last executing test programs:

2m10.51323701s ago: executing program 2 (id=21):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000190001000000fff7ff01001b2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f00000000c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r5)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x1})
ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000000)={'team_slave_1\x00', 0x540d})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="030000000a0001000180c2000000000008000f0001"], 0x30}}, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
syz_emit_ethernet(0xea, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x21, 0x4, 0x0, 0x0, 0xdc, 0x0, 0x0, 0xa5, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x18, 0xa5, 0x0, 0x1, [0xf, 0xf9d, 0x6, 0x2e, 0x2]}, @ssrr={0x89, 0x7, 0x84, [@multicast2]}, @lsrr={0x83, 0x1b, 0x6f, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, @local, @remote]}, @ssrr={0x89, 0x1b, 0xcf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @multicast1, @broadcast, @multicast1]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x11, "35d129d7aa8f57585aa0fc1ac1c281"}, @noop]}}, {0x4e21, 0x4e20, 0x58, 0x0, @wg=@data={0x4, 0x224, 0x1000, "b9112e1c20667412c894edd9996daf080af8a83a9a81028be16713c3069bd283abb690f19346f4efe4e032e7244e9cce9123fd1ea58a9e433c73f59fff3c758b"}}}}}}, 0x0)

2m10.134635828s ago: executing program 2 (id=23):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000e00000000100000000cc9dc53eb3a795c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1400}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xd, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="000048ff00"/14, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r4, 0x3, 0x6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100008400100000000000000300000005000000006161"], &(0x7f0000000100)=""/226, 0x34, 0xe2, 0x8, 0xdd6}, 0x28)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @main=@item_012={0x1, 0x0, 0x9, "c5"}]}}, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x2}}}, 0x24}}, 0x20000000)

2m5.642788771s ago: executing program 2 (id=34):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffffc, 0x234, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000000)=<r5=>0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r7, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90)
sendmmsg$inet(r6, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14e2d6d65ce5575d5f8e79705c5777b1c4553f79291f8ba6b506334d0720fb2a758ed9bbf4f562dea8f8d0a4009ccd8497e0b4b0d06be7b4f9c81049f7f208d20bb7061438ae3f9bd923352402bf505f97fad8a5c90e09ecb34879a2a940d0c4cc9976e6fa80e5d4ffad", 0x6a}, {&(0x7f0000000140)="20a0491008c05b116a3251dc1dc4d218940d01e4a7cc86040763ac9730bbaf11f914b76a08d49d1a5164800449cd5b9c774076f89bbf283fcaff5bee4cb0a5e793f563134de312073a1299776bd9a948b2f8c96f86432d9734492142d93b6c570e2af7614caff612b006a86c4e52661ecde73610ab130232e1a5b0c6b42ea817dafb432a0b13d0ad32ecd614d2df320bed90c9219fb3b315d8538bb8cdefc8a83c20cadef456dac3ab283f7ddc8742d85d42df82afeb97e991cc2ad053c144aec8ba55474a9c332bf5bc5aa8a0cc942ab716d831b9df2c57cf05e024bb62d04ad435be", 0xe3}, {&(0x7f0000000240)="06d67c2d4a6fc605700c96b546ab819d515bea9dc1a112f72b6a1f3e63029df1005da1c101e8a9f7c53d5f1dde8261c3cbaefe76f3fe55b3b12d764250f22f17c8e290f47e71a7e1b8236f2996950758713b729894ed7cb11970e662551698fb5cd8824fa239811e1f9871b59ce58eadf4f4f1987b02f40e4f0e6c75", 0x7c}], 0x3, &(0x7f0000001480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000031c0)="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", 0xe10}], 0x1}}], 0x2, 0x8005)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x10000, 0x10}, &(0x7f0000000700)=<r9=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r9, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

2m3.428830309s ago: executing program 2 (id=42):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x125102, 0x0)
close_range(r1, r1, 0x0)

2m3.10872064s ago: executing program 2 (id=46):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500))

2m2.468066568s ago: executing program 1 (id=47):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x5, 0x1, 0x100, 0x150c4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$FUSE_BMAP(r4, &(0x7f0000000880)={0x18, 0x0, 0x0, {0xb}}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0, <r6=>0xffffffffffffffff}, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0xc0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000003c0)=""/180)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000380)='GPL\x00', 0x401, 0xc9, &(0x7f00000004c0)=""/201, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d06e, r1, 0x5, &(0x7f0000000700)=[r2, r3, r4, r5, r6], &(0x7f0000000740)=[{0x3, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xe, 0x4}, {0x2, 0x3, 0x1, 0x3}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m2.326875791s ago: executing program 2 (id=48):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x300000000000000)

2m2.045465s ago: executing program 0 (id=51):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000160029062abd7000ffdbdf2500000000000000000000ffffffffffffac1414aa0000000000000000000000004e22d64c4e2300040200200073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414bb00000000000000000000000001040000000000000d000000000000000200000003000000ffff000000000000040000000000000006000000000000000000000000000000faffffffffffffff54450000001400000000000000000000ffffffffffffffff00100000000038c50500000008000000030000002abd7000000000000a0003df1400ffffffffffff00000000060000000c9fb373ecfca8195d0b7a733c613fbf975903c42105467b221f0fab046de14a2bc263"], 0xf8}}, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)

2m1.860565227s ago: executing program 0 (id=53):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000000feffb3920000000200000000002095baf58552a71b69ec5d"], 0x0, 0x1a, 0x0, 0x100, 0x0, 0x10000, @value=r1}, 0x2d)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x103901)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), 0x1000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = socket$netlink(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0x8000003, 0xffffffff}, 0x10)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x38}}, 0x0)
syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}]})

2m0.901777628s ago: executing program 0 (id=54):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x15, 0xe, 0x79, &(0x7f0000000d00)})
syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
write$uinput_user_dev(r2, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000340)="b64424", &(0x7f0000000240)=@udp6=r3, 0x1}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000900fffffffffddbdf250200040080000000000000000000000000005c9019ca377441f7cfc91c9cfafc25e90e3f6a415704ce18cef50725af"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000480)=0xe)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="03000000040000000400005c8978fac8", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="03000000010000000200"/28], 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents(r5, &(0x7f0000002000)=""/4096, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd0af4adf700102c00fe800000000000000000000000000000ff0200000000000000000000000000013c"], 0x0)
socket$kcm(0x10, 0x2, 0x10)

1m59.876660893s ago: executing program 0 (id=56):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x161183, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0xee00, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000300)=0x3, 0x4)

1m59.431589888s ago: executing program 1 (id=57):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="d7", 0x1, <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000300)=0xfffffffd)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x81, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000340)={r2})
finit_module(r1, &(0x7f00000000c0)=',.-:{\x00', 0x1)

1m59.23997999s ago: executing program 0 (id=59):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500))

1m58.41395646s ago: executing program 0 (id=62):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="d7", 0x1, <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000340)={r2})

1m58.341869949s ago: executing program 1 (id=63):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00')
getdents64(r0, &(0x7f0000000100)=""/45, 0x2d)
syz_clone3(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

1m57.269174655s ago: executing program 1 (id=65):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500))

1m56.981150119s ago: executing program 1 (id=67):
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0837e68f9a283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aafc01000000000000000000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x479af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x0, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x0, 0x9, 0xa, 0x4, 0x6, 0x5, 0x6, 0x3, 0x100006, 0x140000, 0x2000001, 0x1a448, 0x2, 0xc0100003, 0x5, 0x2, 0xf27, 0x20001e58, 0x6, 0xaa, 0x800, 0x8, 0x5, 0x3, 0x40000287]})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000380)={0xb, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/184, 0xb8}], &(0x7f0000000300)=[0x6, 0x7, 0x3296, 0x1, 0x9c3], 0x2}, 0x20)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_pidfd_open(0x0, 0x0)
preadv2(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/119, 0x77}, {&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000000880)=""/161, 0xa1}], 0x8, 0x9, 0x9, 0x16)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"dd0a6116b07b9f8b543563b09a93d1e329fce8db5b2ec4833b7329cec7622b33", 0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(r8, r9, 0x10, 0xd)
r10 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1)
name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="100000000542974ebd00000000000000"], &(0x7f0000000180), 0x0)

1m56.576496838s ago: executing program 1 (id=68):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r0}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, r3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x5, 0x1, 0x100, 0x150c4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$FUSE_BMAP(r6, &(0x7f0000000880)={0x18, 0x0, 0x0, {0xb}}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1, <r8=>0xffffffffffffffff}, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0xc0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000003c0)=""/180)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000380)='GPL\x00', 0x401, 0xc9, &(0x7f00000004c0)=""/201, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d06e, r2, 0x5, &(0x7f0000000700)=[r4, r5, r6, r7, r8], &(0x7f0000000740)=[{0x3, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xe, 0x4}, {0x2, 0x3, 0x1, 0x3}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m56.132297613s ago: executing program 32 (id=68):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r0}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, r3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x5, 0x1, 0x100, 0x150c4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$FUSE_BMAP(r6, &(0x7f0000000880)={0x18, 0x0, 0x0, {0xb}}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1, <r8=>0xffffffffffffffff}, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0xc0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000003c0)=""/180)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000380)='GPL\x00', 0x401, 0xc9, &(0x7f00000004c0)=""/201, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d06e, r2, 0x5, &(0x7f0000000700)=[r4, r5, r6, r7, r8], &(0x7f0000000740)=[{0x3, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xe, 0x4}, {0x2, 0x3, 0x1, 0x3}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m47.066227551s ago: executing program 33 (id=48):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x300000000000000)

1m43.15068476s ago: executing program 34 (id=62):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="d7", 0x1, <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000340)={r2})

1m16.287362093s ago: executing program 4 (id=160):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x1f400000, 0x1000, 0x1}})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x125102, 0x0)

1m16.066124557s ago: executing program 4 (id=162):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00')
getdents64(r0, &(0x7f0000000100)=""/45, 0x2d)
syz_clone3(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000f14000325bd7000fedbdf250d0045006f70615f76296e6963000000000c00450069625f7372707400080003000100000009004500756d6164000000000c00450072646d615f636d0007004500636d00000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000401}, 0x4080)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
get_robust_list(0x0, &(0x7f0000000300)=&(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)}}, &(0x7f0000000340)=0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
lseek(0xffffffffffffffff, 0xcbe, 0x0)
accept4$x25(r1, &(0x7f0000000180), &(0x7f0000000200)=0x12, 0x80000)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0x0)

1m15.008576008s ago: executing program 4 (id=164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000038a700000700000006"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x51, r0}, 0x38)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0)
semop(0x0, &(0x7f0000000100), 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f)
ftruncate(r5, 0x2007ffc)
sendfile(r4, r5, 0x0, 0x800000009)

1m12.366458754s ago: executing program 4 (id=170):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000b944d95288bf1033e7367500000000000000"])
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = syz_io_uring_setup(0x74d, &(0x7f0000000240)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10005}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e03fb0520"], 0x7)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r10 = dup(r9)
sendfile(r9, r10, 0x0, 0x80006)

1m10.276790952s ago: executing program 4 (id=175):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500))

1m9.748645978s ago: executing program 4 (id=178):
socket(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x4008050)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703f8ff00000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)

