNumber: syz
[  854.316760][ T5867] usb 2-1: config 0 descriptor??
[  854.316934][   T30] audit: type=1400 audit(1746266033.231:7332): avc:  denied  { connect } for  pid=16388 comm="syz.5.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  854.341481][ T5895] m920x_read = error: -19
[  854.347362][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  854.379892][ T5867] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  854.437703][ T5895] usb 6-1: USB disconnect, device number 4
[  854.523134][T13423] m920x_read = error: -19
[  854.527532][T13423] dvb-usb: error -19 while querying for an remote control event.
[  854.690614][ T5895] m920x_read = error: -19
[  854.697862][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  854.741338][ T5867] usb 2-1: USB disconnect, device number 104
[  855.155760][T13423] m920x_read = error: -19
[  855.160131][T13423] dvb-usb: error -19 while querying for an remote control event.
[  855.334455][T13423] m920x_read = error: -19
[  855.348332][T13423] dvb-usb: error -19 while querying for an remote control event.
[  855.511387][T13423] m920x_read = error: -19
[  855.521706][T13423] dvb-usb: error -19 while querying for an remote control event.
[  855.915300][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2998'.
[  855.924560][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2998'.
[  856.031431][T13423] m920x_read = error: -19
[  856.042084][T13423] dvb-usb: error -19 while querying for an remote control event.
[  856.232990][T13423] m920x_read = error: -19
[  856.280555][T13423] dvb-usb: error -19 while querying for an remote control event.
[  856.380171][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'.
[  856.389274][T16444] netlink: 'syz.0.3000': attribute type 30 has an invalid length.
[  856.428355][T16444] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  856.437254][T16444] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  856.440474][ T5895] m920x_read = error: -19
[  856.445803][T16444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  856.449828][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  856.458162][T16444] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  856.611978][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'.
[  856.686821][T16444] netlink: 'syz.0.3000': attribute type 30 has an invalid length.
[  856.882337][ T5895] m920x_read = error: -19
[  856.892795][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  856.929676][T16461] overlayfs: failed to resolve './file0': -2
[  857.006473][   T30] audit: type=1400 audit(1746266035.981:7333): avc:  denied  { setopt } for  pid=16460 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  857.043732][   T30] audit: type=1400 audit(1746266035.991:7334): avc:  denied  { execute } for  pid=16460 comm="syz.3.3005" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  857.281332][T13423] m920x_read = error: -19
[  857.285691][T13423] dvb-usb: error -19 while querying for an remote control event.
[  857.542352][T13423] m920x_read = error: -19
[  857.546725][T13423] dvb-usb: error -19 while querying for an remote control event.
[  857.604672][   T30] audit: type=1400 audit(1746266036.591:7335): avc:  denied  { getopt } for  pid=16473 comm="syz.5.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  857.730492][T13423] m920x_read = error: -19
[  857.734845][T13423] dvb-usb: error -19 while querying for an remote control event.
[  857.792828][   T30] audit: type=1400 audit(1746266036.621:7336): avc:  denied  { create } for  pid=16473 comm="syz.5.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  857.971055][  T971] m920x_read = error: -19
[  857.976848][  T971] dvb-usb: error -19 while querying for an remote control event.
[  857.985526][   T30] audit: type=1400 audit(1746266036.661:7337): avc:  denied  { write } for  pid=16473 comm="syz.5.3009" path="socket:[54383]" dev="sockfs" ino=54383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  858.423138][T13423] m920x_read = error: -19
[  858.427514][T13423] dvb-usb: error -19 while querying for an remote control event.
[  858.605316][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  858.612651][  T971] m920x_read = error: -19
[  858.616996][  T971] dvb-usb: error -19 while querying for an remote control event.
[  858.652592][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  858.662727][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  858.710618][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  858.719084][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  858.850451][  T971] m920x_read = error: -19
[  858.854849][  T971] dvb-usb: error -19 while querying for an remote control event.
[  858.964482][T16481] lo speed is unknown, defaulting to 1000
[  858.980427][   T47] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  859.031870][  T971] m920x_read = error: -19
[  859.060979][  T971] dvb-usb: error -19 while querying for an remote control event.
[  859.173957][   T36] bond0: (slave netdevsim0): Releasing backup interface
[  859.227100][   T47] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  859.961461][  T971] m920x_read = error: -19
[  859.965805][  T971] dvb-usb: error -19 while querying for an remote control event.
[  860.040535][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.044839][   T30] audit: type=1400 audit(1746266039.031:7338): avc:  denied  { setopt } for  pid=16489 comm="syz.3.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  860.060367][   T47] usb 5-1: Product: syz
[  860.086736][   T47] usb 5-1: Manufacturer: syz
[  860.108298][   T47] usb 5-1: SerialNumber: syz
[  860.130532][  T971] m920x_read = error: -19
[  860.134951][  T971] dvb-usb: error -19 while querying for an remote control event.
[  860.161770][   T47] usb 5-1: config 0 descriptor??
[  860.185886][   T47] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 106
[  860.242309][T16500] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  860.270368][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'.
[  860.301426][T13423] m920x_read = error: -19
[  860.306250][T13423] dvb-usb: error -19 while querying for an remote control event.
[  860.358502][   T36] bridge_slave_1: left allmulticast mode
[  860.367188][T16503] vivid-001: =================  START STATUS  =================
[  860.383927][   T36] bridge_slave_1: left promiscuous mode
[  860.398381][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.405982][T16503] vivid-001: Radio HW Seek Mode: Bounded
[  860.412464][T16503] vivid-001: Radio Programmable HW Seek: false
[  860.418844][T16503] vivid-001: RDS Rx I/O Mode: Block I/O
[  860.424772][T16503] vivid-001: Generate RBDS Instead of RDS: false
[  860.431222][T16503] vivid-001: RDS Reception: true
[  860.436291][T16503] vivid-001: RDS Program Type: 0 inactive
[  860.443772][T16503] vivid-001: RDS PS Name:  inactive
[  860.449422][T16503] vivid-001: RDS Radio Text:  inactive
[  860.455387][T16503] vivid-001: RDS Traffic Announcement: false inactive
[  860.464935][T16503] vivid-001: RDS Traffic Program: false inactive
[  860.472832][   T36] bridge_slave_0: left allmulticast mode
[  860.478485][   T36] bridge_slave_0: left promiscuous mode
[  860.484288][T16503] vivid-001: RDS Music: false inactive
[  860.490117][T16503] vivid-001: ==================  END STATUS  ==================
[  860.497595][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.497995][T13423] m920x_read = error: -19
[  860.510200][T13423] dvb-usb: error -19 while querying for an remote control event.
[  860.671410][T13423] m920x_read = error: -19
[  860.677851][T13423] dvb-usb: error -19 while querying for an remote control event.
[  860.753168][ T5818] Bluetooth: hci1: command tx timeout
[  860.851169][  T971] m920x_read = error: -19
[  860.855541][  T971] dvb-usb: error -19 while querying for an remote control event.
[  860.887219][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  860.898461][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  860.908063][   T36] bond0 (unregistering): Released all slaves
[  860.934953][T16485] macsec1: entered promiscuous mode
[  860.940257][T16485] dummy0: entered promiscuous mode
[  860.947017][T16485] macsec1: entered allmulticast mode
[  860.952466][T16485] dummy0: entered allmulticast mode
[  860.981196][T16485] dummy0: left allmulticast mode
[  860.986425][T16485] dummy0: left promiscuous mode
[  861.021084][ T5895] m920x_read = error: -19
[  861.026476][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  861.083332][T16481] chnl_net:caif_netlink_parms(): no params data found
[  861.147188][   T36] tipc: Left network mode
[  861.187033][   T47] i2c i2c-2: failure reading functionality
[  861.197696][   T47] i2c i2c-2: connected i2c-tiny-usb device
[  861.241234][   T47] usb 5-1: USB disconnect, device number 106
[  861.250613][ T5895] m920x_read = error: -19
[  861.257809][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  861.440948][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  861.449924][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  861.496538][ T5895] m920x_read = error: -19
[  861.547260][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  861.740436][ T5895] m920x_read = error: -19
[  861.744791][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  861.800257][T16481] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.830617][T16481] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.837823][T16481] bridge_slave_0: entered allmulticast mode
[  861.882862][T16481] bridge_slave_0: entered promiscuous mode
[  861.904189][T16481] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.967711][ T5895] m920x_read = error: -19
[  861.972199][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  862.044153][T16481] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.074651][T16481] bridge_slave_1: entered allmulticast mode
[  862.075192][T16522] netlink: 'syz.5.3022': attribute type 11 has an invalid length.
[  862.088660][T16522] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3022'.
[  862.091720][T16481] bridge_slave_1: entered promiscuous mode
[  862.167022][ T5895] m920x_read = error: -19
[  862.177085][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  862.366845][ T5895] m920x_read = error: -19
[  862.376398][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  862.627613][ T5895] m920x_read = error: -19
[  862.632070][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  862.803326][ T5895] m920x_read = error: -19
[  862.808084][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  862.890195][T16481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.350427][ T5818] Bluetooth: hci1: command tx timeout
[  863.356029][ T5895] m920x_read = error: -19
[  863.362567][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  863.372170][   T36] hsr_slave_0: left promiscuous mode
[  863.380546][   T36] hsr_slave_1: left promiscuous mode
[  863.386320][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  863.520842][ T5895] m920x_read = error: -19
[  863.525212][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  863.631793][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  863.756863][T16540] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  863.801051][  T971] m920x_read = error: -19
[  863.805425][  T971] dvb-usb: error -19 while querying for an remote control event.
[  863.904450][ T5895] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  863.959833][T16541] binder: 16538:16541 ioctl 40086408 200000000000 returned -22
[  863.973406][  T971] m920x_read = error: -19
[  863.977786][  T971] dvb-usb: error -19 while querying for an remote control event.
[  863.989907][   T36] team0 (unregistering): Port device team_slave_1 removed
[  864.041506][   T36] team0 (unregistering): Port device team_slave_0 removed
[  864.065431][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  864.080453][ T5895] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  864.089427][ T5895] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  864.102366][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.113771][ T5895] usb 4-1: config 0 descriptor??