54.659149794s ago: executing program 35 (id=178):
socket(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x4008050)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703f8ff00000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)

16.179511976s ago: executing program 8 (id=337):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x240480c0}, 0x40)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r0, 0x4, r0}, 0x6)

15.808366955s ago: executing program 8 (id=339):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
r1 = timerfd_create(0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="f06b3401d6c160607b2137a613c485336db8ef7249621bd51b2d4cd9617129be0bc23bcd0a8a5b3acaae4dbe97fd9e37f37bf7ea5070977ed1e8926e6c2c9074e4746b16531f21e964eb33f3692db6017ff32c10f06a4478dd7089d45e2a5e2ee0433ebb47d351edf2d9f51e19f1dff33aae848508fd21681dbe8a65cbcb2513b702e0a0d17fe4f363085710fc27bfc9ea3e84d60834f3822ddfb766b48c468d1a470d79a8d07d9c91d6297a2dc402b9fba45c5a19f52a71eb6b4e6332b24d3bd0aeb94cabd468582c39836109", 0xcd}], 0x1)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020210f76800090501"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})

14.064287577s ago: executing program 5 (id=346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
mkdir(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r4 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400)
read$FUSE(r4, &(0x7f0000001c80)={0x2020}, 0x2020)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r9=>0x0, 0x29, 0x81, 0x0, 0xbfb, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8000, 0x80, 0x5, 0x7}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x1b0, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20040045}, 0x4000091)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30787dd12f9b23082468b495303030303030303030303030346532302c74696d656f75743d307830"])
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x8)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x84)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40002020)

13.143415692s ago: executing program 8 (id=351):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cgroup\x00', 0x8014, &(0x7f0000000480)='noxattr')
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x262181)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000005c0))
accept$unix(r1, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
write$sndseq(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "5b2ae6", 0x9, 0xc0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)

11.912606066s ago: executing program 5 (id=355):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x10001, 0x0, 0xfffffffc], [0x1, 0x10000000, 0x0, 0x0, 0xc000, 0x9, 0x4], [0x0, 0x5, 0x0, 0x1000, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{0x0, 0x3}, {}, {0xffffffff, 0x1}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0x2}, {0x4}, {0x9}, {0x0, 0x200000}, {0x161, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x100}}, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000b40), 0x100000000, 0x100)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000440), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xa, 0x6})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x8)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000340)={0x92, 0xfd5, 0x3, 0x4, 0x9b80})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0})

9.684769483s ago: executing program 3 (id=365):
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = creat(&(0x7f0000000240)='./file2\x00', 0x181)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x1, 0x9, 0x1, 0x2}})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0xf00000000000000, 0x865}, 0x2404c880)
sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01112abd7000fddbdf3a7a45a5ceb134151f00dc32a0b219d4775e1232eb81533c104a8b1e34"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

9.241430537s ago: executing program 7 (id=366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a820008100400086dd6700ffbf00303a0000000000000000000000ffffac1414aafe8000000000000000000000200000aa04"], 0x0)

8.097735964s ago: executing program 6 (id=367):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900", @ANYRESDEC], 0xe0}}, 0x20000000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fstat(r2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async)
lsetxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x3) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]})

7.924709288s ago: executing program 3 (id=368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2f10000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000680)="668995da8b9413350fff9ffc047c", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.854489656s ago: executing program 7 (id=369):
socket(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x4008050)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300f8ff000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)

7.574706895s ago: executing program 3 (id=370):
r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0xc000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2)
ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f00000000c0))
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0x7041, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000003e40)=[{0x7, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/143, 0x8f}], &(0x7f00000002c0)=[0xc, 0xffffffffffffffdf, 0x3, 0x4, 0x7, 0x9bcd, 0xa, 0x5]}, {0x3, 0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001700)=""/105, 0x69}, {&(0x7f0000001780)=""/140, 0x8c}, {&(0x7f0000001840)=""/4096, 0x1000}], &(0x7f0000002880)=[0x86, 0x8001, 0x4, 0x6, 0x4, 0x7, 0x10, 0x0, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/183, 0xb7}], &(0x7f0000003a00)=[0x4, 0x6, 0xd2, 0x1, 0xc]}, {0x3, 0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003a40)=""/224, 0xe0}, {&(0x7f0000003b40)=""/141, 0x8d}, {&(0x7f0000003c00)=""/17, 0x11}], &(0x7f0000003c80)=[0x6, 0xfffffffffffffffd, 0x80000001, 0x7, 0xa4d, 0xffffffff, 0x5d, 0x4]}, {0x1, 0x1, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)=""/196, 0xc4}], &(0x7f0000003e00)=[0x9, 0x0]}], 0x5)

7.512529675s ago: executing program 5 (id=371):
r0 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x1, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x104, 0x6, 0x0, 0x100000000400, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0x80000800, 0x81, 0x10, 0x7, 0x9, 0x7]})
poll(&(0x7f0000000380)=[{r3, 0x4000}], 0x1, 0x9)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000003c0)="060000004d90", 0x6)

6.688847846s ago: executing program 7 (id=372):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0x480}}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.58570889s ago: executing program 7 (id=373):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000300), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x4, 0x4002)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0), 0x2)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0xb, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffff9, 0x0, 0x8, 0x0})
setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000240), 0x4)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x3dc, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x9, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})

5.767705856s ago: executing program 8 (id=374):
r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0xfff5, 0x0}], 0x1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600), 0xfec8)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840)}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0xfffffffffffffffe)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
setrlimit(0x3, &(0x7f0000000000)={0xfffffffffffff829, 0x3})
read(r5, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

5.676728519s ago: executing program 6 (id=375):
openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = creat(&(0x7f0000000240)='./file2\x00', 0xe0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x1, 0x9, 0x1, 0x2}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
pselect6(0x40, &(0x7f0000000180)={0x4, 0x4, 0x1, 0xda, 0x1, 0xfffffffffffffffc, 0x8, 0xff65}, &(0x7f0000000280)={0x5, 0x3, 0x2, 0x1, 0xc, 0x8, 0x5, 0x5}, &(0x7f0000000480)={0x3, 0x3, 0x5, 0x0, 0x1, 0x9, 0x4, 0x24f3}, &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x3]}, 0x8})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x200080f8}, 0x2404c890)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01112abd7000fddbdf3a7a45a5ceb134151f00dc32a0b219d4775e1232eb81533c104a8b1e34"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

5.445353042s ago: executing program 7 (id=376):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$sndctrl(0x0, 0x7, 0x4c00)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x3c}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000000c0)={0x6, 0x6, 0x4, 0xffffffff, 'syz1\x00', 0x4})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0xe, 0x7, 0xfa, '\x00', 0x0, 0x9})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000580)=0x4, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timerfd_create(0x0, 0x0)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f00000003c0)=ANY=[])

4.32514714s ago: executing program 8 (id=377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104000000000000efff0a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.253553266s ago: executing program 3 (id=378):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000640)="07000000010001", 0x7)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100000000807bdbdf250a8080fd000004"], 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
read$msr(r5, &(0x7f0000019380)=""/102400, 0x19000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024)
read$FUSE(0xffffffffffffffff, &(0x7f0000005dc0)={0x2020}, 0x2020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000"], 0x58}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r8], 0x1c}}, 0x0)

4.25080252s ago: executing program 6 (id=379):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={<r6=>0x0, 0xfffe, 0x4}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x101, 0x5, 0x80000001, 0xfffffffa, 0x8}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000580)={r6, 0xffffffff, 0xdfd1, 0x0, 0x6, 0x7, 0x2400, 0x2, {r7, @in={{0x2, 0x4e22, @local}}, 0x0, 0x6, 0x101, 0x4039, 0x7}}, &(0x7f0000000240)=0xb0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f0000000700)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000140)="4401", 0x2}, {&(0x7f00000004c0)="1ca0c9120c66fe48fb8f9c3b747a7d146ae8ba9c7cf4a65e7650ee3a35b3f9230c0cb277468f20675f51512bdb08c356ecaf8f17240320", 0x37}, {&(0x7f0000003880)="673f47ecffa0931e47a2d733e7fbc5fe416b17450400000019f954db610e52b161430dd227163e54234db08c62c9e8ca8e033c9097881fa4a9cb2c6f7718ecf44c7e239197533337206481bc05ba7f915520fd88fc3b4b3b24c87c6b5e9c66542c52f0f72ea5a9abb6480cbcaf58bb4c3e644843a1040f409e6faec629010bab6dff34840450d44312189c1a045c3047c173d8ec1d20904c295edfadc83d96f9dba0dfdf352cbe104b36983c392fc6d659a80dd4a765632d8ecaeaed9ebf43dbc18e1819c1d2e8439d28dbbad53de4d5534a8c03429755e272f088b790d6429d607b8ee3644985", 0xe7}], 0x4)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$unix(0x1, 0x5, 0x0)

4.172581025s ago: executing program 5 (id=380):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, 0x0, 0x24000004)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioperm(0x0, 0x6, 0x2da3b9f3)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0x1000000, 0xff000000, 0x4, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

3.984957615s ago: executing program 8 (id=381):
socket$kcm(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdafc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f000052a000/0x2000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
socket$l2tp6(0xa, 0x2, 0x73)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000080)={0x1, 0xfffffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')

3.647108886s ago: executing program 3 (id=382):
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
syz_io_uring_complete(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0xfffffff9, 0x5a, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x0, 0x7800, 0x5, 0x2}})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r5], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20)
read(r0, &(0x7f0000001b00)=""/194, 0xc2)

2.820869507s ago: executing program 6 (id=383):
chroot(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40)

1.915798013s ago: executing program 5 (id=384):
r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0xfff5, 0x0}], 0x1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600), 0xfec8)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840)}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0xfffffffffffffffe, 0x4004050}, 0x0)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
setrlimit(0x3, &(0x7f0000000000)={0xfffffffffffff829, 0x3})
read(r5, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061119a000000000085000000600000009500001600000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