[  864.140473][ T5895] m920x_read = error: -19
[  864.144838][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  864.310634][ T5895] m920x_read = error: -19
[  864.315072][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  864.333897][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.342785][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.435708][T16481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.500504][ T5895] m920x_read = error: -19
[  864.510599][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  864.535052][T16481] team0: Port device team_slave_0 added
[  864.636100][T16481] team0: Port device team_slave_1 added
[  864.667228][T16481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.674464][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  864.700435][ T5895] m920x_read = error: -19
[  864.700454][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  864.860803][ T5895] m920x_read = error: -19
[  864.879545][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  865.080578][ T5895] m920x_read = error: -19
[  865.104451][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  865.157379][T16481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.169474][T16481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.176446][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.210396][T13006] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  865.220716][T16481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  865.284554][T16555] ubi31: attaching mtd0
[  865.287446][T16481] hsr_slave_0: entered promiscuous mode
[  865.305047][T16481] hsr_slave_1: entered promiscuous mode
[  865.307330][T16555] ubi31: scanning is finished
[  865.311284][T16481] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  865.320515][ T5895] m920x_read = error: -19
[  865.323208][T16555] ubi31: empty MTD device detected
[  865.328028][T16481] Cannot create hsr debugfs directory
[  865.337519][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  865.390391][ T5818] Bluetooth: hci1: command tx timeout
[  865.429374][T13006] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  865.460467][T13006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.482613][T13006] usb 6-1: Product: syz
[  865.486276][   T36] IPVS: stop unused estimator thread 0...
[  865.491112][T13006] usb 6-1: Manufacturer: syz
[  865.499293][T13006] usb 6-1: SerialNumber: syz
[  865.504683][ T5895] m920x_read = error: -19
[  865.522341][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  865.538557][T13006] usb 6-1: config 0 descriptor??
[  865.557355][T13006] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005
[  865.571134][T16555] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  865.580556][T16555] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  865.587908][T16555] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  865.604508][T16555] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  865.612835][T16555] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  865.619735][T16555] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  865.628989][T16555] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 371948965
[  865.640251][T16555] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  865.658675][T16560] ubi31: background thread "ubi_bgt31d" started, PID 16560
[  865.678246][T16562] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  865.692719][ T5895] m920x_read = error: -19
[  865.697304][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  865.708435][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'.
[  865.779746][T16563] vivid-003: =================  START STATUS  =================
[  865.792550][T16563] vivid-003: Radio HW Seek Mode: Bounded
[  865.798311][T16563] vivid-003: Radio Programmable HW Seek: false
[  865.804922][T16563] vivid-003: RDS Rx I/O Mode: Block I/O
[  865.860466][  T971] m920x_read = error: -19
[  865.864914][  T971] dvb-usb: error -19 while querying for an remote control event.
[  865.876822][T16563] vivid-003: Generate RBDS Instead of RDS: false
[  865.903517][T16563] vivid-003: RDS Reception: true
[  865.914041][T16566] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3034'.
[  865.924386][T16563] vivid-003: RDS Program Type: 0 inactive
[  865.930309][T16563] vivid-003: RDS PS Name:  inactive
[  865.940767][T16563] vivid-003: RDS Radio Text:  inactive
[  865.946702][T16563] vivid-003: RDS Traffic Announcement: false inactive
[  865.953796][T16563] vivid-003: RDS Traffic Program: false inactive
[  865.960734][T16563] vivid-003: RDS Music: false inactive
[  865.966419][T16563] vivid-003: ==================  END STATUS  ==================
[  865.970444][T16566] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  865.980622][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  865.990501][T16566] vhci_hcd vhci_hcd.0: Device attached
[  866.005077][T16481] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  866.022860][T16481] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  866.049088][T16481] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  866.056150][ T5895] m920x_read = error: -19
[  866.060552][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  866.076290][T16481] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  866.162495][T16481] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.176739][T16549] macsec1: entered promiscuous mode
[  866.182114][T16549] dummy0: entered promiscuous mode
[  866.188555][T16549] macsec1: entered allmulticast mode
[  866.210603][T16549] dummy0: entered allmulticast mode
[  866.220630][ T5897] m920x_read = error: -19
[  866.225253][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  866.226694][T16549] dummy0: left allmulticast mode
[  866.233132][  T971] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  866.249862][T16549] dummy0: left promiscuous mode
[  866.293481][T16481] 8021q: adding VLAN 0 to HW filter on device team0
[  866.305014][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.312186][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  866.339256][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.346391][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  866.361332][T13006] i2c i2c-2: failure reading functionality
[  866.383120][T13006] i2c i2c-2: connected i2c-tiny-usb device
[  866.390854][ T5897] m920x_read = error: -19
[  866.397223][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  866.401383][T13006] usb 6-1: USB disconnect, device number 5
[  866.570931][ T5897] m920x_read = error: -19
[  866.576296][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  866.611705][T16481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  866.656050][ T5897] usb 4-1: USB disconnect, device number 109
[  866.677438][T16481] veth0_vlan: entered promiscuous mode
[  866.712749][T16481] veth1_vlan: entered promiscuous mode
[  866.750608][T16097] m920x_read = error: -19
[  866.772139][T16097] dvb-usb: error -19 while querying for an remote control event.
[  866.787811][T16481] veth0_macvtap: entered promiscuous mode
[  866.802508][T16481] veth1_macvtap: entered promiscuous mode
[  866.817578][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  866.828564][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  866.847979][T16481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  866.862789][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  866.873598][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  866.888210][T16481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  866.912966][T16481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.925042][T16481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.945541][T16481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.954419][T13423] m920x_read = error: -19
[  866.958799][T16481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  866.969846][T13423] dvb-usb: error -19 while querying for an remote control event.
[  867.060148][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.075326][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.090454][ T5897] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  867.108434][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.116808][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.130492][T13423] m920x_read = error: -19
[  867.140070][T13423] dvb-usb: error -19 while querying for an remote control event.
[  867.170479][T16097] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  867.290401][ T5897] usb 4-1: Using ep0 maxpacket: 16
[  867.297267][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.308287][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  867.319447][T13423] m920x_read = error: -19
[  867.324358][T13423] dvb-usb: error -19 while querying for an remote control event.
[  867.332383][T16097] usb 6-1: device descriptor read/64, error -71
[  867.338722][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  867.354240][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  867.363652][ T5897] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  867.372486][ T5897] usb 4-1: Manufacturer: syz
[  867.378697][ T5897] usb 4-1: config 0 descriptor??
[  867.483936][ T5818] Bluetooth: hci1: command tx timeout
[  867.511773][ T5897] m920x_read = error: -19
[  867.516243][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  867.610538][T16097] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  867.681915][ T5897] m920x_read = error: -19
[  867.686367][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  867.712850][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  867.722189][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  867.730228][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  867.738064][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  867.745682][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  867.760847][T16097] usb 6-1: device descriptor read/64, error -71
[  867.780610][T16581] lo speed is unknown, defaulting to 1000
[  867.860623][ T5897] m920x_read = error: -19
[  867.865090][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  867.880771][T16097] usb usb6-port1: attempt power cycle
[  867.943023][T16581] chnl_net:caif_netlink_parms(): no params data found
[  868.016179][T16581] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.023360][T16581] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.037068][T16581] bridge_slave_0: entered allmulticast mode
[  868.043298][ T5897] m920x_read = error: -19
[  868.047798][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  868.056948][T16581] bridge_slave_0: entered promiscuous mode
[  868.064650][T16589] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  868.077448][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'.
[  868.106469][T16581] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.127528][T16581] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.141758][T16581] bridge_slave_1: entered allmulticast mode
[  868.153964][T16590] vivid-001: =================  START STATUS  =================
[  868.162026][T16590] vivid-001: Radio HW Seek Mode: Bounded
[  868.169012][T16590] vivid-001: Radio Programmable HW Seek: false
[  868.171560][T16581] bridge_slave_1: entered promiscuous mode
[  868.181327][T16590] vivid-001: RDS Rx I/O Mode: Block I/O
[  868.187036][T16590] vivid-001: Generate RBDS Instead of RDS: false
[  868.195969][T16590] vivid-001: RDS Reception: true
[  868.203048][T16590] vivid-001: RDS Program Type: 0 inactive
[  868.223600][T13423] m920x_read = error: -19
[  868.228479][T16097] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  868.239363][T13423] dvb-usb: error -19 while querying for an remote control event.
[  868.249100][T16590] vivid-001: RDS PS Name:  inactive
[  868.257525][T16590] vivid-001: RDS Radio Text:  inactive
[  868.264192][T16097] usb 6-1: device descriptor read/8, error -71
[  868.293452][T16590] vivid-001: RDS Traffic Announcement: false inactive
[  868.315269][T16581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.345503][T16590] vivid-001: RDS Traffic Program: false inactive
[  868.366095][T16590] vivid-001: RDS Music: false inactive
[  868.371080][T16581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.376567][T16590] vivid-001: ==================  END STATUS  ==================
[  868.384189][T16597] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  868.400466][ T5897] m920x_read = error: -19
[  868.404803][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  868.425443][   T36] bond0: (slave netdevsim0): Releasing backup interface
[  868.486150][T16581] team0: Port device team_slave_0 added
[  868.520593][T16097] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  868.528428][T16581] team0: Port device team_slave_1 added
[  868.541056][T16097] usb 6-1: device descriptor read/8, error -71
[  868.570442][ T5897] m920x_read = error: -19
[  868.574821][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  868.587844][T16581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.601948][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.630503][T16581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.643706][T16581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.651563][T16097] usb usb6-port1: unable to enumerate USB device
[  868.658441][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.685549][T16581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.740476][T16097] m920x_read = error: -19
[  868.744870][T16097] dvb-usb: error -19 while querying for an remote control event.
[  868.818297][T16581] hsr_slave_0: entered promiscuous mode
[  868.824988][T16581] hsr_slave_1: entered promiscuous mode
[  868.831559][T16581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  868.839180][T16581] Cannot create hsr debugfs directory
[  868.899497][   T36] bridge_slave_1: left allmulticast mode
[  868.910777][T16097] m920x_read = error: -19
[  868.915354][T16097] dvb-usb: error -19 while querying for an remote control event.
[  868.927619][T16567] vhci_hcd: connection reset by peer
[  868.935884][   T13] vhci_hcd: stop threads
[  868.937296][   T36] bridge_slave_1: left promiscuous mode
[  868.942308][   T13] vhci_hcd: release socket
[  868.951661][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.962441][   T13] vhci_hcd: disconnect device
[  868.968817][   T36] bridge_slave_0: left allmulticast mode
[  869.006540][   T36] bridge_slave_0: left promiscuous mode
[  869.018633][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.042463][T16599] FAULT_INJECTION: forcing a failure.
[  869.042463][T16599] name failslab, interval 1, probability 0, space 0, times 0
[  869.062152][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.0.3040 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  869.062177][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  869.062187][T16599] Call Trace:
[  869.062193][T16599]  <TASK>
[  869.062201][T16599]  dump_stack_lvl+0x16c/0x1f0
[  869.062227][T16599]  should_fail_ex+0x512/0x640
[  869.062252][T16599]  ? __kmalloc_noprof+0xbf/0x510
[  869.062280][T16599]  ? sock_kmalloc+0x111/0x170
[  869.062299][T16599]  should_failslab+0xc2/0x120
[  869.062317][T16599]  __kmalloc_noprof+0xd2/0x510
[  869.062341][T16599]  ? __import_iovec+0x1c8/0x660
[  869.062368][T16599]  sock_kmalloc+0x111/0x170
[  869.062390][T16599]  ____sys_sendmsg+0x52a/0xc70
[  869.062411][T16599]  ? copy_msghdr_from_user+0x10a/0x160
[  869.062428][T16599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  869.062461][T16599]  ___sys_sendmsg+0x134/0x1d0
[  869.062479][T16599]  ? __pfx____sys_sendmsg+0x10/0x10
[  869.062528][T16599]  __sys_sendmsg+0x16d/0x220
[  869.062544][T16599]  ? __pfx___sys_sendmsg+0x10/0x10
[  869.062564][T16599]  ? __pfx_bpf_trace_run2+0x10/0x10
[  869.062595][T16599]  ? syscall_trace_enter+0x1cb/0x260
[  869.062615][T16599]  ? rcu_is_watching+0x12/0xc0
[  869.062638][T16599]  do_syscall_64+0xcd/0x260
[  869.062662][T16599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.062679][T16599] RIP: 0033:0x7f2898d8e969
[  869.062693][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  869.062709][T16599] RSP: 002b:00007f2899b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  869.062726][T16599] RAX: ffffffffffffffda RBX: 00007f2898fb5fa0 RCX: 00007f2898d8e969
[  869.062737][T16599] RDX: 0000000000000800 RSI: 0000200000000700 RDI: 0000000000000004
[  869.062747][T16599] RBP: 00007f2899b51090 R08: 0000000000000000 R09: 0000000000000000
[  869.062758][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  869.062768][T16599] R13: 0000000000000000 R14: 00007f2898fb5fa0 R15: 00007ffeb58c2dd8
[  869.062792][T16599]  </TASK>
[  869.090546][ T5897] m920x_read = error: -19
[  869.395210][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  869.537684][   T30] audit: type=1400 audit(1746266048.521:7339): avc:  denied  { write } for  pid=16604 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  869.560545][ T5897] m920x_read = error: -19
[  869.638538][T16606] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  869.649986][T16606] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  869.665165][T16606] FAULT_INJECTION: forcing a failure.
[  869.665165][T16606] name failslab, interval 1, probability 0, space 0, times 0
[  869.677992][T16606] CPU: 1 UID: 0 PID: 16606 Comm: syz.1.3041 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  869.678015][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  869.678026][T16606] Call Trace:
[  869.678032][T16606]  <TASK>
[  869.678039][T16606]  dump_stack_lvl+0x16c/0x1f0
[  869.678065][T16606]  should_fail_ex+0x512/0x640
[  869.678086][T16606]  ? fs_reclaim_acquire+0xae/0x150
[  869.678110][T16606]  ? tomoyo_encode2+0x100/0x3e0
[  869.678132][T16606]  should_failslab+0xc2/0x120
[  869.678151][T16606]  __kmalloc_noprof+0xd2/0x510
[  869.678176][T16606]  ? d_absolute_path+0x136/0x1a0
[  869.678205][T16606]  tomoyo_encode2+0x100/0x3e0
[  869.678232][T16606]  tomoyo_encode+0x29/0x50
[  869.678253][T16606]  tomoyo_realpath_from_path+0x18f/0x6e0
[  869.678284][T16606]  tomoyo_check_open_permission+0x2ab/0x3c0
[  869.678305][T16606]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  869.678325][T16606]  ? ovl_dir_read_merged+0x90/0x5d0
[  869.678371][T16606]  ? preempt_schedule_thunk+0x16/0x30
[  869.678397][T16606]  tomoyo_file_open+0x6b/0x90
[  869.678414][T16606]  security_file_open+0x84/0x1e0
[  869.678439][T16606]  do_dentry_open+0x596/0x1c10
[  869.678466][T16606]  ? lockdep_init_map_type+0x5c/0x280
[  869.678496][T16606]  vfs_open+0x82/0x3f0
[  869.678519][T16606]  dentry_open+0x71/0xd0
[  869.678537][T16606]  ovl_path_open+0x198/0x1f0
[  869.678559][T16606]  ovl_dir_read_merged+0x184/0x5d0
[  869.678582][T16606]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  869.678605][T16606]  ? irqentry_exit+0x3b/0x90
[  869.678626][T16606]  ? __pfx_ovl_fill_merge+0x10/0x10
[  869.678655][T16606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.678677][T16606]  ovl_iterate+0x86c/0xe40
[  869.678699][T16606]  ? __pfx_down_read_killable+0x10/0x10
[  869.678726][T16606]  ? __pfx_ovl_iterate+0x10/0x10
[  869.678746][T16606]  wrap_directory_iterator+0x9f/0xe0
[  869.678770][T16606]  iterate_dir+0x293/0xb40
[  869.678796][T16606]  __x64_sys_getdents+0x14d/0x2c0
[  869.678820][T16606]  ? __pfx___x64_sys_getdents+0x10/0x10
[  869.678842][T16606]  ? __pfx_filldir+0x10/0x10
[  869.678864][T16606]  ? syscall_trace_enter+0x1cb/0x260
[  869.678884][T16606]  ? rcu_is_watching+0x12/0xc0
[  869.678907][T16606]  do_syscall_64+0xcd/0x260
[  869.678930][T16606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.678946][T16606] RIP: 0033:0x7f2370d8e969
[  869.678961][T16606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  869.678976][T16606] RSP: 002b:00007f2371b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  869.678993][T16606] RAX: ffffffffffffffda RBX: 00007f2370fb6160 RCX: 00007f2370d8e969
[  869.679004][T16606] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000005
[  869.679014][T16606] RBP: 00007f2371b45090 R08: 0000000000000000 R09: 0000000000000000
[  869.679023][T16606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  869.679033][T16606] R13: 0000000000000000 R14: 00007f2370fb6160 R15: 00007ffc44685198
[  869.679057][T16606]  </TASK>
[  869.679166][T16606] ERROR: Out of memory at tomoyo_realpath_from_path.
[  869.803689][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  869.832205][ T5829] Bluetooth: hci3: command tx timeout
[  870.391775][ T5897] m920x_read = error: -19
[  870.403780][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  870.496536][T16620] netlink: 'syz.0.3043': attribute type 10 has an invalid length.
[  870.591635][ T5867] usb 4-1: USB disconnect, device number 110
[  870.621929][ T5895] m920x_read = error: -19
[  870.626291][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  870.695952][   T30] audit: type=1400 audit(1746266049.681:7340): avc:  denied  { connect } for  pid=16624 comm="syz.3.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  870.731219][ T5829] Bluetooth: hci4: unexpected event for opcode 0x203d
[  870.840659][ T5895] m920x_read = error: -19
[  870.885349][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  870.935047][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  870.947382][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.966990][   T36] bond0 (unregistering): Released all slaves
[  871.121616][T16097] m920x_read = error: -19
[  871.146745][T16097] dvb-usb: error -19 while querying for an remote control event.
[  871.305089][   T36] tipc: Disabling bearer <udp:£>
[  871.835589][  T971] vhci_hcd: vhci_device speed not set
[  871.841315][T16097] m920x_read = error: -19
[  871.845714][T16097] dvb-usb: error -19 while querying for an remote control event.
[  871.854057][   T36] tipc: Left network mode
[  872.076696][T16097] m920x_read = error: -19
[  872.090428][ T5829] Bluetooth: hci3: command tx timeout
[  872.100392][T16097] dvb-usb: error -19 while querying for an remote control event.
[  872.249045][T16643] FAULT_INJECTION: forcing a failure.
[  872.249045][T16643] name failslab, interval 1, probability 0, space 0, times 0
[  872.293551][T16645] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  872.300742][ T5895] m920x_read = error: -19
[  872.301201][T16643] CPU: 1 UID: 0 PID: 16643 Comm: syz.0.3052 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  872.301222][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  872.301231][T16643] Call Trace:
[  872.301236][T16643]  <TASK>
[  872.301242][T16643]  dump_stack_lvl+0x16c/0x1f0
[  872.301265][T16643]  should_fail_ex+0x512/0x640
[  872.301284][T16643]  ? __kmalloc_noprof+0xbf/0x510
[  872.301308][T16643]  ? constrain_params_by_rules+0x175/0xca0
[  872.301327][T16643]  should_failslab+0xc2/0x120
[  872.301343][T16643]  __kmalloc_noprof+0xd2/0x510
[  872.301370][T16643]  constrain_params_by_rules+0x175/0xca0
[  872.301392][T16643]  ? lockdep_hardirqs_on+0x7c/0x110
[  872.301412][T16643]  ? stack_depot_save_flags+0x3e6/0xa50
[  872.301431][T16643]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  872.301450][T16643]  ? alloc_pages_mpol+0x25a/0x550
[  872.301468][T16643]  ? __kasan_kmalloc+0xaa/0xb0
[  872.301488][T16643]  ? snd_pcm_oss_get_formats+0x16e/0x340
[  872.301506][T16643]  ? snd_pcm_oss_ioctl+0x2efb/0x37a0
[  872.301523][T16643]  ? __x64_sys_ioctl+0x190/0x200
[  872.301548][T16643]  ? rcu_is_watching+0x12/0xc0
[  872.301565][T16643]  ? snd_interval_refine+0x2fa/0x580
[  872.301581][T16643]  snd_pcm_hw_refine+0x7de/0xad0
[  872.301604][T16643]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  872.301631][T16643]  ? __asan_memset+0x23/0x50
[  872.301650][T16643]  ? _snd_pcm_hw_params_any+0x1dd/0x2a0
[  872.301670][T16643]  snd_pcm_oss_get_formats+0x197/0x340
[  872.301690][T16643]  ? __pfx_snd_pcm_oss_get_formats+0x10/0x10
[  872.301707][T16643]  ? __might_fault+0x13b/0x190
[  872.301728][T16643]  snd_pcm_oss_ioctl+0x2efb/0x37a0
[  872.301748][T16643]  ? hook_file_ioctl_common+0x145/0x410
[  872.301771][T16643]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  872.301794][T16643]  ? selinux_file_ioctl+0x180/0x270
[  872.301814][T16643]  ? selinux_file_ioctl+0xb4/0x270
[  872.301836][T16643]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  872.301856][T16643]  __x64_sys_ioctl+0x190/0x200
[  872.301876][T16643]  do_syscall_64+0xcd/0x260
[  872.301896][T16643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.301910][T16643] RIP: 0033:0x7f2898d8e969
[  872.301922][T16643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  872.301937][T16643] RSP: 002b:00007f2899b51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  872.301952][T16643] RAX: ffffffffffffffda RBX: 00007f2898fb5fa0 RCX: 00007f2898d8e969
[  872.301962][T16643] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003
[  872.301971][T16643] RBP: 00007f2899b51090 R08: 0000000000000000 R09: 0000000000000000
[  872.301980][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  872.301993][T16643] R13: 0000000000000000 R14: 00007f2898fb5fa0 R15: 00007ffeb58c2dd8
[  872.302014][T16643]  </TASK>
[  872.586637][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  872.653178][   T36] hsr_slave_0: left promiscuous mode
[  872.659640][   T36] hsr_slave_1: left promiscuous mode
[  872.667605][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  872.675782][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.699973][T16649] overlayfs: failed to resolve './file1': -2
[  872.710557][ T5897] usb 4-1: new full-speed USB device number 111 using dummy_hcd
[  872.760611][ T5895] m920x_read = error: -19
[  872.764993][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  872.869772][ T5897] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  872.890196][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.913831][ T5897] usb 4-1: Product: syz
[  872.918004][ T5897] usb 4-1: Manufacturer: syz
[  872.925175][ T5897] usb 4-1: SerialNumber: syz
[  872.937957][ T5897] usb 4-1: config 0 descriptor??