1.913468565s ago: executing program 3 (id=385):
syz_usb_connect(0x5, 0x76, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xf6, 0x43, 0xf7, 0x20, 0x46d, 0x900, 0x2a74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb6, 0x9, 0x0, 0x8a, 0x3b, 0xc4}}]}}]}}, 0x0) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x30, 0xc, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x45e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0xbc, 0x1}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0xbd, 0xf, 0x20, 0x75}, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "e318300012ee4def6d047b81f132eb18"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0xe, 0x5}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x2c, &(0x7f0000000100)=@string={0x2c, 0x3, "5e08aa504ae170dbf814191a83c72c3d9a33325bf7898653f82b85457f330cb102569d2d460d85b3e677"}}, {0x57, &(0x7f0000000140)=@string={0x57, 0x3, "6e7fb350c211461ee0c04cce05857cd93492ae9e957ac46cae648ed99b7e7cdd7286080897784fc731d46a9e5d5bba97de338fa94d6ebafb034bf9a7a4f880dd85820a03a69394db61f3b614279fce35bd3c44a9bc"}}, {0xd7, &(0x7f00000001c0)=@string={0xd7, 0x3, "344d9a015e517d1536047c3d58733b029576caf34ff60b34d6614ff424366d5a30607c73bc1f366aa382b55a1e1981f0c50a93f98871a14bab8ff4690c21d33549347c9236508fad8bf7430118fdfbd2f4c7a2ea8acf1e58a6fccf71c6228433972a461a6c4df6c8b1709b195b3b0e23b7c8b2c192944808c04775ace71091f2f728560f013dad63512a881754617b33389f17155190bd98094acc5a732d178cdf0661789bd252093214c8baeb5ce3d7ac9d02a30373f9d2707e057c32174ccde7a3e764f0222d95536b80629a0bf5e9363aff67c6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xb37c5dc161492f55}}, {0xc, &(0x7f0000000300)=@string={0xc, 0x3, "404e494fbe430812113d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x410}}, {0xae, &(0x7f0000000380)=@string={0xae, 0x3, "e282f8f063f623e9e0a3fe63b8700cb99a7796641dda040e97c1e947a58dc99e3c2d598410db356ad8fa7858dea90af29b0c8c0dbdfe8860b8f566af0b435bd7e987451883cf937df204be82e05f7f7af57709d559e9cf5a037143e97ca2fba314fe2d1ab415c65ad31be0bed315a4e78c0b944a78322f40702f3bb57844140d5ea583265802a2858cf63db0b3ba98be1b3059213d1681cc623a6a549ab55ad0ff1497013ab6d955fa6d917b"}}, {0x23, &(0x7f0000000480)=@string={0x23, 0x3, "560b3f8a3c36e5d132418dca7ed7b26875d812f1ab2fe281c8adb358bfa9ac1831"}}]})

1.893505629s ago: executing program 7 (id=386):
r0 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000008400000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.792724871s ago: executing program 6 (id=387):
r0 = socket$inet6(0xa, 0x3, 0x3c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2400c801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
pipe(&(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x40}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x300}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_pidfd_open(0x0, 0x0)
unshare(0x22020400)
r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x381000, 0x0)
mq_timedreceive(r4, 0x0, 0x0, 0xa, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, 0x0, 0x0)

94.013891ms ago: executing program 5 (id=388):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=389):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts.
[   87.645886][ T5822] cgroup: Unknown subsys name 'net'
[   87.796310][ T5822] cgroup: Unknown subsys name 'cpuset'
[   87.805840][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.434252][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.200291][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.209064][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.220309][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.228142][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.235755][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.243407][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.251505][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.272622][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.289225][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.296858][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.305531][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.314504][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.322515][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.330321][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.340928][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.350092][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.358048][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.359541][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.374546][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.388718][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.393471][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.403985][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.407394][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.418784][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.428654][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.145614][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   93.206549][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   93.220218][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   93.263472][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   93.409781][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   93.605854][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.614563][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.622576][ T5834] bridge_slave_0: entered allmulticast mode
[   93.630678][ T5834] bridge_slave_0: entered promiscuous mode
[   93.656974][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.664427][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.677351][ T5836] bridge_slave_0: entered allmulticast mode
[   93.685180][ T5836] bridge_slave_0: entered promiscuous mode
[   93.707534][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.715197][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.722980][ T5833] bridge_slave_0: entered allmulticast mode
[   93.730265][ T5833] bridge_slave_0: entered promiscuous mode
[   93.738159][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.745708][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.753951][ T5834] bridge_slave_1: entered allmulticast mode
[   93.761279][ T5834] bridge_slave_1: entered promiscuous mode
[   93.775677][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.783467][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.790717][ T5836] bridge_slave_1: entered allmulticast mode
[   93.799134][ T5836] bridge_slave_1: entered promiscuous mode
[   93.820140][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.827492][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.835086][ T5844] bridge_slave_0: entered allmulticast mode
[   93.843090][ T5844] bridge_slave_0: entered promiscuous mode
[   93.851940][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.859098][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.867155][ T5833] bridge_slave_1: entered allmulticast mode
[   93.874549][ T5833] bridge_slave_1: entered promiscuous mode
[   93.915432][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.922687][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.929885][ T5844] bridge_slave_1: entered allmulticast mode
[   93.937357][ T5844] bridge_slave_1: entered promiscuous mode
[   94.030538][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.045359][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.073043][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.086249][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.098991][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.112389][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.122172][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.129445][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.136763][ T5832] bridge_slave_0: entered allmulticast mode
[   94.144394][ T5832] bridge_slave_0: entered promiscuous mode
[   94.207043][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.214539][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.222837][ T5832] bridge_slave_1: entered allmulticast mode
[   94.230139][ T5832] bridge_slave_1: entered promiscuous mode
[   94.256030][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.308542][ T5836] team0: Port device team_slave_0 added
[   94.319049][ T5836] team0: Port device team_slave_1 added
[   94.327993][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.353903][ T5833] team0: Port device team_slave_0 added
[   94.378024][ T5834] team0: Port device team_slave_0 added
[   94.417351][ T5833] team0: Port device team_slave_1 added
[   94.426441][ T5844] team0: Port device team_slave_0 added
[   94.436146][ T5844] team0: Port device team_slave_1 added
[   94.444301][ T5834] team0: Port device team_slave_1 added
[   94.462569][ T5156] Bluetooth: hci0: command tx timeout
[   94.462636][   T51] Bluetooth: hci3: command tx timeout
[   94.468170][ T5848] Bluetooth: hci4: command tx timeout
[   94.473958][ T5847] Bluetooth: hci2: command tx timeout
[   94.480548][ T5839] Bluetooth: hci1: command tx timeout
[   94.495829][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.572097][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.584882][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.592430][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.618427][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.647927][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.654977][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.681213][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.709396][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.716681][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.743105][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.756307][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.764307][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.790876][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.803635][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.810621][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.836751][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.860555][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.867909][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.894542][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.906440][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.913926][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.940380][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.952356][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.959326][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.985381][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.073463][ T5832] team0: Port device team_slave_0 added
[   95.142888][ T5844] hsr_slave_0: entered promiscuous mode
[   95.149701][ T5844] hsr_slave_1: entered promiscuous mode
[   95.159137][ T5832] team0: Port device team_slave_1 added
[   95.197694][ T5836] hsr_slave_0: entered promiscuous mode
[   95.204832][ T5836] hsr_slave_1: entered promiscuous mode
[   95.211028][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.219837][ T5836] Cannot create hsr debugfs directory
[   95.260409][ T5834] hsr_slave_0: entered promiscuous mode
[   95.267155][ T5834] hsr_slave_1: entered promiscuous mode
[   95.273573][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.281241][ T5834] Cannot create hsr debugfs directory
[   95.352767][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.359776][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.385931][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.401039][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.408396][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.435850][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.456861][ T5833] hsr_slave_0: entered promiscuous mode
[   95.463753][ T5833] hsr_slave_1: entered promiscuous mode
[   95.470262][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.478340][ T5833] Cannot create hsr debugfs directory
[   95.794603][ T5832] hsr_slave_0: entered promiscuous mode
[   95.801140][ T5832] hsr_slave_1: entered promiscuous mode
[   95.808052][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.815704][ T5832] Cannot create hsr debugfs directory
[   96.150948][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.173605][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.195834][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.229326][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.308093][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.325581][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.336609][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.358305][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.415293][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.442728][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.470161][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.505221][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.541945][ T5839] Bluetooth: hci1: command tx timeout
[   96.543943][ T5848] Bluetooth: hci0: command tx timeout
[   96.547472][   T51] Bluetooth: hci2: command tx timeout
[   96.553286][ T5847] Bluetooth: hci4: command tx timeout
[   96.558830][ T5156] Bluetooth: hci3: command tx timeout
[   96.613933][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.627626][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.640221][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.651565][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.787959][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.800145][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.812887][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.824828][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.837021][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.898979][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   96.963562][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.971207][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.981260][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.988435][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.010378][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.053004][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   97.095757][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.102984][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.125062][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.132263][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.185470][    T9] cfg80211: failed to load regulatory.db
[   97.201573][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   97.212982][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.231129][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.319750][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.379932][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   97.429432][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.436648][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.461489][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   97.516822][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.535163][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.543067][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.555394][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.562682][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.604534][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.611848][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.685769][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   97.717074][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.749880][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.757141][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.810387][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.817947][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.972922][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.996896][ T5844] veth0_vlan: entered promiscuous mode
[   98.126704][ T5844] veth1_vlan: entered promiscuous mode
[   98.290944][ T5844] veth0_macvtap: entered promiscuous mode
[   98.328597][ T5844] veth1_macvtap: entered promiscuous mode
[   98.410514][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.508997][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.529545][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.549999][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.559827][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.574473][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.596267][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.628230][ T5156] Bluetooth: hci3: command tx timeout
[   98.628250][ T5839] Bluetooth: hci1: command tx timeout
[   98.628287][ T5839] Bluetooth: hci2: command tx timeout
[   98.633853][ T5156] Bluetooth: hci0: command tx timeout
[   98.639261][   T51] Bluetooth: hci4: command tx timeout
[   98.669412][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.786147][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.833111][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.841103][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.938788][ T5833] veth0_vlan: entered promiscuous mode
[   98.941713][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.953459][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.979230][ T5833] veth1_vlan: entered promiscuous mode
[   99.026121][ T5832] veth0_vlan: entered promiscuous mode
[   99.050732][ T5832] veth1_vlan: entered promiscuous mode
[   99.065726][ T5834] veth0_vlan: entered promiscuous mode
[   99.114858][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.147302][ T5833] veth0_macvtap: entered promiscuous mode
[   99.175961][ T5833] veth1_macvtap: entered promiscuous mode
[   99.190387][ T5836] veth0_vlan: entered promiscuous mode
[   99.214410][ T5834] veth1_vlan: entered promiscuous mode
[   99.241692][ T5836] veth1_vlan: entered promiscuous mode
[   99.263523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.541715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   99.845422][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.856942][ T5832] veth0_macvtap: entered promiscuous mode
[   99.889804][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.925447][ T5832] veth1_macvtap: entered promiscuous mode
[   99.947324][ T5836] veth0_macvtap: entered promiscuous mode
[   99.958722][ T5834] veth0_macvtap: entered promiscuous mode
[   99.970951][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.991750][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.001404][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.011837][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.027938][ T5836] veth1_macvtap: entered promiscuous mode
[  100.059683][ T5834] veth1_macvtap: entered promiscuous mode
[  100.085676][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.118256][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.140745][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.173712][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.182845][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.191569][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.201117][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.215051][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.228501][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.270055][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.286131][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.292559][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.298090][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.314344][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.323505][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.347159][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.358547][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.362946][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.375513][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.387033][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.396103][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.451932][ T5835] usb 2-1: Using ep0 maxpacket: 32
[  100.472276][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.488443][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.510184][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.522432][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.526841][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  100.563945][ T5835] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  100.577917][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.604750][ T5835] usb 2-1: config 0 descriptor??