[  872.951540][  T971] m920x_read = error: -19
[  872.955968][  T971] dvb-usb: error -19 while querying for an remote control event.
[  873.120487][  T971] m920x_read = error: -19
[  873.124915][  T971] dvb-usb: error -19 while querying for an remote control event.
[  873.290503][  T971] m920x_read = error: -19
[  873.294900][  T971] dvb-usb: error -19 while querying for an remote control event.
[  873.344684][T16659] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  873.918077][  T971] m920x_read = error: -19
[  873.922531][ T5897] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  873.930919][  T971] dvb-usb: error -19 while querying for an remote control event.
[  874.111057][ T5829] Bluetooth: hci3: command tx timeout
[  874.116625][  T971] m920x_read = error: -19
[  874.123082][  T971] dvb-usb: error -19 while querying for an remote control event.
[  874.290464][  T971] m920x_read = error: -19
[  874.294845][  T971] dvb-usb: error -19 while querying for an remote control event.
[  874.337176][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'.
[  874.348074][T16650] netlink: 'syz.0.3054': attribute type 30 has an invalid length.
[  874.387702][ T5897] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  874.492861][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'.
[  874.493183][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'.
[  874.511618][T16650] netlink: 'syz.0.3054': attribute type 30 has an invalid length.
[  874.536294][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'.
[  874.552525][  T971] m920x_read = error: -19
[  874.561565][  T971] dvb-usb: error -19 while querying for an remote control event.
[  874.569351][ T5897] dm9601 4-1:0.0 eth2: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 8e:85:ab:a7:18:ed
[  874.616754][ T5897] usb 4-1: USB disconnect, device number 111
[  874.652869][ T5897] dm9601 4-1:0.0 eth2: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[  874.740424][  T971] m920x_read = error: -19
[  874.749373][  T971] dvb-usb: error -19 while querying for an remote control event.
[  874.759572][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  874.770615][ T5829] Bluetooth: hci4: Injecting HCI hardware error event
[  874.781254][ T5818] Bluetooth: hci4: hardware error 0x00
[  874.974895][T16097] m920x_read = error: -19
[  874.986058][T16097] dvb-usb: error -19 while querying for an remote control event.
[  875.038014][T16581] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  875.111991][T16581] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  875.146791][T16581] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  875.191683][T16581] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  875.205577][   T36] IPVS: stop unused estimator thread 0...
[  875.213351][T16097] m920x_read = error: -19
[  875.228631][T16097] dvb-usb: error -19 while querying for an remote control event.
[  875.470539][  T971] m920x_read = error: -19
[  875.474950][  T971] dvb-usb: error -19 while querying for an remote control event.
[  875.537427][T16581] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.585034][T16581] 8021q: adding VLAN 0 to HW filter on device team0
[  875.605421][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.612597][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.648542][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.655712][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.660456][  T971] m920x_read = error: -19
[  875.669992][  T971] dvb-usb: error -19 while querying for an remote control event.
[  875.704986][T16581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  875.715637][T16581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  875.852252][  T971] m920x_read = error: -19
[  875.856715][  T971] dvb-usb: error -19 while querying for an remote control event.
[  876.194695][ T5829] Bluetooth: hci3: command tx timeout
[  876.399880][ T5895] m920x_read = error: -19
[  876.404369][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  876.516957][T16581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  876.570620][  T971] m920x_read = error: -19
[  876.574967][  T971] dvb-usb: error -19 while querying for an remote control event.
[  876.751401][  T971] m920x_read = error: -19
[  876.755838][  T971] dvb-usb: error -19 while querying for an remote control event.
[  876.920513][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  876.940659][  T971] m920x_read = error: -19
[  876.945147][  T971] dvb-usb: error -19 while querying for an remote control event.
[  877.224546][T16702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3066'.
[  877.247753][T16702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3066'.
[  877.251295][  T971] m920x_read = error: -19
[  877.270079][T16702] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  877.275522][  T971] dvb-usb: error -19 while querying for an remote control event.
[  877.462410][  T971] m920x_read = error: -19
[  877.466787][  T971] dvb-usb: error -19 while querying for an remote control event.
[  877.548487][T16702] syz_tun: entered promiscuous mode
[  877.629874][T16702] batadv_slave_0: entered promiscuous mode
[  877.666014][T16702] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  877.710731][T16702] Cannot create hsr debugfs directory
[  877.737421][T16702] hsr1: entered allmulticast mode
[  877.756327][T16702] syz_tun: entered allmulticast mode
[  877.764741][T16702] batadv_slave_0: entered allmulticast mode
[  878.299241][  T971] m920x_read = error: -19
[  878.304648][  T971] dvb-usb: error -19 while querying for an remote control event.
[  878.319858][T16691] binder: 16690:16691 ioctl 40086408 200000000000 returned -22
[  878.368735][T16704] veth0_macvtap: left promiscuous mode
[  878.386465][T16704] macvtap0: entered promiscuous mode
[  878.413441][T16704] veth0_macvtap: entered promiscuous mode
[  878.465057][T16704] team0: Device macvtap0 failed to register rx_handler
[  878.480714][  T971] m920x_read = error: -19
[  878.485649][  T971] dvb-usb: error -19 while querying for an remote control event.
[  878.510626][T16704] veth0_macvtap: left promiscuous mode
[  878.612422][T16581] veth0_vlan: entered promiscuous mode
[  878.651298][  T971] m920x_read = error: -19
[  878.669196][  T971] dvb-usb: error -19 while querying for an remote control event.
[  878.683028][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'.
[  878.692904][T16581] veth1_vlan: entered promiscuous mode
[  878.725732][T16720] netlink: 'syz.1.3071': attribute type 30 has an invalid length.
[  878.817760][T16720] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  878.826642][T16720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  878.835368][T16720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  878.844298][T16720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  878.860648][  T971] m920x_read = error: -19
[  878.865731][  T971] dvb-usb: error -19 while querying for an remote control event.
[  878.882145][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'.
[  878.891316][T16720] netlink: 'syz.1.3071': attribute type 30 has an invalid length.
[  878.957486][T16581] veth0_macvtap: entered promiscuous mode
[  879.049033][  T971] m920x_read = error: -19
[  879.053823][  T971] dvb-usb: error -19 while querying for an remote control event.
[  879.534255][  T971] m920x_read = error: -19
[  879.538721][  T971] dvb-usb: error -19 while querying for an remote control event.
[  879.558637][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.570737][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.573271][T16581] veth1_macvtap: entered promiscuous mode
[  879.578256][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.666838][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.715997][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.719498][T16581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  879.748298][T16581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.753503][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.758475][T16581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  879.781309][T16581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.808334][T16581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  879.820605][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.825354][T16581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  879.838679][  T971] m920x_read = error: -19
[  879.843095][  T971] dvb-usb: error -19 while querying for an remote control event.
[  879.852994][T16581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.871940][T16581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  879.877719][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.894329][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.908204][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.916143][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.916796][T16581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.923705][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.942491][T16581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  879.949850][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.954078][T16581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.972297][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.974311][T16581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  879.979828][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  879.990027][T16581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  880.010466][ T5895] m920x_read = error: -19
[  880.014842][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  880.027762][T16581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  880.135599][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.154224][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  880.161773][ T5867] hid-generic C990:0003:007F.004D: unknown main item tag 0x0
[  880.174390][ T5867] hid-generic C990:0003:007F.004D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  880.183123][ T5895] m920x_read = error: -19
[  880.188672][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  880.194686][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.662941][ T5895] m920x_read = error: -19
[  880.667326][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  880.780037][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.786483][T16737] FAULT_INJECTION: forcing a failure.
[  880.786483][T16737] name failslab, interval 1, probability 0, space 0, times 0
[  880.790699][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.807928][T16737] CPU: 1 UID: 0 PID: 16737 Comm: syz.3.3076 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  880.807952][T16737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  880.807962][T16737] Call Trace:
[  880.807969][T16737]  <TASK>
[  880.807976][T16737]  dump_stack_lvl+0x16c/0x1f0
[  880.808003][T16737]  should_fail_ex+0x512/0x640
[  880.808023][T16737]  ? fs_reclaim_acquire+0xae/0x150
[  880.808048][T16737]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  880.808071][T16737]  should_failslab+0xc2/0x120
[  880.808095][T16737]  __kmalloc_noprof+0xd2/0x510
[  880.808126][T16737]  tomoyo_realpath_from_path+0xc2/0x6e0
[  880.808157][T16737]  tomoyo_check_open_permission+0x2ab/0x3c0
[  880.808179][T16737]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  880.808227][T16737]  ? do_raw_spin_lock+0x12c/0x2b0
[  880.808255][T16737]  tomoyo_file_open+0x6b/0x90
[  880.808272][T16737]  security_file_open+0x84/0x1e0
[  880.808296][T16737]  do_dentry_open+0x596/0x1c10
[  880.808329][T16737]  vfs_open+0x82/0x3f0
[  880.808352][T16737]  path_openat+0x1e5e/0x2d40
[  880.808388][T16737]  ? __pfx_path_openat+0x10/0x10
[  880.808419][T16737]  do_filp_open+0x20b/0x470
[  880.808445][T16737]  ? __pfx_do_filp_open+0x10/0x10
[  880.808490][T16737]  ? alloc_fd+0x471/0x7d0
[  880.808522][T16737]  do_sys_openat2+0x11b/0x1d0
[  880.808542][T16737]  ? __pfx_do_sys_openat2+0x10/0x10
[  880.808571][T16737]  __x64_sys_openat+0x174/0x210
[  880.808589][T16737]  ? __pfx___x64_sys_openat+0x10/0x10
[  880.808611][T16737]  ? do_user_addr_fault+0x843/0x1370
[  880.808636][T16737]  do_syscall_64+0xcd/0x260
[  880.808660][T16737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.808677][T16737] RIP: 0033:0x7f139cd8d2d0
[  880.808692][T16737] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  880.808708][T16737] RSP: 002b:00007f139dcaeef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  880.808724][T16737] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f139cd8d2d0
[  880.808734][T16737] RDX: 0000000000000002 RSI: 00007f139ce1078c RDI: 00000000ffffff9c
[  880.808744][T16737] RBP: 00007f139ce1078c R08: 0000000000000000 R09: 0000000000000000
[  880.808754][T16737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  880.808764][T16737] R13: 0000000000000036 R14: 0000200000000040 R15: 00007fffed6587f8
[  880.808787][T16737]  </TASK>
[  880.809615][T16737] ERROR: Out of memory at tomoyo_realpath_from_path.