[  100.666502][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.674604][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.702378][ T5839] Bluetooth: hci3: command tx timeout
[  100.707888][ T5839] Bluetooth: hci1: command tx timeout
[  100.709873][ T5156] Bluetooth: hci4: command tx timeout
[  100.714468][ T5839] Bluetooth: hci2: command tx timeout
[  100.724595][   T51] Bluetooth: hci0: command tx timeout
[  100.817494][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.837314][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.856032][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.866590][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.001395][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.028847][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.058012][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.108555][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.146182][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.162197][ T5968] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[  101.340639][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.410988][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.538097][ T5835] usbhid 2-1:0.0: can't add hid device: -71
[  101.601959][ T5835] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  101.716269][ T5835] usb 2-1: USB disconnect, device number 2
[  102.126084][ T5980] loop8: detected capacity change from 0 to 8
[  102.213019][ T5980] Dev loop8: unable to read RDB block 8
[  102.240818][ T5980]  loop8: unable to read partition table
[  102.308882][ T5980] loop8: partition table beyond EOD, truncated
[  102.324797][ T5980] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  103.270948][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[  103.736369][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.758249][ T6005] MPI: mpi too large (130952 bits)
[  103.920353][ T6005] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure
[  104.432217][  T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.541892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  105.567993][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[  105.582890][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  105.644319][ T6020] trusted_key: syz.1.13 sent an empty control message without MSG_MORE.
[  105.786699][ T6013] overlayfs: missing 'workdir'
[  106.269483][ T6027] bond_slave_0: entered promiscuous mode
[  106.275453][ T6027] bond_slave_1: entered promiscuous mode
[  106.313782][ T6027] vlan2: entered promiscuous mode
[  106.322608][ T6027] bond0: entered promiscuous mode
[  106.922331][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.007132][  T980] usb 1-1: device descriptor read/all, error -71
[  107.215409][ T6038] syz_tun: refused to change device tx_queue_len
[  107.750635][   T44] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  108.161907][ T5929] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  108.289910][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  108.391721][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  108.401194][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  108.784334][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.801895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  108.826416][   T44] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  108.842654][   T44] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  108.861945][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.882879][   T44] usb 4-1: config 0 descriptor??
[  108.925424][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  108.951878][ T5929] usb 3-1: device descriptor read/64, error -71
[  108.968749][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  109.000008][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  109.035995][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  109.051282][   T44] usb 4-1: media controller created
[  109.061443][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.125264][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  109.131211][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  109.196916][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  109.211872][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  109.220950][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.264252][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  109.292049][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  109.372375][ T5929] usb 3-1: device descriptor read/64, error -71
[  109.484128][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  109.490288][   T44] dvb-usb: error while querying for an remote control event.
[  109.563570][ T5929] usb usb3-port1: attempt power cycle
[  109.712869][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  109.719081][   T44] dvb-usb: error while querying for an remote control event.
[  109.892581][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  109.964418][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  110.041802][   T44] dvb-usb: error while querying for an remote control event.
[  110.052867][ T5929] usb 3-1: device descriptor read/8, error -71
[  110.139027][   T10] usb 4-1: USB disconnect, device number 2
[  110.303957][ T6073] fuse: Bad value for 'rootmode'
[  111.004141][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.209213][ T5929] usb 3-1: device descriptor read/8, error -71
[  111.399997][ T5929] usb usb3-port1: unable to enumerate USB device
[  111.420772][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  111.564758][ T6084] netlink: 92 bytes leftover after parsing attributes in process `syz.1.32'.
[  112.278618][ T6091] syz_tun: entered allmulticast mode
[  112.315265][ T6091] dvmrp8: entered allmulticast mode
[  113.369028][ T6090] syz_tun: left allmulticast mode
[  113.375075][ T6090] dvmrp8: left allmulticast mode
[  114.651176][ T6129] fuse: Bad value for 'fd'
[  114.670391][ T6129] 9pnet_fd: Insufficient options for proto=fd
[  114.964233][ T5961] IPVS: starting estimator thread 0...
[  115.042687][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  115.072367][ T6139] IPVS: using max 23 ests per chain, 55200 per kthread
[  115.227519][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.231935][ T5961] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  115.248705][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  115.294563][   T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  115.339916][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.477328][   T10] usb 2-1: config 0 descriptor??
[  115.478681][ T5961] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  115.488874][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  115.506513][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  115.507756][ T5961] usb 4-1: config 0 has no interface number 0
[  115.515408][ T6147] Zero length message leads to an empty skb
[  115.544489][ T5961] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[  115.591188][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.599268][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  115.682724][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  115.755369][ T5961] usb 4-1: config 0 descriptor??
[  115.817078][   T10] usb 2-1: media controller created
[  115.864137][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.906897][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  115.932238][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  116.017599][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  116.059715][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  116.080964][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  116.156823][ T5961] usb 4-1: USB disconnect, device number 3
[  116.231982][ T5835] dvb-usb: bulk message failed: -22 (1/0)
[  116.238968][ T5835] dvb-usb: error while querying for an remote control event.
[  116.434174][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  116.440299][   T10] dvb-usb: error while querying for an remote control event.
[  116.667426][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'.
[  116.831795][ T5835] dvb-usb: bulk message failed: -22 (1/0)
[  116.837604][ T5835] dvb-usb: error while querying for an remote control event.
[  116.845754][ T5929] usb 2-1: USB disconnect, device number 3
[  117.065020][ T5929] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  117.470515][ T6159] loop8: detected capacity change from 0 to 8
[  117.480993][ T6159] Dev loop8: unable to read RDB block 8
[  117.486764][ T6159]  loop8: unable to read partition table
[  117.492772][ T6159] loop8: partition table beyond EOD, truncated
[  117.499003][ T6159] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  117.947875][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'.
[  117.950627][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'.
[  118.035522][ T6170] fuse: Bad value for 'fd'
[  118.041270][ T6170] 9pnet_fd: Insufficient options for proto=fd
[  120.232059][ T5835] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  120.426435][ T5835] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  120.435348][ T5835] usb 4-1: config 0 has no interface number 0
[  120.445218][ T5835] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=bb.dc
[  120.471226][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.549505][ T5835] usb 4-1: config 0 descriptor??
[  120.604447][ T5835] ldusb 4-1:0.186: Interrupt in endpoint not found
[  120.652865][ T6124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.849756][ T6124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.991927][ T6124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.097429][ T6124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.374376][ T6124] bridge_slave_1: left allmulticast mode
[  121.391995][ T6124] bridge_slave_1: left promiscuous mode
[  121.413012][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.535975][ T6124] bridge_slave_0: left allmulticast mode
[  121.544812][ T6124] bridge_slave_0: left promiscuous mode
[  121.606073][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.769340][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.779157][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.788817][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.796976][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.805150][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.490121][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.514381][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.548222][ T6124] bond0 (unregistering): Released all slaves
[  122.570956][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[  122.675056][ T6202] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.684017][ T6202] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.692915][ T6202] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.701725][ T6202] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.790445][   T10] usb 4-1: USB disconnect, device number 4
[  123.886531][ T6124] hsr_slave_0: left promiscuous mode
[  123.896483][ T6124] hsr_slave_1: left promiscuous mode
[  123.903841][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.911485][   T51] Bluetooth: hci4: command tx timeout
[  123.911519][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.928222][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.939706][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.004568][ T6124] veth1_macvtap: left promiscuous mode
[  124.021923][ T6124] veth0_macvtap: left promiscuous mode
[  124.028741][ T6124] veth1_vlan: left promiscuous mode
[  124.039712][ T6124] veth0_vlan: left promiscuous mode
[  124.554850][ T6124] team0 (unregistering): Port device team_slave_1 removed
[  124.590570][ T6124] team0 (unregistering): Port device team_slave_0 removed
[  125.994840][   T51] Bluetooth: hci4: command tx timeout
[  126.079010][ T6247] process 'syz.4.78' launched './file0' with NULL argv: empty string added
[  126.190107][ T6195] chnl_net:caif_netlink_parms(): no params data found
[  126.602890][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.612908][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.621265][ T6195] bridge_slave_0: entered allmulticast mode
[  126.653158][ T6195] bridge_slave_0: entered promiscuous mode
[  126.664022][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.671247][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.681266][ T6195] bridge_slave_1: entered allmulticast mode
[  126.699128][ T6195] bridge_slave_1: entered promiscuous mode
[  126.797871][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.836312][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.996661][ T6195] team0: Port device team_slave_0 added
[  127.026908][ T6195] team0: Port device team_slave_1 added
[  127.287328][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.311655][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.340167][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.398239][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.447769][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.657966][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.802492][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.064320][   T51] Bluetooth: hci4: command tx timeout
[  128.131536][ T6195] hsr_slave_0: entered promiscuous mode
[  128.146455][ T6195] hsr_slave_1: entered promiscuous mode
[  128.813953][ T6195] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.841505][ T6195] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.866115][ T6195] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.906871][ T6195] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  129.965477][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.065484][ T6195] 8021q: adding VLAN 0 to HW filter on device team0
[  130.129117][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.136444][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.151681][   T51] Bluetooth: hci4: command tx timeout
[  130.218673][ T6339] pim6reg: entered allmulticast mode
[  130.235119][ T6340] pim6reg: left allmulticast mode
[  130.449569][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.456877][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.100643][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'.
[  132.541765][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  132.575187][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.582564][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.591913][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.607224][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.617925][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.629997][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.789775][   T10] usb 5-1: config 0 has no interfaces?
[  132.918615][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  132.934695][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.954530][   T10] usb 5-1: Product: syz
[  132.958870][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.961721][   T10] usb 5-1: Manufacturer: syz
[  132.996335][   T10] usb 5-1: SerialNumber: syz
[  133.020414][   T10] usb 5-1: config 0 descriptor??
[  133.341036][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.527593][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.836660][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.731706][ T5839] Bluetooth: hci0: command tx timeout
[  135.092747][ T6195] veth0_vlan: entered promiscuous mode
[  135.109047][   T12] bridge_slave_1: left allmulticast mode
[  135.121583][   T12] bridge_slave_1: left promiscuous mode
[  135.135844][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.160953][   T12] bridge_slave_0: left allmulticast mode
[  135.170690][   T12] bridge_slave_0: left promiscuous mode
[  135.177035][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.229661][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.239249][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.249497][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.260394][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.268440][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.714242][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.738619][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.764906][   T12] bond0 (unregistering): Released all slaves
[  135.854196][ T6371] chnl_net:caif_netlink_parms(): no params data found
[  136.579996][ T6195] veth1_vlan: entered promiscuous mode
[  136.705071][ T6426] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  136.783182][   T51] Bluetooth: hci0: command tx timeout
[  136.878232][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.897241][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.910118][ T6371] bridge_slave_0: entered allmulticast mode
[  136.940148][ T6371] bridge_slave_0: entered promiscuous mode
[  136.981369][   T10] kernel read not supported for file /109/oom_adj (pid: 10 comm: kworker/0:1)
[  137.016945][   T12] hsr_slave_0: left promiscuous mode
[  137.027879][   T12] hsr_slave_1: left promiscuous mode
[  137.039115][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.058582][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.066952][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.079665][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.106878][   T12] veth1_macvtap: left promiscuous mode
[  137.112962][   T12] veth0_macvtap: left promiscuous mode
[  137.119705][   T12] veth1_vlan: left promiscuous mode
[  137.126907][   T12] veth0_vlan: left promiscuous mode
[  137.343009][   T51] Bluetooth: hci2: command tx timeout
[  137.532149][   T12] team0 (unregistering): Port device team_slave_1 removed
[  137.568270][   T12] team0 (unregistering): Port device team_slave_0 removed
[  137.938578][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.958091][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.972421][ T6371] bridge_slave_1: entered allmulticast mode
[  137.980650][ T6371] bridge_slave_1: entered promiscuous mode
[  138.147226][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.153974][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  138.245986][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.264699][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.409425][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.016169][   T51] Bluetooth: hci0: command tx timeout
[  139.216907][   T10] usb 5-1: USB disconnect, device number 2
[  139.229346][ T6195] veth0_macvtap: entered promiscuous mode
[  139.367092][ T6446] dlm: plock device version mismatch: kernel (1.2.0), user (4.1204073025.1987574336)
[  139.388073][ T6446] overlayfs: missing 'lowerdir'
[  139.471732][   T51] Bluetooth: hci2: command tx timeout
[  140.126819][ T6371] team0: Port device team_slave_0 added
[  140.345931][ T6371] team0: Port device team_slave_1 added
[  140.906285][ T6195] veth1_macvtap: entered promiscuous mode
[  140.925227][ T6409] chnl_net:caif_netlink_parms(): no params data found
[  141.104341][   T51] Bluetooth: hci0: command tx timeout
[  141.124455][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.131497][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.194254][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.208042][ T6459] syz_tun: entered allmulticast mode
[  141.245332][ T6462] dvmrp8: entered allmulticast mode
[  141.255618][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.264870][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.292492][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.390535][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.488824][ T6371] hsr_slave_0: entered promiscuous mode
[  141.496399][ T6371] hsr_slave_1: entered promiscuous mode
[  141.503711][ T6371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.511836][   T51] Bluetooth: hci2: command tx timeout
[  141.534916][ T6371] Cannot create hsr debugfs directory
[  141.558267][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.816434][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.875925][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.884162][ T6409] bridge_slave_0: entered allmulticast mode
[  141.892427][ T6409] bridge_slave_0: entered promiscuous mode
[  141.903468][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.910645][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.918317][ T6409] bridge_slave_1: entered allmulticast mode
[  141.928712][ T6409] bridge_slave_1: entered promiscuous mode
[  142.009119][ T6195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.022036][ T6195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.041727][ T6195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.050734][ T6195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.064308][ T6458] syz_tun: left allmulticast mode
[  142.069508][ T6458] dvmrp8: left allmulticast mode
[  142.385579][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.578408][ T6483] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  142.974624][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.035714][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.178258][ T6409] team0: Port device team_slave_0 added
[  143.302294][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.330315][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'.
[  143.360154][ T6487] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  143.406445][ T6409] team0: Port device team_slave_1 added
[  143.569612][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.591031][   T51] Bluetooth: hci2: command tx timeout
[  143.683463][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.690508][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.769328][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.831127][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.838661][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.880108][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.940104][ T6497] 9pnet_fd: Insufficient options for proto=fd
[  143.951961][ T6497] fuse: Bad value for 'fd'
[  144.773303][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.932769][ T6409] hsr_slave_0: entered promiscuous mode
[  144.939496][ T6409] hsr_slave_1: entered promiscuous mode
[  144.948094][ T6409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.958394][ T6409] Cannot create hsr debugfs directory
[  145.650863][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.676291][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.685187][   T12] bridge_slave_1: left allmulticast mode
[  145.691487][   T12] bridge_slave_1: left promiscuous mode
[  145.705930][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.523548][   T12] bridge_slave_0: left allmulticast mode
[  146.529276][   T12] bridge_slave_0: left promiscuous mode
[  146.541268][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.348577][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.366704][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.380654][   T12] bond0 (unregistering): Released all slaves
[  147.568946][ T6371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.669363][ T6539] use of bytesused == 0 is deprecated and will be removed in the future,
[  147.678837][ T6539] use the actual size instead.
[  147.690631][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.691272][ T6371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.701641][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.819145][   T51] block nbd4: Receive control failed (result -32)
[  147.859341][ T6371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.875552][ T6371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  148.908624][ T6571] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.134'.
[  149.831740][   T12] hsr_slave_0: left promiscuous mode
[  149.883391][   T12] hsr_slave_1: left promiscuous mode
[  149.907124][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.929527][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.121416][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.171728][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.055794][   T12] veth1_macvtap: left promiscuous mode
[  151.072347][   T12] veth0_macvtap: left promiscuous mode
[  151.078141][   T12] veth1_vlan: left promiscuous mode
[  151.134779][   T12] veth0_vlan: left promiscuous mode
[  153.025731][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'.
[  153.628170][   T12] team0 (unregistering): Port device team_slave_1 removed
[  153.669873][   T12] team0 (unregistering): Port device team_slave_0 removed
[  154.028472][ T6607] syz_tun: entered allmulticast mode
[  154.059228][ T6608] dvmrp8: entered allmulticast mode
[  154.073571][ T6608] syz_tun: left allmulticast mode
[  154.078757][ T6608] dvmrp8: left allmulticast mode
[  154.270153][ T6409] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  154.414975][ T6409] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  154.611535][ T6409] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  154.656796][ T6409] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  156.602693][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.805856][ T6371] 8021q: adding VLAN 0 to HW filter on device team0
[  157.005346][ T6651] x_tables: ip_tables: icmp match: only valid for protocol 1
[  157.664088][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.671256][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.887399][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.894723][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.436700][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.588516][ T6409] 8021q: adding VLAN 0 to HW filter on device team0
[  158.647043][ T6668] syz_tun: entered allmulticast mode
[  158.680046][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.687320][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.770808][ T6668] dvmrp8: entered allmulticast mode
[  158.821181][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.828479][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.907897][ T6667] syz_tun: left allmulticast mode
[  158.914100][ T6667] dvmrp8: left allmulticast mode
[  159.336365][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.131921][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.178036][ T6702] netlink: 'syz.4.157': attribute type 10 has an invalid length.
[  160.202342][ T6702] syz_tun: entered promiscuous mode
[  160.469863][ T6371] veth0_vlan: entered promiscuous mode
[  160.519218][ T6371] veth1_vlan: entered promiscuous mode
[  160.653858][ T6371] veth0_macvtap: entered promiscuous mode
[  160.694193][ T6371] veth1_macvtap: entered promiscuous mode
[  160.785706][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.861403][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.912265][ T6371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.930447][ T6371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.951319][ T6371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.975599][ T6371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.117644][ T6717] vlan2: entered promiscuous mode
[  161.336061][ T6729] Can't find a SQUASHFS superblock on nullb0
[  161.567464][ T6409] veth0_vlan: entered promiscuous mode
[  161.594200][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.628859][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.668596][ T6409] veth1_vlan: entered promiscuous mode
[  161.698766][ T6738] syz_tun: entered allmulticast mode
[  161.808486][ T6736] dvmrp8: entered allmulticast mode
[  161.878084][ T6735] syz_tun: left allmulticast mode
[  161.885342][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.894068][ T6735] dvmrp8: left allmulticast mode
[  161.900939][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.102011][ T6409] veth0_macvtap: entered promiscuous mode
[  162.154813][ T6409] veth1_macvtap: entered promiscuous mode
[  162.712754][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.92'.
[  162.724442][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.793765][ T6757] syz.3.166 uses obsolete (PF_INET,SOCK_PACKET)
[  162.868203][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.946391][ T6409] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.004994][ T6409] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.091745][ T6409] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.159287][ T6409] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.634613][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.780273][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.844426][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.889427][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.994961][ T6806] syz_tun: entered allmulticast mode
[  167.054224][ T6806] dvmrp8: entered allmulticast mode
[  167.119083][ T6804] syz_tun: left allmulticast mode
[  167.142632][ T6808] 9pnet_fd: Insufficient options for proto=fd
[  167.157036][ T6804] dvmrp8: left allmulticast mode
[  167.791946][ T5835] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  167.868601][ T6836] JFS: discard option not supported on device
[  167.905290][ T6836] Mount JFS Failure: -22
[  167.955245][ T6836] jfs_mount failed w/return code = -22
[  167.958595][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  168.002296][ T5835] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  168.016135][ T5835] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.044902][ T5835] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  168.062906][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  168.086136][ T5835] usb 6-1: Product: syz
[  168.104491][ T5835] usb 6-1: Manufacturer: syz
[  168.109439][ T5835] usb 6-1: SerialNumber: syz
[  168.351171][ T5835] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  169.566297][  T980] usb 6-1: USB disconnect, device number 2
[  170.300329][  T980] usblp0: removed
[  170.457282][ T6862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  170.571772][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.6.188'.
[  171.481228][ T6876] syz_tun: entered allmulticast mode
[  171.537390][ T6876] dvmrp8: entered allmulticast mode
[  171.600994][ T6875] syz_tun: left allmulticast mode
[  171.621024][ T6879] netlink: 48 bytes leftover after parsing attributes in process `syz.5.191'.
[  171.630718][ T6875] dvmrp8: left allmulticast mode
[  172.206176][ T6900] loop6: detected capacity change from 0 to 524287999
[  172.226882][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.238331][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.303810][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.316765][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.332566][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.341770][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.352117][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.360662][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.370262][ T6900] ldm_validate_partition_table(): Disk read failed.
[  172.377609][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.390596][ T6900] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.404389][ T6900] Dev loop6: unable to read RDB block 0
[  172.461859][ T6900]  loop6: unable to read partition table
[  172.471676][ T6900] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  173.196287][ T6908] loop6: detected capacity change from 0 to 524287999
[  173.217436][ T6908] ldm_validate_partition_table(): Disk read failed.
[  173.227359][ T6908] Dev loop6: unable to read RDB block 0
[  173.237306][ T6908]  loop6: unable to read partition table
[  173.245467][ T6908] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  174.073593][ T6916] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  174.834590][ T6923] netlink: 188 bytes leftover after parsing attributes in process `syz.5.201'.
[  175.687443][ T6933] kvm: user requested TSC rate below hardware speed
[  175.963417][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  176.079891][ T6932] syz_tun: entered allmulticast mode
[  176.125790][ T6932] dvmrp8: entered allmulticast mode
[  176.184147][ T6931] syz_tun: left allmulticast mode
[  176.189316][ T6931] dvmrp8: left allmulticast mode
[  176.243824][ T5835] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  176.253667][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.310317][ T5835] usb 6-1: config 0 descriptor??
[  176.945353][ T5835] usb 6-1: Cannot set MAC address
[  176.972407][ T5835] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  176.995587][ T5835] usb 6-1: USB disconnect, device number 3
[  178.456634][ T6959] IPVS: Scheduler module ip_vs_sip not found
[  178.526253][ T6963] bridge1: entered promiscuous mode
[  178.531684][ T6963] bridge1: entered allmulticast mode
[  178.898448][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'.
[  180.121224][ T7001] JFS: discard option not supported on device
[  180.124862][ T7001] Mount JFS Failure: -22
[  180.124914][ T7001] jfs_mount failed w/return code = -22
[  180.931808][ T7004] syz_tun: entered allmulticast mode
[  181.153522][ T7004] dvmrp8: entered allmulticast mode
[  182.056967][ T7003] syz_tun: left allmulticast mode
[  182.068147][ T7003] dvmrp8: left allmulticast mode
[  182.995688][ T7037] netlink: 340 bytes leftover after parsing attributes in process `syz.5.225'.
[  183.160927][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'.
[  183.242937][ T7037] netlink: 48 bytes leftover after parsing attributes in process `syz.5.225'.
[  185.367779][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.376972][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.392929][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.402313][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.421964][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.329993][ T7096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.665833][ T5839] Bluetooth: hci3: command tx timeout
[  187.813960][ T7114] JFS: discard option not supported on device
[  187.820491][ T7114] Mount JFS Failure: -22
[  187.824900][ T7114] jfs_mount failed w/return code = -22
[  189.089071][ T7115] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  189.742122][ T5839] Bluetooth: hci3: command tx timeout
[  190.054821][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.248'.
[  190.181252][ T7068] chnl_net:caif_netlink_parms(): no params data found
[  190.786959][ T7141] Invalid logical block size (33423360)
[  191.122040][ T7143] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  191.353202][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.381855][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.425534][ T7068] bridge_slave_0: entered allmulticast mode
[  191.441021][ T7068] bridge_slave_0: entered promiscuous mode
[  191.460800][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.504100][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.530859][ T7068] bridge_slave_1: entered allmulticast mode
[  191.570494][ T7068] bridge_slave_1: entered promiscuous mode
[  191.822417][ T5839] Bluetooth: hci3: command tx timeout
[  191.996716][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.215784][ T5916] libceph: connect (1)[c::]:6789 error -101
[  192.381024][ T7173] befs: (nullb0): invalid magic header
[  192.925666][ T5916] libceph: mon0 (1)[c::]:6789 connect error