[  880.840596][ T5895] m920x_read = error: -19
[  881.061005][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  881.091929][ T5867] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  881.260703][ T5895] m920x_read = error: -19
[  881.265411][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  881.744787][    T9] m920x_read = error: -19
[  881.751752][    T9] dvb-usb: error -19 while querying for an remote control event.
[  881.767918][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  881.810942][ T5895] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  881.814379][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  881.896849][ T5867] usb 4-1: config 1 interface 0 has no altsetting 0
[  881.978219][ T5867] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  882.150162][    T9] m920x_read = error: -19
[  882.172528][    T9] dvb-usb: error -19 while querying for an remote control event.
[  882.195392][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.196880][ T5895] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  882.215577][ T5867] usb 4-1: Product: syz
[  882.229774][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.239979][ T5895] usb 5-1: Product: syz
[  882.240382][ T5867] usb 4-1: Manufacturer: syz
[  882.246263][ T5895] usb 5-1: Manufacturer: syz
[  882.291854][ T5867] usb 4-1: SerialNumber: syz
[  882.330026][ T5895] usb 5-1: SerialNumber: syz
[  882.340042][ T5895] usb 5-1: config 0 descriptor??
[  882.387151][    T9] m920x_read = error: -19
[  882.399137][    T9] dvb-usb: error -19 while querying for an remote control event.
[  882.687725][ T5867] usbhid 4-1:1.0: can't add hid device: -71
[  882.687849][ T5895] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 107
[  882.705655][ T5867] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  882.726935][T16754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3081'.
[  882.746606][ T5867] usb 4-1: USB disconnect, device number 112
[  882.755084][T16754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3081'.
[  882.856719][T16754] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  882.878369][    T9] m920x_read = error: -19
[  882.883697][    T9] dvb-usb: error -19 while querying for an remote control event.
[  882.957545][T16755] syz_tun: entered promiscuous mode
[  882.983303][T16755] batadv_slave_0: entered promiscuous mode
[  883.010701][T16755] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  883.018304][T16755] Cannot create hsr debugfs directory
[  883.026469][T16755] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  883.039123][T16755] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  883.050417][T16755] hsr1: entered allmulticast mode
[  883.055525][T16755] syz_tun: entered allmulticast mode
[  883.062549][T16755] batadv_slave_0: entered allmulticast mode
[  883.070637][T16097] m920x_read = error: -19
[  883.075630][T16756] macvtap0: entered promiscuous mode
[  883.081196][T16097] dvb-usb: error -19 while querying for an remote control event.
[  883.104423][T16756] team0: Device macvtap0 failed to register rx_handler
[  883.143191][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  883.155283][T15922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  883.163784][T15922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  883.172659][T15922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  883.180280][T15922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  883.230541][    T9] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[  883.260410][T16097] m920x_read = error: -19
[  883.264820][T16097] dvb-usb: error -19 while querying for an remote control event.
[  883.277299][T16760] lo speed is unknown, defaulting to 1000
[  883.332860][T16739] dummy0: entered promiscuous mode
[  883.338292][T16739] macsec1: entered promiscuous mode
[  883.349632][T16739] macsec1: entered allmulticast mode
[  883.355385][T16739] dummy0: entered allmulticast mode
[  883.405802][    T9] usb 2-1: config 0 has an invalid interface number: 56 but max is 0
[  883.424744][    T9] usb 2-1: config 0 has no interface number 0
[  883.451975][T16097] m920x_read = error: -19
[  883.457007][T16097] dvb-usb: error -19 while querying for an remote control event.
[  883.477437][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  883.478008][   T30] audit: type=1326 audit(1746266062.431:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc960f8e969 code=0x7ffc0000
[  883.493398][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.521337][   T30] audit: type=1326 audit(1746266062.431:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc960f8e969 code=0x7ffc0000
[  883.545041][   T30] audit: type=1326 audit(1746266062.451:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc960f8d2d0 code=0x7ffc0000
[  883.560226][T16739] dummy0: left allmulticast mode
[  883.570882][   T30] audit: type=1326 audit(1746266062.461:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.577859][    T9] usb 2-1: Product: syz
[  883.597555][   T30] audit: type=1326 audit(1746266062.461:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.611905][T16739] dummy0: left promiscuous mode
[  883.641084][T16097] m920x_read = error: -19
[  883.711347][T16097] dvb-usb: error -19 while querying for an remote control event.
[  883.844264][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  883.914951][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  883.922894][T16097] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  883.942156][    T9] usb 2-1: Manufacturer: syz
[  883.952572][  T971] m920x_read = error: -19
[  883.962159][   T30] audit: type=1326 audit(1746266062.471:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.969077][  T971] dvb-usb: error -19 while querying for an remote control event.
[  883.985659][   T30] audit: type=1326 audit(1746266062.471:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.985701][   T30] audit: type=1326 audit(1746266062.781:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.985741][   T30] audit: type=1326 audit(1746266062.851:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  883.985773][   T30] audit: type=1326 audit(1746266062.931:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc960f8e56b code=0x7ffc0000
[  884.031516][    T9] usb 2-1: SerialNumber: syz
[  884.095689][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.104604][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.112133][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.121658][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.129139][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.138722][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.159012][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.168009][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.175745][T13015] syz_tun (unregistering): left promiscuous mode
[  884.179425][    T9] usb 2-1: config 0 descriptor??
[  884.195431][T16097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  884.208261][ T5895] i2c i2c-2: failure reading functionality
[  884.214250][T16097] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  884.234419][    T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  884.243741][ T5895] i2c i2c-2: connected i2c-tiny-usb device
[  884.251063][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.258744][    T9] pctv452e: pctv452e_power_ctrl: 1
[  884.258744][    T9] 
[  884.268216][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.279202][T16097] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  884.288900][T16772] m920x_read = error: -19
[  884.293514][T16772] dvb-usb: error -19 while querying for an remote control event.
[  884.302066][ T5895] usb 5-1: USB disconnect, device number 107
[  884.314450][    T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  884.314450][    T9] 
[  884.328475][ T1008] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  884.338682][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.349785][T16097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.363584][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.373516][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  884.381213][T16097] usb 6-1: config 0 descriptor??
[  884.388310][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  884.396063][T16760] chnl_net:caif_netlink_parms(): no params data found
[  884.399231][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.418063][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.428171][    T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  884.450119][ T1008] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  884.455736][ T5897] hid-generic C990:0003:007F.004E: unknown main item tag 0x0
[  884.477727][    T9] usb 2-1: USB disconnect, device number 105
[  884.493275][  T971] m920x_read = error: -19
[  884.497725][  T971] dvb-usb: error -19 while querying for an remote control event.
[  884.512249][ T5897] hid-generic C990:0003:007F.004E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  884.569865][ T1008] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  884.651110][ T1008] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  884.670697][ T5895] m920x_read = error: -19
[  884.675062][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  884.692705][T16760] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.699895][T16760] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.707687][T16760] bridge_slave_0: entered allmulticast mode
[  884.715502][T16760] bridge_slave_0: entered promiscuous mode
[  884.724623][T16760] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.732176][T16760] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.739405][T16760] bridge_slave_1: entered allmulticast mode
[  884.747385][T16760] bridge_slave_1: entered promiscuous mode
[  884.785524][T16760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.798199][T16760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.132840][T16760] team0: Port device team_slave_0 added
[  885.255855][ T5818] Bluetooth: hci0: command tx timeout
[  885.262653][ T5895] m920x_read = error: -19
[  885.267295][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  885.411095][T16785] sctp: [Deprecated]: syz.5.3086 (pid 16785) Use of int in maxseg socket option.
[  885.411095][T16785] Use struct sctp_assoc_value instead
[  885.430702][ T5895] m920x_read = error: -19
[  885.476074][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  885.700787][ T5895] m920x_read = error: -19
[  885.705222][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  885.714618][T16760] team0: Port device team_slave_1 added
[  885.884157][T16791] block nbd1: Unsupported socket: shutdown callout must be supported.
[  886.425222][T16097] usbhid 6-1:0.0: can't add hid device: -71
[  886.433487][ T5895] m920x_read = error: -19
[  886.456774][T16097] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  886.464624][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  886.505030][T16097] usb 6-1: USB disconnect, device number 10
[  886.553377][T16760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  886.560681][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  886.600959][T16760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  886.671203][ T5895] m920x_read = error: -19
[  886.676665][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  886.959113][ T5895] m920x_read = error: -19
[  886.966017][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  887.032358][T16760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.039411][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  887.068941][T16760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.140838][ T5895] m920x_read = error: -19
[  887.145205][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  887.310598][ T5895] m920x_read = error: -19
[  887.315171][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  887.323788][ T5818] Bluetooth: hci0: command tx timeout
[  887.480484][T16097] m920x_read = error: -19
[  887.484935][T16097] dvb-usb: error -19 while querying for an remote control event.
[  887.700928][ T5895] m920x_read = error: -19
[  887.710925][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  887.800761][T16097] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  887.890899][ T5895] m920x_read = error: -19
[  887.895554][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  887.960796][T16097] usb 4-1: device descriptor read/64, error -71
[  888.090449][ T5895] m920x_read = error: -19
[  888.094835][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  888.212272][T16097] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  888.235913][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.246259][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  888.255718][ T1008] bond0 (unregistering): Released all slaves
[  888.262728][ T5895] m920x_read = error: -19
[  888.267069][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  888.323724][T16802] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  888.380412][T16097] usb 4-1: device descriptor read/64, error -71
[  888.480582][ T5895] m920x_read = error: -19
[  888.484970][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  888.500534][T16097] usb usb4-port1: attempt power cycle
[  889.118765][ T5897] m920x_read = error: -19
[  889.230672][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  889.235392][T16760] hsr_slave_0: entered promiscuous mode
[  889.238585][T16097] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  889.305121][T16760] hsr_slave_1: entered promiscuous mode
[  889.382268][T16097] usb 4-1: device descriptor read/8, error -71
[  889.393622][ T5897] m920x_read = error: -19
[  889.397979][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  889.417162][ T5818] Bluetooth: hci0: command tx timeout
[  889.620467][ T5897] m920x_read = error: -19
[  889.624844][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  889.695332][T16097] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  889.730956][T16097] usb 4-1: device descriptor read/8, error -71
[  889.800770][ T5897] m920x_read = error: -19
[  889.805142][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  889.846972][ T1008] batadv_slave_0: left promiscuous mode
[  889.858480][T16097] usb usb4-port1: unable to enumerate USB device
[  889.876906][ T1008] hsr_slave_0: left promiscuous mode
[  889.883604][ T1008] hsr_slave_1: left promiscuous mode
[  889.889634][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0
[  889.899267][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1
[  889.980471][T16097] m920x_read = error: -19
[  889.993875][T16097] dvb-usb: error -19 while querying for an remote control event.