[  192.983406][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.019550][ T7174] netlink: 'syz.3.258': attribute type 1 has an invalid length.
[  193.037624][ T7164] ceph: No mds server is up or the cluster is laggy
[  193.318780][ T5835] libceph: connect (1)[c::]:6789 error -101
[  193.376438][ T5835] libceph: mon0 (1)[c::]:6789 connect error
[  193.478604][ T5206] udevd[5206]: worker [5983] terminated by signal 33 (Unknown signal 33)
[  193.901729][ T5839] Bluetooth: hci3: command tx timeout
[  193.966640][ T7068] team0: Port device team_slave_0 added
[  194.024691][ T7068] team0: Port device team_slave_1 added
[  194.212072][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.242042][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.361940][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.386437][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.986066][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.059131][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.771123][ T7194] loop6: detected capacity change from 0 to 524287999
[  196.778426][ T7194] buffer_io_error: 23 callbacks suppressed
[  196.778438][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.792378][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.800292][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.808326][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.816440][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.824441][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.832447][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.840361][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.848421][ T7194] ldm_validate_partition_table(): Disk read failed.
[  196.855227][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.863248][ T7194] Buffer I/O error on dev loop6, logical block 0, async page read
[  196.871296][ T7194] Dev loop6: unable to read RDB block 0
[  196.877426][ T7194]  loop6: unable to read partition table
[  196.883296][ T7194] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  196.988696][ T7068] hsr_slave_0: entered promiscuous mode
[  197.028655][ T7068] hsr_slave_1: entered promiscuous mode
[  197.047370][ T7068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.069277][ T7068] Cannot create hsr debugfs directory
[  198.025434][ T7212] netlink: 'syz.7.267': attribute type 10 has an invalid length.
[  198.107567][ T7212] syz_tun: entered promiscuous mode
[  198.868300][ T5835] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  199.055690][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  199.066183][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  199.089461][ T7222] input: syz0 as /devices/virtual/input/input7
[  199.096345][ T5835] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  199.114793][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.265213][ T7222] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.272'.
[  199.281524][ T5835] usb 6-1: config 0 descriptor??
[  199.294013][ T5835] em28xx 6-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[  199.316545][ T5835] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  199.332444][ T7226] =======================================================
[  199.332444][ T7226] WARNING: The mand mount option has been deprecated and
[  199.332444][ T7226]          and is ignored by this kernel. Remove the mand
[  199.332444][ T7226]          option from the mount to silence this warning.
[  199.332444][ T7226] =======================================================
[  199.506550][ T7068] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  199.588340][ T7068] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  199.592507][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.602571][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  199.660332][ T7068] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  199.706414][ T7068] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  200.271313][ T7245] netlink: 'syz.7.273': attribute type 4 has an invalid length.
[  200.415859][ T7248] netlink: 'syz.7.273': attribute type 4 has an invalid length.
[  200.438648][ T7251] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  201.101987][ T5835] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  201.228398][ T5835] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  201.259482][ T5835] em28xx 6-1:0.0: board has no eeprom
[  201.369641][ T5835] em28xx 6-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81)
[  201.392287][ T5835] em28xx 6-1:0.0: dvb set to bulk mode.
[  201.398253][ T5916] em28xx 6-1:0.0: Binding DVB extension
[  201.459114][ T5835] usb 6-1: USB disconnect, device number 4
[  201.489827][ T5916] em28xx 6-1:0.0: writing to i2c device at 0x82 failed (error=-19)
[  201.621937][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.648247][ T5835] em28xx 6-1:0.0: Disconnecting em28xx
[  201.666157][ T7068] 8021q: adding VLAN 0 to HW filter on device team0
[  201.722080][  T980] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  201.929308][  T980] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  202.032269][ T5961] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  202.153085][  T980] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  202.209265][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.216533][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.264202][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.265097][  T980] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  202.271547][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.294554][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.278'.
[  202.324010][  T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  202.341928][ T5961] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  202.366267][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.376362][ T5961] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.428086][  T980] usb 4-1: Product: syz
[  202.459400][ T5961] usb 7-1: config 0 has no interface number 0
[  202.466053][  T980] usb 4-1: Manufacturer: syz
[  202.505872][  T980] usb 4-1: SerialNumber: syz
[  202.518434][ T5961] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  202.599562][ T5961] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  202.600101][ T5961] usb 7-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  202.658340][ T5961] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  202.658429][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.658503][ T5961] usb 7-1: Product: syz
[  202.658521][ T5961] usb 7-1: Manufacturer: syz
[  202.658757][ T5961] usb 7-1: SerialNumber: syz
[  203.002682][ T5961] usb 7-1: config 0 descriptor??
[  203.624077][ T5961] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  203.664153][ T5916] DVB: Unable to find symbol drxk_attach()
[  203.672144][ T5916] em28xx 6-1:0.0: Registering input extension
[  203.679271][ T5835] em28xx 6-1:0.0: Closing input extension
[  203.679978][ T5961] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  203.715577][ T5835] em28xx 6-1:0.0: Freeing device
[  203.751379][ T5961] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  203.917869][  T980] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  204.051963][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.280'.
[  204.291243][ T7262] syz.5.278 (7262) used greatest stack depth: 19328 bytes left
[  204.421019][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.562924][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.764847][ T5908] usb 7-1: USB disconnect, device number 2
[  204.769017][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.803055][ T5908] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  204.814300][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.854215][ T5908] cyberjack 7-1:0.69: device disconnected
[  205.307645][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.391891][ T7290] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.284'.
[  205.402874][ T7290] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.284'.
[  205.932209][  T980] usb 4-1: 2:1: cannot get freq at ep 0x82
[  206.031657][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  206.051264][  T980] usb 4-1: USB disconnect, device number 5
[  206.195892][ T5908] usb 7-1: Using ep0 maxpacket: 16
[  206.213113][ T5908] usb 7-1: config 1 interface 0 has no altsetting 0
[  206.233915][ T5908] usb 7-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40
[  206.253899][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.271892][ T5908] usb 7-1: Product: syz
[  206.276144][ T5908] usb 7-1: Manufacturer: syz
[  206.301426][ T5908] usb 7-1: SerialNumber: syz
[  207.111775][ T5908] usbhid 7-1:1.0: can't add hid device: -71
[  207.117864][ T5908] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  207.149456][ T5908] usb 7-1: USB disconnect, device number 3
[  207.571799][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  208.015301][ T7068] veth0_vlan: entered promiscuous mode
[  208.029176][ T7068] veth1_vlan: entered promiscuous mode
[  208.035392][ T5929] usb 4-1: Using ep0 maxpacket: 8
[  208.058815][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.102452][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.112448][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  208.125496][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  208.134875][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.153102][ T5929] usb 4-1: config 0 descriptor??
[  208.154066][ T7068] veth0_macvtap: entered promiscuous mode
[  208.193717][ T7068] veth1_macvtap: entered promiscuous mode
[  208.256085][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.270537][ T7322] xt_hashlimit: max too large, truncated to 1048576
[  208.337178][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.377704][ T7068] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.396040][ T7068] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.416967][ T7068] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.437973][ T7068] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.455732][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.296'.
[  208.588199][ T5929] logitech 0003:046D:C293.0001: unknown main item tag 0x0
[  208.608123][ T5929] logitech 0003:046D:C293.0001: unknown main item tag 0x0
[  208.617128][ T5929] logitech 0003:046D:C293.0001: unknown main item tag 0x0
[  208.629606][ T5929] logitech 0003:046D:C293.0001: unknown main item tag 0x0
[  208.662095][ T5929] logitech 0003:046D:C293.0001: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0
[  208.682267][ T5835] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  208.729144][ T5929] logitech 0003:046D:C293.0001: no inputs found
[  209.073675][ T7333] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  209.080839][ T7333] overlayfs: failed to set xattr on upper
[  209.086671][ T7333] overlayfs: ...falling back to redirect_dir=nofollow.
[  209.093630][ T7333] overlayfs: ...falling back to index=off.
[  209.099460][ T7333] overlayfs: ...falling back to uuid=null.
[  209.561677][ T5835] usb 6-1: Using ep0 maxpacket: 8
[  209.640444][ T5835] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  209.663441][ T5835] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  209.672145][ T5835] usb 6-1: Product: syz
[  209.678771][ T5835] usb 6-1: Manufacturer: syz
[  209.684449][ T5835] usb 6-1: SerialNumber: syz
[  209.699805][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.787018][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.793962][ T5835] usb 6-1: config 0 descriptor??
[  209.818662][ T5835] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  209.924795][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.961807][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.031431][ T7259] usb 4-1: USB disconnect, device number 6
[  210.266768][ T5835] gspca_zc3xx: reg_r err -71
[  210.396030][ T5835] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  210.582133][ T5835] usb 6-1: USB disconnect, device number 5
[  211.167445][ T7360] 9pnet_virtio: no channels available for device 127.0.0.1
[  212.944918][ T7364] syz_tun: entered allmulticast mode
[  212.956454][ T7364] dvmrp8: entered allmulticast mode
[  213.248794][ T7363] syz_tun: left allmulticast mode
[  213.268499][ T7363] dvmrp8: left allmulticast mode
[  213.915872][   T30] audit: type=1326 audit(1755812648.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.5.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1afd8ebe9 code=0x0
[  214.187024][ T7384] FAULT_INJECTION: forcing a failure.
[  214.187024][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  214.213647][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.7.311 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  214.213678][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  214.213699][ T7384] Call Trace:
[  214.213711][ T7384]  <TASK>
[  214.213720][ T7384]  dump_stack_lvl+0x189/0x250
[  214.213762][ T7384]  ? __pfx____ratelimit+0x10/0x10
[  214.213786][ T7384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.213811][ T7384]  ? __pfx__printk+0x10/0x10
[  214.213840][ T7384]  ? __might_fault+0xb0/0x130
[  214.213875][ T7384]  should_fail_ex+0x414/0x560
[  214.213904][ T7384]  _copy_from_user+0x2d/0xb0
[  214.213936][ T7384]  memdup_user+0x5e/0xd0
[  214.213965][ T7384]  kvm_arch_vcpu_ioctl+0x1a78/0x2a80
[  214.214000][ T7384]  ? __lock_acquire+0xab9/0xd20
[  214.214019][ T7384]  ? kvm_arch_vcpu_ioctl+0x5f8/0x2a80
[  214.214055][ T7384]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  214.214091][ T7384]  ? __lock_acquire+0xab9/0xd20
[  214.214136][ T7384]  ? is_bpf_text_address+0x26/0x2b0
[  214.214165][ T7384]  ? is_bpf_text_address+0x292/0x2b0
[  214.214185][ T7384]  ? is_bpf_text_address+0x26/0x2b0
[  214.214210][ T7384]  ? kernel_text_address+0xa5/0xe0
[  214.214243][ T7384]  ? __kernel_text_address+0xd/0x40
[  214.214279][ T7384]  ? unwind_get_return_address+0x4d/0x90
[  214.214303][ T7384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  214.214331][ T7384]  ? arch_stack_walk+0xfc/0x150
[  214.214372][ T7384]  ? stack_trace_save+0x9c/0xe0
[  214.214402][ T7384]  ? stack_depot_save_flags+0x40/0x900
[  214.214437][ T7384]  ? kasan_save_track+0x4f/0x80
[  214.214467][ T7384]  ? kasan_save_track+0x3e/0x80
[  214.214511][ T7384]  ? __lock_acquire+0xab9/0xd20
[  214.214542][ T7384]  ? __mutex_trylock_common+0x153/0x260
[  214.214573][ T7384]  ? __pfx___mutex_trylock_common+0x10/0x10
[  214.214613][ T7384]  ? rcu_is_watching+0x15/0xb0
[  214.214642][ T7384]  ? trace_contention_end+0x39/0x120
[  214.214674][ T7384]  ? __mutex_lock+0x330/0xe80
[  214.214706][ T7384]  ? kasan_quarantine_put+0xdd/0x220
[  214.214750][ T7384]  ? kvm_vcpu_ioctl+0x22e/0xe90
[  214.214779][ T7384]  ? __pfx___mutex_lock+0x10/0x10
[  214.214805][ T7384]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  214.214831][ T7384]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  214.214855][ T7384]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  214.214888][ T7384]  kvm_vcpu_ioctl+0x74d/0xe90
[  214.214922][ T7384]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  214.214964][ T7384]  ? __lock_acquire+0xab9/0xd20
[  214.214989][ T7384]  ? __asan_memset+0x22/0x50
[  214.215018][ T7384]  ? smack_file_ioctl+0x302/0x340
[  214.215042][ T7384]  ? __pfx_smack_file_ioctl+0x10/0x10
[  214.215076][ T7384]  ? __fget_files+0x2a/0x420
[  214.215099][ T7384]  ? __fget_files+0x3a0/0x420
[  214.215122][ T7384]  ? __fget_files+0x2a/0x420
[  214.215150][ T7384]  ? bpf_lsm_file_ioctl+0x9/0x20
[  214.215175][ T7384]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  214.215202][ T7384]  __se_sys_ioctl+0xfc/0x170
[  214.215237][ T7384]  do_syscall_64+0xfa/0x3b0
[  214.215260][ T7384]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.215305][ T7384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.215327][ T7384]  ? clear_bhb_loop+0x60/0xb0
[  214.215354][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.215374][ T7384] RIP: 0033:0x7efed1d8ebe9
[  214.215399][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.215417][ T7384] RSP: 002b:00007efed2c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.215446][ T7384] RAX: ffffffffffffffda RBX: 00007efed1fb5fa0 RCX: 00007efed1d8ebe9
[  214.215462][ T7384] RDX: 0000200000000300 RSI: 000000004008ae89 RDI: 0000000000000005
[  214.215475][ T7384] RBP: 00007efed2c07090 R08: 0000000000000000 R09: 0000000000000000
[  214.215489][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.215501][ T7384] R13: 00007efed1fb6038 R14: 00007efed1fb5fa0 R15: 00007fff5f54fe98
[  214.215537][ T7384]  </TASK>
[  214.721365][ T7389] netlink: 340 bytes leftover after parsing attributes in process `syz.3.313'.
[  214.751735][ T7389] netlink: 48 bytes leftover after parsing attributes in process `syz.3.313'.
[  216.049422][ T7259] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  216.142655][ T7404] netlink: 5844 bytes leftover after parsing attributes in process `syz.7.316'.
[  216.151922][ T7404] netlink: 5844 bytes leftover after parsing attributes in process `syz.7.316'.
[  216.208181][ T7259] usb 7-1: config 6 has an invalid interface number: 108 but max is 0
[  216.240985][ T7259] usb 7-1: config 6 has no interface number 0
[  216.254472][ T7259] usb 7-1: config 6 interface 108 has no altsetting 0
[  216.279730][ T7259] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d
[  216.379623][ T7259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.389756][ T7259] usb 7-1: Product: syz
[  216.394301][ T7259] usb 7-1: Manufacturer: syz
[  216.399112][ T7259] usb 7-1: SerialNumber: syz
[  216.569571][ T7414] Smack: duplicate mount options
[  216.643189][ T7416] 9pnet_fd: Insufficient options for proto=fd