[  890.160495][T16097] m920x_read = error: -19
[  890.165917][T16097] dvb-usb: error -19 while querying for an remote control event.
[  890.373361][T16097] m920x_read = error: -19
[  890.378126][T16097] dvb-usb: error -19 while querying for an remote control event.
[  890.391955][ T1008] team0 (unregistering): Port device team_slave_1 removed
[  890.437411][ T1008] team0 (unregistering): Port device team_slave_0 removed
[  890.523139][T16847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3106'.
[  890.540941][T16097] m920x_read = error: -19
[  890.552883][T16097] dvb-usb: error -19 while querying for an remote control event.
[  890.565351][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  890.565366][   T30] audit: type=1400 audit(1746266069.551:7402): avc:  denied  { append } for  pid=16846 comm="syz.4.3106" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  890.725246][    T9] m920x_read = error: -19
[  890.740559][    T9] dvb-usb: error -19 while querying for an remote control event.
[  890.913662][    T9] m920x_read = error: -19
[  890.918045][    T9] dvb-usb: error -19 while querying for an remote control event.
[  891.110682][    T9] m920x_read = error: -19
[  891.115059][    T9] dvb-usb: error -19 while querying for an remote control event.
[  891.520510][ T5818] Bluetooth: hci0: command tx timeout
[  892.154395][    T9] m920x_read = error: -19
[  892.159246][    T9] dvb-usb: error -19 while querying for an remote control event.
[  892.235953][T16877] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  892.320442][    T9] m920x_read = error: -19
[  892.324998][    T9] dvb-usb: error -19 while querying for an remote control event.
[  892.540955][    T9] m920x_read = error: -19
[  892.584920][    T9] dvb-usb: error -19 while querying for an remote control event.
[  892.870479][    T9] m920x_read = error: -19
[  892.956027][    T9] dvb-usb: error -19 while querying for an remote control event.
[  893.262931][T16097] m920x_read = error: -19
[  893.267316][T16097] dvb-usb: error -19 while querying for an remote control event.
[  893.392337][T16885] overlayfs: unescaped trailing colons in lowerdir mount option.
[  893.613084][T16889] 9pnet_fd: Insufficient options for proto=fd
[  893.987083][    T9] m920x_read = error: -19
[  893.992190][    T9] dvb-usb: error -19 while querying for an remote control event.
[  894.272573][    T9] m920x_read = error: -19
[  894.276937][    T9] dvb-usb: error -19 while querying for an remote control event.
[  894.441168][   T30] audit: type=1400 audit(1746266073.411:7403): avc:  denied  { write } for  pid=16899 comm="syz.5.3122" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  894.532606][ T1008] IPVS: stop unused estimator thread 0...
[  894.541638][    T9] m920x_read = error: -19
[  894.546117][    T9] dvb-usb: error -19 while querying for an remote control event.
[  894.554609][   T30] audit: type=1400 audit(1746266073.531:7404): avc:  denied  { setattr } for  pid=16902 comm="syz.3.3124" name="sctp" dev="proc" ino=4026534310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  894.833906][    T9] m920x_read = error: -19
[  894.841872][    T9] dvb-usb: error -19 while querying for an remote control event.
[  894.905917][   T30] audit: type=1400 audit(1746266073.531:7405): avc:  denied  { mount } for  pid=16902 comm="syz.3.3124" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  895.041524][    T9] m920x_read = error: -19
[  895.062099][    T9] dvb-usb: error -19 while querying for an remote control event.
[  895.109140][   T30] audit: type=1400 audit(1746266073.621:7406): avc:  denied  { unmount } for  pid=16313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  895.689367][    T9] m920x_read = error: -19
[  895.846062][    T9] dvb-usb: error -19 while querying for an remote control event.
[  896.090437][ T5897] m920x_read = error: -19
[  896.094816][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  896.205904][ T5867] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  896.274812][T16760] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  896.390446][ T5867] usb 5-1: Using ep0 maxpacket: 16
[  896.400103][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.724591][ T5897] m920x_read = error: -19
[  896.728978][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  896.769995][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  896.773252][T16760] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  896.780972][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  896.801944][ T5867] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  896.811263][ T5867] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  896.819304][ T5867] usb 5-1: Manufacturer: syz
[  896.832750][ T5867] usb 5-1: config 0 descriptor??
[  896.861011][T16760] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  896.888559][T16760] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  896.895697][ T5895] m920x_read = error: -19
[  896.900044][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  897.071004][    T9] m920x_read = error: -19
[  897.071031][    T9] dvb-usb: error -19 while querying for an remote control event.
[  897.248689][ T5897] m920x_read = error: -19
[  897.248748][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  897.314306][T16760] 8021q: adding VLAN 0 to HW filter on device bond0
[  897.410619][ T5897] m920x_read = error: -19
[  897.410645][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  897.448057][T16760] 8021q: adding VLAN 0 to HW filter on device team0
[  897.456598][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  897.464443][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  897.610439][    T9] m920x_read = error: -19
[  897.610464][    T9] dvb-usb: error -19 while querying for an remote control event.
[  897.650240][T16941] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  897.699025][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3126'.
[  897.761814][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  897.761862][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  897.770593][    T9] m920x_read = error: -19
[  897.770608][    T9] dvb-usb: error -19 while querying for an remote control event.
[  897.826481][T16943] vivid-003: =================  START STATUS  =================
[  897.826510][T16943] vivid-003: Radio HW Seek Mode: Bounded
[  897.826557][T16943] vivid-003: Radio Programmable HW Seek: false
[  897.826601][T16943] vivid-003: RDS Rx I/O Mode: Block I/O
[  897.826648][T16943] vivid-003: Generate RBDS Instead of RDS: false
[  897.826690][T16943] vivid-003: RDS Reception: true
[  897.826722][T16943] vivid-003: RDS Program Type: 0 inactive
[  897.826769][T16943] vivid-003: RDS PS Name:  inactive
[  897.826816][T16943] vivid-003: RDS Radio Text:  inactive
[  897.826862][T16943] vivid-003: RDS Traffic Announcement: false inactive
[  897.826909][T16943] vivid-003: RDS Traffic Program: false inactive
[  897.826958][T16943] vivid-003: RDS Music: false inactive
[  897.827006][T16943] vivid-003: ==================  END STATUS  ==================
[  897.889547][T16760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  897.940523][ T5897] m920x_read = error: -19
[  898.004725][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  898.170527][ T5897] m920x_read = error: -19
[  898.174910][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  898.580777][ T5895] m920x_read = error: -19
[  898.833534][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  899.138445][T16954] FAULT_INJECTION: forcing a failure.
[  899.138445][T16954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  899.160174][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.5.3137 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  899.160204][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  899.160215][T16954] Call Trace:
[  899.160222][T16954]  <TASK>
[  899.160229][T16954]  dump_stack_lvl+0x16c/0x1f0
[  899.160258][T16954]  should_fail_ex+0x512/0x640
[  899.160284][T16954]  _copy_from_user+0x2e/0xd0
[  899.160312][T16954]  do_ip_vs_set_ctl+0xdfa/0x11d0
[  899.160333][T16954]  ? __lock_acquire+0xaa4/0x1ba0
[  899.160360][T16954]  ? __mutex_trylock_common+0xc0/0x250
[  899.160385][T16954]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  899.160405][T16954]  ? __pfx___mutex_trylock_common+0x10/0x10
[  899.160431][T16954]  ? __pfx___might_resched+0x10/0x10
[  899.160459][T16954]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  899.160478][T16954]  ? find_held_lock+0x2b/0x80
[  899.160499][T16954]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  899.160541][T16954]  ? nf_setsockopt+0x8a/0xf0
[  899.160557][T16954]  nf_setsockopt+0x8a/0xf0
[  899.160577][T16954]  ip_setsockopt+0xcb/0xf0
[  899.160601][T16954]  udp_setsockopt+0x7d/0xd0
[  899.160621][T16954]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  899.160642][T16954]  do_sock_setsockopt+0x221/0x470
[  899.160661][T16954]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  899.160695][T16954]  __sys_setsockopt+0x1a0/0x230
[  899.160723][T16954]  __x64_sys_setsockopt+0xbd/0x160
[  899.160748][T16954]  ? syscall_trace_enter+0xee/0x260
[  899.160766][T16954]  do_syscall_64+0xcd/0x260
[  899.160790][T16954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.160807][T16954] RIP: 0033:0x7fc960f8e969
[  899.160822][T16954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  899.160839][T16954] RSP: 002b:00007fc961e23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  899.160856][T16954] RAX: ffffffffffffffda RBX: 00007fc9611b5fa0 RCX: 00007fc960f8e969
[  899.160867][T16954] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000003
[  899.160878][T16954] RBP: 00007fc961e23090 R08: 000000000000000c R09: 0000000000000000
[  899.160888][T16954] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  899.160898][T16954] R13: 0000000000000000 R14: 00007fc9611b5fa0 R15: 00007ffdd3fc71e8
[  899.160920][T16954]  </TASK>
[  899.394194][ T5895] m920x_read = error: -19
[  899.398595][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  899.556942][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.564557][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.572200][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.579622][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.587102][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.594617][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.602084][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.609505][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.616952][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.624497][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.633075][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.647745][    T9] m920x_read = error: -19
[  899.657376][    T9] dvb-usb: error -19 while querying for an remote control event.
[  899.703071][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.745564][T16960] tipc: Can't bind to reserved service type 0
[  899.757848][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  899.780454][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  900.032774][    T9] m920x_read = error: -19
[  900.037603][    T9] dvb-usb: error -19 while querying for an remote control event.
[  900.068655][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  900.099904][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  900.107909][T16097] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  900.129413][ T5895] hid-generic C990:0003:007F.004F: unknown main item tag 0x0
[  900.178642][ T5895] hid-generic C990:0003:007F.004F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  900.198331][T16760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  900.251055][ T5895] m920x_read = error: -19
[  900.255465][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  900.280631][T16097] usb 2-1: Using ep0 maxpacket: 8
[  900.292029][T16097] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  900.302413][T16760] veth0_vlan: entered promiscuous mode
[  900.308718][T16097] usb 2-1: config 0 has no interface number 0
[  900.327612][T16760] veth1_vlan: entered promiscuous mode
[  900.334005][T16097] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  900.358714][T16097] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  900.379283][T16760] veth0_macvtap: entered promiscuous mode
[  900.385734][T16097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.399354][T16760] veth1_macvtap: entered promiscuous mode
[  900.406467][T16097] usb 2-1: config 0 descriptor??
[  900.418823][T16097] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  900.429865][ T5895] m920x_read = error: -19
[  900.435331][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  900.476071][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.534755][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.555867][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.709531][   T30] audit: type=1400 audit(1746266079.691:7407): avc:  denied  { listen } for  pid=16970 comm="syz.5.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  900.743276][T16097] m920x_read = error: -19
[  900.793898][T16097] dvb-usb: error -19 while querying for an remote control event.
[  900.803756][ T5895] usb 2-1: USB disconnect, device number 106
[  900.930121][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.940190][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.951232][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.987795][T16760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  901.033194][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  901.046861][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  901.059379][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  901.072276][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  901.088754][T16760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  901.100603][T16760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  901.100851][ T5895] m920x_read = error: -19
[  901.279793][T16760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  901.334193][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  901.339164][T16760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  901.391154][T16760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  901.400001][T16760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  901.413972][T16760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  901.511001][    T9] m920x_read = error: -19
[  901.515829][    T9] dvb-usb: error -19 while querying for an remote control event.
[  901.527335][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.542874][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.579118][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.587561][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.598317][ T5867] usb 5-1: USB disconnect, device number 108
[  901.610554][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  901.735797][T16097] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  901.746625][    T9] m920x_read = error: -19
[  901.751760][    T9] dvb-usb: error -19 while querying for an remote control event.
[  901.968365][    T9] m920x_read = error: -19
[  902.082130][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  902.100520][    T9] dvb-usb: error -19 while querying for an remote control event.
[  902.756546][T16097] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  902.774659][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  902.786102][T16097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  902.799532][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  902.811918][T16097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  902.823396][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  902.836842][T16097] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  902.850148][ T5895] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  902.863467][T16984] binder: 16983:16984 ioctl 40086408 200000000000 returned -22
[  902.864324][T16097] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  902.880679][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.894437][T16097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.911576][ T5895] usb 6-1: config 0 descriptor??
[  902.920820][T16097] usb 4-1: config 0 descriptor??
[  902.926380][T16980] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  902.926777][T16978] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  902.940824][ T5897] m920x_read = error: -19
[  902.947078][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  903.011444][ T5867] libceph: connect (1)[c::]:6789 error -101
[  903.020158][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  903.060154][ T5867] libceph: connect (1)[c::]:6789 error -101
[  903.066377][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  903.131623][ T5897] m920x_read = error: -19
[  903.136033][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  903.165903][T17005] vlan2: entered promiscuous mode
[  903.172060][T17005] veth0_virt_wifi: entered promiscuous mode
[  903.190503][T17005] vlan2: entered allmulticast mode
[  903.200429][T17005] veth0_virt_wifi: entered allmulticast mode
[  903.308794][ T5867] libceph: connect (1)[c::]:6789 error -101
[  903.320595][ T5897] m920x_read = error: -19
[  903.324993][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  903.352270][T17012] netlink: 'syz.1.3153': attribute type 9 has an invalid length.
[  903.360149][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'.
[  903.386747][T17012] hsr0: entered promiscuous mode
[  903.400975][T17012] macvlan2: entered promiscuous mode
[  903.406552][T17012] macvlan2: entered allmulticast mode
[  903.437482][T17012] hsr0: entered allmulticast mode
[  903.456601][T17012] hsr_slave_0: entered allmulticast mode
[  903.463529][T17012] hsr_slave_1: entered allmulticast mode
[  903.495926][T16097] plantronics 0003:047F:FFFF.0051: reserved main item tag 0xd
[  903.503663][T16772] m920x_read = error: -19
[  903.508021][T16772] dvb-usb: error -19 while querying for an remote control event.
[  903.516651][ T5895] plantronics 0003:047F:FFFF.0050: reserved main item tag 0xd
[  903.536196][T16097] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving
[  903.546912][ T5895] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving
[  903.584347][T16097] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  903.603588][ T5895] plantronics 0003:047F:FFFF.0050: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  903.673851][T17000] ceph: No mds server is up or the cluster is laggy
[  903.674004][T16995] ceph: No mds server is up or the cluster is laggy
[  903.690577][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  903.697070][ T5867] libceph: connect (1)[c::]:6789 error -101
[  903.703933][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  903.710496][ T5895] m920x_read = error: -19
[  903.750768][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  903.817925][T17016] binder: 16977:17016 ioctl 4018620d 0 returned -22
[  903.869439][T17017] binder: 16979:17017 ioctl 4018620d 0 returned -22
[  903.877740][T17017] binder: 16979:17017 ioctl 40605346 200000000640 returned -22
[  903.968840][ T5897] m920x_read = error: -19
[  904.053926][ T5897] dvb-usb: error -19 while querying for an remote control event.
[  904.341081][ T5895] m920x_read = error: -19
[  904.345476][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  904.510659][ T5895] m920x_read = error: -19
[  904.519401][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  904.539207][   T30] audit: type=1400 audit(1746266083.521:7408): avc:  denied  { map } for  pid=17025 comm="syz.1.3157" path="/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  904.565415][   T30] audit: type=1400 audit(1746266083.521:7409): avc:  denied  { execute } for  pid=17025 comm="syz.1.3157" path="/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  904.599517][T17028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'.
[  904.609126][T17028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'.
[  904.620201][T17028] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  904.657710][T17028] veth0_macvtap: left promiscuous mode
[  904.664029][T17028] macvtap0: entered promiscuous mode
[  904.683270][T17028] veth0_macvtap: entered promiscuous mode
[  904.691136][ T5895] m920x_read = error: -19
[  904.698950][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  904.719500][T17028] team0: Device macvtap0 failed to register rx_handler
[  904.733425][ T5895] usb 6-1: USB disconnect, device number 11
[  904.752365][T17028] veth0_macvtap: left promiscuous mode
[  904.927100][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  904.935713][    T9] m920x_read = error: -19
[  904.940134][    T9] dvb-usb: error -19 while querying for an remote control event.
[  905.044951][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.221836][ T5895] m920x_read = error: -19
[  905.226330][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  905.235115][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.244638][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.253355][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.261827][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.269215][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.276682][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.284318][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.291865][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.299367][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.306850][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.316973][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.324445][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.419390][    T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  905.429498][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.476233][ T5895] m920x_read = error: -19
[  905.481743][ T5895] dvb-usb: error -19 while querying for an remote control event.
[  905.490185][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.501052][ T5897] hid-generic C990:0003:007F.0052: unknown main item tag 0x0
[  905.642246][    T9] usb 2-1: Using ep0 maxpacket: 8
[  905.685015][T16772] usb 4-1: USB disconnect, device number 117
[  905.774764][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  905.850005][    T9] usb 2-1: config 0 has no interface number 0
[  905.858994][T16097] m920x_read = error: -19
[  905.905300][T16097] dvb-usb: error -19 while querying for an remote control event.
[  906.023595][ T5897] hid-generic C990:0003:007F.0052: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  906.033650][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  906.058425][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  906.067766][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.081786][    T9] usb 2-1: config 0 descriptor??
[  906.088134][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3160'.
[  906.107182][    T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  906.111464][T17040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3161'.
[  906.133799][T17038] netlink: 'syz.5.3160': attribute type 30 has an invalid length.
[  906.156740][T17040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3161'.
[  906.166968][T17040] ==================================================================
[  906.175030][T17040] BUG: KASAN: global-out-of-bounds in fib6_ifup+0x257/0x2a0
[  906.182297][T17040] Read of size 8 at addr ffffffff9af98530 by task syz.3.3161/17040
[  906.190158][T17040] 
[  906.192464][T17040] CPU: 1 UID: 0 PID: 17040 Comm: syz.3.3161 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  906.192479][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  906.192487][T17040] Call Trace:
[  906.192491][T17040]  <TASK>
[  906.192496][T17040]  dump_stack_lvl+0x116/0x1f0
[  906.192514][T17040]  print_report+0xc3/0x670
[  906.192526][T17040]  ? __virt_addr_valid+0x5e/0x590
[  906.192542][T17040]  ? __phys_addr+0xc6/0x150
[  906.192558][T17040]  ? fib6_ifup+0x257/0x2a0
[  906.192569][T17040]  kasan_report+0xe0/0x110
[  906.192579][T17040]  ? fib6_ifup+0x257/0x2a0
[  906.192590][T17040]  fib6_ifup+0x257/0x2a0
[  906.192599][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.192609][T17040]  fib6_clean_node+0x2a4/0x5b0
[  906.192621][T17040]  ? __pfx_fib6_clean_node+0x10/0x10
[  906.192635][T17040]  fib6_walk_continue+0x44f/0x8d0
[  906.192653][T17040]  fib6_walk+0x182/0x370
[  906.192668][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.192677][T17040]  fib6_clean_tree+0xd4/0x110
[  906.192692][T17040]  ? __pfx_fib6_clean_tree+0x10/0x10
[  906.192708][T17040]  ? __pfx_fib6_clean_node+0x10/0x10
[  906.192718][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.192730][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.192739][T17040]  __fib6_clean_all+0x107/0x2d0
[  906.192756][T17040]  rt6_sync_up+0xc9/0x170
[  906.192769][T17040]  ? __pfx_rt6_sync_up+0x10/0x10
[  906.192784][T17040]  addrconf_notify+0x1709/0x19e0
[  906.192796][T17040]  ? ip6mr_device_event+0x1bc/0x230
[  906.192809][T17040]  ? tls_dev_event+0xfd/0x10b0
[  906.192826][T17040]  notifier_call_chain+0xb9/0x410
[  906.192841][T17040]  ? __pfx_addrconf_notify+0x10/0x10
[  906.192854][T17040]  call_netdevice_notifiers_info+0xbe/0x140
[  906.192869][T17040]  netif_state_change+0x165/0x3b0
[  906.192882][T17040]  ? __pfx_netif_state_change+0x10/0x10
[  906.192895][T17040]  ? do_setlink.constprop.0+0x2edf/0x44b0
[  906.192907][T17040]  do_setlink.constprop.0+0x35ba/0x44b0
[  906.192920][T17040]  ? __lock_acquire+0xaa4/0x1ba0
[  906.192940][T17040]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  906.192952][T17040]  ? __mutex_trylock_common+0xe9/0x250
[  906.192969][T17040]  ? __pfx___mutex_trylock_common+0x10/0x10
[  906.192986][T17040]  ? __pfx___might_resched+0x10/0x10
[  906.193000][T17040]  ? rcu_is_watching+0x12/0xc0
[  906.193012][T17040]  ? trace_contention_end+0xdd/0x130
[  906.193028][T17040]  ? __mutex_lock+0x1ca/0xb90
[  906.193042][T17040]  ? rtnl_newlink+0x600/0x2000
[  906.193053][T17040]  ? __pfx___mutex_lock+0x10/0x10
[  906.193066][T17040]  ? cap_capable+0xb3/0x250
[  906.193080][T17040]  ? netlink_ns_capable+0xfa/0x130
[  906.193091][T17040]  rtnl_newlink+0x1446/0x2000
[  906.193103][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  906.193113][T17040]  ? find_held_lock+0x2b/0x80
[  906.193125][T17040]  ? avc_has_perm_noaudit+0x117/0x3b0
[  906.193143][T17040]  ? avc_has_perm_noaudit+0x149/0x3b0
[  906.193161][T17040]  ? __lock_acquire+0x5ca/0x1ba0
[  906.193180][T17040]  ? find_held_lock+0x2b/0x80
[  906.193191][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  906.193201][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  906.193211][T17040]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  906.193222][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  906.193232][T17040]  rtnetlink_rcv_msg+0x95b/0xe90
[  906.193243][T17040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  906.193258][T17040]  netlink_rcv_skb+0x16a/0x440
[  906.193269][T17040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  906.193280][T17040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  906.193295][T17040]  ? netlink_deliver_tap+0x1ae/0xd30
[  906.193307][T17040]  netlink_unicast+0x53a/0x7f0
[  906.193319][T17040]  ? __pfx_netlink_unicast+0x10/0x10
[  906.193332][T17040]  netlink_sendmsg+0x8d1/0xdd0
[  906.193345][T17040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  906.193359][T17040]  ____sys_sendmsg+0xa95/0xc70
[  906.193372][T17040]  ? copy_msghdr_from_user+0x10a/0x160
[  906.193382][T17040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  906.193398][T17040]  ___sys_sendmsg+0x134/0x1d0
[  906.193407][T17040]  ? __pfx____sys_sendmsg+0x10/0x10
[  906.193424][T17040]  __sys_sendmsg+0x16d/0x220
[  906.193434][T17040]  ? __pfx___sys_sendmsg+0x10/0x10
[  906.193444][T17040]  ? __x64_sys_futex+0x1e0/0x4c0
[  906.193460][T17040]  ? rcu_is_watching+0x12/0xc0
[  906.193473][T17040]  do_syscall_64+0xcd/0x260
[  906.193488][T17040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.193500][T17040] RIP: 0033:0x7f139cd8e969
[  906.193510][T17040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  906.193522][T17040] RSP: 002b:00007f139dcb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  906.193533][T17040] RAX: ffffffffffffffda RBX: 00007f139cfb5fa0 RCX: 00007f139cd8e969
[  906.193541][T17040] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  906.193548][T17040] RBP: 00007f139ce10ab1 R08: 0000000000000000 R09: 0000000000000000
[  906.193554][T17040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.193561][T17040] R13: 0000000000000000 R14: 00007f139cfb5fa0 R15: 00007fffed6587f8
[  906.193571][T17040]  </TASK>
[  906.193575][T17040] 
[  906.230760][    T9] m920x_read = error: -19
[  906.230804][T17040] The buggy address belongs to the variable:
[  906.687267][T17040]  __key.0+0x30/0x40
[  906.691158][T17040] 
[  906.693463][T17040] The buggy address belongs to the physical page:
[  906.699848][T17040] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af98
[  906.708588][T17040] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  906.716464][T17040] raw: 00fff00000002000 ffffea00006be608 ffffea00006be608 0000000000000000
[  906.725027][T17040] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  906.733584][T17040] page dumped because: kasan: bad access detected
[  906.739974][T17040] page_owner info is not present (never set?)
[  906.746015][T17040] 
[  906.748316][T17040] Memory state around the buggy address:
[  906.753922][T17040]  ffffffff9af98400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[  906.761967][T17040]  ffffffff9af98480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[  906.770008][T17040] >ffffffff9af98500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[  906.778045][T17040]                                      ^
[  906.783652][T17040]  ffffffff9af98580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9
[  906.791693][T17040]  ffffffff9af98600: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9
[  906.799733][T17040] ==================================================================
[  906.807895][T17040] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  906.815093][T17040] CPU: 1 UID: 0 PID: 17040 Comm: syz.3.3161 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  906.827150][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  906.837186][T17040] Call Trace:
[  906.840444][T17040]  <TASK>
[  906.843349][T17040]  dump_stack_lvl+0x3d/0x1f0
[  906.847920][T17040]  panic+0x71c/0x800
[  906.851799][T17040]  ? __pfx_panic+0x10/0x10
[  906.856193][T17040]  ? irqentry_exit+0x3b/0x90
[  906.860759][T17040]  ? lockdep_hardirqs_on+0x7c/0x110
[  906.865935][T17040]  ? fib6_ifup+0x257/0x2a0
[  906.870335][T17040]  ? fib6_ifup+0x257/0x2a0
[  906.874740][T17040]  check_panic_on_warn+0xab/0xb0
[  906.879656][T17040]  end_report+0x107/0x170
[  906.883961][T17040]  kasan_report+0xee/0x110
[  906.888348][T17040]  ? fib6_ifup+0x257/0x2a0
[  906.892739][T17040]  fib6_ifup+0x257/0x2a0
[  906.896964][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.901717][T17040]  fib6_clean_node+0x2a4/0x5b0
[  906.906454][T17040]  ? __pfx_fib6_clean_node+0x10/0x10
[  906.911726][T17040]  fib6_walk_continue+0x44f/0x8d0
[  906.916730][T17040]  fib6_walk+0x182/0x370
[  906.920965][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.925729][T17040]  fib6_clean_tree+0xd4/0x110
[  906.930417][T17040]  ? __pfx_fib6_clean_tree+0x10/0x10
[  906.935695][T17040]  ? __pfx_fib6_clean_node+0x10/0x10
[  906.940985][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.945732][T17040]  ? __pfx_fib6_ifup+0x10/0x10
[  906.950472][T17040]  __fib6_clean_all+0x107/0x2d0
[  906.955312][T17040]  rt6_sync_up+0xc9/0x170
[  906.959623][T17040]  ? __pfx_rt6_sync_up+0x10/0x10
[  906.964543][T17040]  addrconf_notify+0x1709/0x19e0
[  906.969458][T17040]  ? ip6mr_device_event+0x1bc/0x230
[  906.974640][T17040]  ? tls_dev_event+0xfd/0x10b0
[  906.979397][T17040]  notifier_call_chain+0xb9/0x410
[  906.984410][T17040]  ? __pfx_addrconf_notify+0x10/0x10
[  906.989685][T17040]  call_netdevice_notifiers_info+0xbe/0x140
[  906.995565][T17040]  netif_state_change+0x165/0x3b0
[  907.000575][T17040]  ? __pfx_netif_state_change+0x10/0x10
[  907.006109][T17040]  ? do_setlink.constprop.0+0x2edf/0x44b0
[  907.011813][T17040]  do_setlink.constprop.0+0x35ba/0x44b0
[  907.017343][T17040]  ? __lock_acquire+0xaa4/0x1ba0
[  907.022268][T17040]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  907.028158][T17040]  ? __mutex_trylock_common+0xe9/0x250
[  907.033605][T17040]  ? __pfx___mutex_trylock_common+0x10/0x10
[  907.039486][T17040]  ? __pfx___might_resched+0x10/0x10
[  907.044758][T17040]  ? rcu_is_watching+0x12/0xc0
[  907.049504][T17040]  ? trace_contention_end+0xdd/0x130
[  907.054777][T17040]  ? __mutex_lock+0x1ca/0xb90
[  907.059440][T17040]  ? rtnl_newlink+0x600/0x2000
[  907.064210][T17040]  ? __pfx___mutex_lock+0x10/0x10
[  907.069220][T17040]  ? cap_capable+0xb3/0x250
[  907.073720][T17040]  ? netlink_ns_capable+0xfa/0x130
[  907.078816][T17040]  rtnl_newlink+0x1446/0x2000
[  907.083478][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  907.088482][T17040]  ? find_held_lock+0x2b/0x80
[  907.093143][T17040]  ? avc_has_perm_noaudit+0x117/0x3b0
[  907.098511][T17040]  ? avc_has_perm_noaudit+0x149/0x3b0
[  907.103877][T17040]  ? __lock_acquire+0x5ca/0x1ba0
[  907.108808][T17040]  ? find_held_lock+0x2b/0x80
[  907.113466][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  907.118485][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  907.123504][T17040]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  907.128610][T17040]  ? __pfx_rtnl_newlink+0x10/0x10
[  907.133634][T17040]  rtnetlink_rcv_msg+0x95b/0xe90
[  907.138565][T17040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  907.144020][T17040]  netlink_rcv_skb+0x16a/0x440
[  907.148768][T17040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  907.154209][T17040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  907.159480][T17040]  ? netlink_deliver_tap+0x1ae/0xd30
[  907.164746][T17040]  netlink_unicast+0x53a/0x7f0
[  907.169506][T17040]  ? __pfx_netlink_unicast+0x10/0x10
[  907.174796][T17040]  netlink_sendmsg+0x8d1/0xdd0
[  907.179561][T17040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  907.184846][T17040]  ____sys_sendmsg+0xa95/0xc70
[  907.189676][T17040]  ? copy_msghdr_from_user+0x10a/0x160
[  907.195127][T17040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  907.200404][T17040]  ___sys_sendmsg+0x134/0x1d0
[  907.205086][T17040]  ? __pfx____sys_sendmsg+0x10/0x10
[  907.210277][T17040]  __sys_sendmsg+0x16d/0x220
[  907.214867][T17040]  ? __pfx___sys_sendmsg+0x10/0x10
[  907.219961][T17040]  ? __x64_sys_futex+0x1e0/0x4c0
[  907.224892][T17040]  ? rcu_is_watching+0x12/0xc0
[  907.229641][T17040]  do_syscall_64+0xcd/0x260
[  907.234130][T17040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.240006][T17040] RIP: 0033:0x7f139cd8e969
[  907.244405][T17040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  907.263996][T17040] RSP: 002b:00007f139dcb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  907.272389][T17040] RAX: ffffffffffffffda RBX: 00007f139cfb5fa0 RCX: 00007f139cd8e969
[  907.280343][T17040] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  907.288306][T17040] RBP: 00007f139ce10ab1 R08: 0000000000000000 R09: 0000000000000000
[  907.296257][T17040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  907.304210][T17040] R13: 0000000000000000 R14: 00007f139cfb5fa0 R15: 00007fffed6587f8
[  907.312171][T17040]  </TASK>
[  907.315380][T17040] Kernel Offset: disabled
[  907.319680][T17040] Rebooting in 86400 seconds..