[  216.654755][ T7416] fuse: Bad value for 'fd'
[  217.047066][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  217.481173][ T7259] mos7840 7-1:6.108: missing endpoints
[  217.505449][ T7259] usb 7-1: USB disconnect, device number 4
[  219.504149][ T7449] sp0: Synchronizing with TNC
[  219.784151][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  220.073009][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  220.113692][ T5929] usb 4-1: Using ep0 maxpacket: 8
[  220.262254][   T24] usb 7-1: Using ep0 maxpacket: 8
[  220.361517][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.476204][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.493824][   T24] usb 7-1: New USB device found, idVendor=1bfd, idProduct=53db, bcdDevice= 0.af
[  220.542505][   T24] usb 7-1: New USB device strings: Mfr=243, Product=3, SerialNumber=146
[  220.577114][   T24] usb 7-1: Product: syz
[  220.599378][   T24] usb 7-1: Manufacturer: syz
[  220.599923][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.614827][   T24] usb 7-1: SerialNumber: syz
[  220.696314][   T24] usb 7-1: config 0 descriptor??
[  220.715403][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.743219][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  220.778423][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.998502][ T7469] vlan3: entered allmulticast mode
[  221.000462][ T5916] usb 7-1: USB disconnect, device number 5
[  221.028113][ T7469] macvlan0: entered allmulticast mode
[  221.035247][ T5929] usb 4-1: GET_CAPABILITIES returned 0
[  221.040821][ T5929] usbtmc 4-1:16.0: can't read capabilities
[  221.054306][ T7469] veth1_vlan: entered allmulticast mode
[  221.239074][ T5916] usb 4-1: USB disconnect, device number 7
[  221.642930][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  222.206001][ T5908] usb 9-1: Using ep0 maxpacket: 8
[  222.227810][ T5908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.332208][ T5908] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  222.471491][ T5908] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.675752][ T5908] usb 9-1: config 0 interface 0 has no altsetting 0
[  222.719855][ T5908] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  222.739753][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.781548][ T5908] usb 9-1: Product: syz
[  222.808572][ T5908] usb 9-1: Manufacturer: syz
[  222.826563][ T5908] usb 9-1: SerialNumber: syz
[  222.844174][ T5908] usb 9-1: config 0 descriptor??
[  222.862890][ T5908] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  223.097765][ T5908] snd_usb_toneport 9-1:0.0: cannot get proper max packet size
[  223.134068][ T5908] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  223.179097][ T5908] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  223.294361][ T5908] kernel read not supported for file /32/oom_adj (pid: 5908 comm: kworker/0:4)
[  223.323869][   T24] usb 9-1: USB disconnect, device number 2
[  223.714298][ T7518] Invalid logical block size (117440512)
[  223.797019][ T7520] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  223.910899][ T7525] cgroup: Unknown subsys name 'noxattr'
[  225.244157][ T7525] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  225.284135][ T7535] FAULT_INJECTION: forcing a failure.
[  225.284135][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.297945][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.3.354 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  225.297966][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.297976][ T7535] Call Trace:
[  225.297984][ T7535]  <TASK>
[  225.297992][ T7535]  dump_stack_lvl+0x189/0x250
[  225.298016][ T7535]  ? __pfx____ratelimit+0x10/0x10
[  225.298032][ T7535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.298050][ T7535]  ? __pfx__printk+0x10/0x10
[  225.298080][ T7535]  should_fail_ex+0x414/0x560
[  225.298103][ T7535]  _copy_to_user+0x31/0xb0
[  225.298128][ T7535]  simple_read_from_buffer+0xe1/0x170
[  225.298149][ T7535]  proc_fail_nth_read+0x1df/0x250
[  225.298171][ T7535]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.298193][ T7535]  ? rw_verify_area+0x258/0x650
[  225.298216][ T7535]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.298237][ T7535]  vfs_read+0x200/0x980
[  225.298265][ T7535]  ? __pfx___mutex_lock+0x10/0x10
[  225.298292][ T7535]  ? __pfx_vfs_read+0x10/0x10
[  225.298318][ T7535]  ? __fget_files+0x2a/0x420
[  225.298339][ T7535]  ? __fget_files+0x3a0/0x420
[  225.298355][ T7535]  ? __fget_files+0x2a/0x420
[  225.298379][ T7535]  ksys_read+0x145/0x250
[  225.298392][ T7535]  ? __fget_files+0x3a0/0x420
[  225.298410][ T7535]  ? __pfx_ksys_read+0x10/0x10
[  225.298428][ T7535]  ? do_syscall_64+0xbe/0x3b0
[  225.298449][ T7535]  do_syscall_64+0xfa/0x3b0
[  225.298465][ T7535]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.298481][ T7535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.298496][ T7535]  ? clear_bhb_loop+0x60/0xb0
[  225.298515][ T7535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.298532][ T7535] RIP: 0033:0x7f639778d5fc
[  225.298547][ T7535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  225.298560][ T7535] RSP: 002b:00007f639869f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  225.298577][ T7535] RAX: ffffffffffffffda RBX: 00007f63979b5fa0 RCX: 00007f639778d5fc
[  225.298588][ T7535] RDX: 000000000000000f RSI: 00007f639869f0a0 RDI: 0000000000000006
[  225.298597][ T7535] RBP: 00007f639869f090 R08: 0000000000000000 R09: 0000000000000000
[  225.298607][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.298615][ T7535] R13: 00007f63979b6038 R14: 00007f63979b5fa0 R15: 00007ffffa078408
[  225.298640][ T7535]  </TASK>
[  225.511779][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  225.997890][ T5839] Bluetooth: hci0: command 0x0401 tx timeout
[  226.296357][   T24] usb 6-1: Using ep0 maxpacket: 8
[  226.331109][   T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  226.340954][   T24] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  226.349333][   T24] usb 6-1: config 0 has no interface number 0
[  226.356164][   T24] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.372489][   T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  226.385286][   T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  226.407741][   T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  226.417047][   T24] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  226.425465][   T24] usb 6-1: Product: syz
[  226.463111][   T24] usb 6-1: config 0 descriptor??
[  226.472507][ T7538] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.888369][ T7548] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  227.754550][   T24] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input9
[  228.880589][ T5908] usb 6-1: USB disconnect, device number 6
[  228.880608][    C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  230.501910][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  230.811059][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.822645][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0
[  230.842485][ T5908] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  230.852498][ T7586] overlayfs: overlapping lowerdir path
[  230.852826][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.897860][ T5908] usb 4-1: Product: syz
[  230.905668][ T5908] usb 4-1: Manufacturer: syz
[  230.915192][ T5908] usb 4-1: SerialNumber: syz
[  230.946728][ T5908] usb 4-1: config 0 descriptor??
[  230.959493][ T5908] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  230.982249][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  231.026704][ T5908] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  231.063108][ T5908] usb 4-1: media controller created
[  231.204954][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  231.389611][ T5908] DVB: Unable to find symbol tda10046_attach()
[  231.404865][ T5908] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  231.427500][ T5908] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  231.972740][ T5908] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  232.614673][ T5908] usb 4-1: USB disconnect, device number 8
[  232.892795][ T7600] loop6: detected capacity change from 0 to 2560
[  232.907900][ T7600] buffer_io_error: 6 callbacks suppressed
[  232.907933][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  232.940109][ T7609] Bluetooth: MGMT ver 1.23
[  232.948705][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.118972][ T7610] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  233.136548][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.145150][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.163819][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.181878][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.193818][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.220224][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[  233.229524][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[  233.394254][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.555729][ T7611] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  233.680248][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.977998][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  233.995825][ T7600] ldm_validate_partition_table(): Disk read failed.
[  234.002872][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  234.010837][ T7600] Buffer I/O error on dev loop6, logical block 0, async page read
[  234.033806][ T7600] Dev loop6: unable to read RDB block 0
[  234.068696][ T7600]  loop6: unable to read partition table
[  234.075181][ T7600] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  235.133847][ T7622] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  236.406456][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.492909][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.662442][ T5835] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  236.949170][ T5835] usb 4-1: Using ep0 maxpacket: 32
[  236.972219][ T5835] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[  236.998130][ T5835] usb 4-1: config 0 has no interface number 0
[  237.026711][ T7639] /dev/sg0: Can't lookup blockdev
[  237.050694][ T5835] usb 4-1: config 0 interface 182 has no altsetting 0
[  237.053252][ T7639] 
[  237.059887][ T7639] ======================================================
[  237.066935][ T7639] WARNING: possible circular locking dependency detected
[  237.069884][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=2a.74
[  237.073971][ T7639] 6.16.0-syzkaller #0 Not tainted
[  237.073986][ T7639] ------------------------------------------------------
[  237.073995][ T7639] syz.5.388/7639 is trying to acquire lock:
[  237.101074][ T7639] ffff88802501a358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  237.110351][ T7639] 
[  237.110351][ T7639] but task is already holding lock:
[  237.117724][ T7639] ffff888025019368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  237.127324][ T7639] 
[  237.127324][ T7639] which lock already depends on the new lock.
[  237.127324][ T7639] 
[  237.137872][ T7639] 
[  237.137872][ T7639] the existing dependency chain (in reverse order) is:
[  237.146898][ T7639] 
[  237.146898][ T7639] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  237.155354][ T7639]        lock_acquire+0x120/0x360
[  237.160424][ T7639]        down_write+0x96/0x1f0
[  237.165210][ T7639]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  237.171471][ T7639]        nbd_start_device+0x16c/0xac0
[  237.176861][ T7639]        nbd_genl_connect+0x135b/0x18f0
[  237.182427][ T7639]        genl_family_rcv_msg_doit+0x215/0x300
[  237.188718][ T7639]        genl_rcv_msg+0x60e/0x790
[  237.193930][ T7639]        netlink_rcv_skb+0x205/0x470
[  237.199234][ T7639]        genl_rcv+0x28/0x40
[  237.203841][ T7639]        netlink_unicast+0x75c/0x8e0
[  237.209162][ T7639]        netlink_sendmsg+0x805/0xb30
[  237.214468][ T7639]        __sock_sendmsg+0x21c/0x270
[  237.219675][ T7639]        ____sys_sendmsg+0x505/0x830
[  237.224996][ T7639]        ___sys_sendmsg+0x21f/0x2a0
[  237.230223][ T7639]        __x64_sys_sendmsg+0x19b/0x260
[  237.235791][ T7639]        do_syscall_64+0xfa/0x3b0
[  237.240834][ T7639]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.247263][ T7639] 
[  237.247263][ T7639] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  237.255106][ T7639]        lock_acquire+0x120/0x360
[  237.260143][ T7639]        __mutex_lock+0x182/0xe80
[  237.265180][ T7639]        refcount_dec_and_mutex_lock+0x30/0xa0
[  237.271358][ T7639]        nbd_config_put+0x2c/0x790
[  237.276487][ T7639]        nbd_release+0xfe/0x140
[  237.281348][ T7639]        bdev_release+0x533/0x650
[  237.286387][ T7639]        blkdev_release+0x15/0x20
[  237.291427][ T7639]        __fput+0x449/0xa70
[  237.295993][ T7639]        fput_close_sync+0x119/0x200
[  237.301317][ T7639]        __x64_sys_close+0x7f/0x110
[  237.306661][ T7639]        do_syscall_64+0xfa/0x3b0
[  237.311718][ T7639]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.318177][ T7639] 
[  237.318177][ T7639] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  237.326033][ T7639]        validate_chain+0xb9b/0x2140
[  237.331343][ T7639]        __lock_acquire+0xab9/0xd20
[  237.336567][ T7639]        lock_acquire+0x120/0x360
[  237.341611][ T7639]        __mutex_lock+0x182/0xe80
[  237.346659][ T7639]        __del_gendisk+0x129/0x9e0
[  237.351802][ T7639]        del_gendisk+0xe8/0x160
[  237.356698][ T7639]        loop_remove+0x42/0xc0
[  237.361511][ T7639]        loop_control_ioctl+0x4ac/0x5a0
[  237.367084][ T7639]        __se_sys_ioctl+0xfc/0x170
[  237.372244][ T7639]        do_syscall_64+0xfa/0x3b0
[  237.377551][ T7639]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.384180][ T7639] 
[  237.384180][ T7639] other info that might help us debug this:
[  237.384180][ T7639] 
[  237.394429][ T7639] Chain exists of:
[  237.394429][ T7639]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  237.394429][ T7639] 
[  237.408644][ T7639]  Possible unsafe locking scenario:
[  237.408644][ T7639] 
[  237.416110][ T7639]        CPU0                    CPU1
[  237.421485][ T7639]        ----                    ----
[  237.426862][ T7639]   rlock(&set->update_nr_hwq_lock);
[  237.432522][ T7639]                                lock(&nbd->config_lock);
[  237.439788][ T7639]                                lock(&set->update_nr_hwq_lock);
[  237.447627][ T7639]   lock(&disk->open_mutex);
[  237.452246][ T7639] 
[  237.452246][ T7639]  *** DEADLOCK ***
[  237.452246][ T7639] 
[  237.460432][ T7639] 1 lock held by syz.5.388/7639:
[  237.465385][ T7639]  #0: ffff888025019368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  237.475433][ T7639] 
[  237.475433][ T7639] stack backtrace:
[  237.481430][ T7639] CPU: 1 UID: 0 PID: 7639 Comm: syz.5.388 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  237.481452][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  237.481462][ T7639] Call Trace:
[  237.481473][ T7639]  <TASK>
[  237.481482][ T7639]  dump_stack_lvl+0x189/0x250
[  237.481507][ T7639]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.481526][ T7639]  ? __pfx__printk+0x10/0x10
[  237.481550][ T7639]  ? print_lock_name+0xde/0x100
[  237.481578][ T7639]  print_circular_bug+0x2ee/0x310
[  237.481603][ T7639]  check_noncircular+0x134/0x160
[  237.481627][ T7639]  validate_chain+0xb9b/0x2140
[  237.481648][ T7639]  ? stack_depot_save_flags+0x40/0x900
[  237.481675][ T7639]  __lock_acquire+0xab9/0xd20
[  237.481694][ T7639]  ? __del_gendisk+0x129/0x9e0
[  237.481715][ T7639]  lock_acquire+0x120/0x360
[  237.481730][ T7639]  ? __del_gendisk+0x129/0x9e0
[  237.481754][ T7639]  ? lockdep_unlock+0x89/0x120
[  237.481783][ T7639]  __mutex_lock+0x182/0xe80
[  237.481809][ T7639]  ? __del_gendisk+0x129/0x9e0
[  237.481836][ T7639]  ? __del_gendisk+0x129/0x9e0
[  237.481858][ T7639]  ? __pfx___mutex_lock+0x10/0x10
[  237.481877][ T7639]  ? __pfx___might_resched+0x10/0x10
[  237.481899][ T7639]  ? __lock_acquire+0xab9/0xd20
[  237.481915][ T7639]  ? disk_del_events+0xb5/0x210
[  237.481938][ T7639]  ? __del_gendisk+0xc1/0x9e0
[  237.481961][ T7639]  __del_gendisk+0x129/0x9e0
[  237.481983][ T7639]  ? del_gendisk+0xe0/0x160
[  237.482007][ T7639]  ? __pfx___del_gendisk+0x10/0x10
[  237.482036][ T7639]  ? down_read+0x1ad/0x2e0
[  237.482062][ T7639]  del_gendisk+0xe8/0x160
[  237.482085][ T7639]  loop_remove+0x42/0xc0
[  237.482113][ T7639]  loop_control_ioctl+0x4ac/0x5a0
[  237.482131][ T7639]  ? __pfx_loop_control_ioctl+0x10/0x10
[  237.482146][ T7639]  ? __fget_files+0x2a/0x420
[  237.482167][ T7639]  ? bpf_lsm_file_ioctl+0x9/0x20
[  237.482187][ T7639]  ? __pfx_loop_control_ioctl+0x10/0x10
[  237.482203][ T7639]  __se_sys_ioctl+0xfc/0x170
[  237.482230][ T7639]  do_syscall_64+0xfa/0x3b0
[  237.482250][ T7639]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.482267][ T7639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.482284][ T7639]  ? clear_bhb_loop+0x60/0xb0
[  237.482304][ T7639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.482322][ T7639] RIP: 0033:0x7fc1afd8ebe9
[  237.482338][ T7639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.482352][ T7639] RSP: 002b:00007fc1b0c80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.482370][ T7639] RAX: ffffffffffffffda RBX: 00007fc1affb5fa0 RCX: 00007fc1afd8ebe9
[  237.482383][ T7639] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007
[  237.482393][ T7639] RBP: 00007fc1afe11e19 R08: 0000000000000000 R09: 0000000000000000
[  237.482404][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.482414][ T7639] R13: 00007fc1affb6038 R14: 00007fc1affb5fa0 R15: 00007ffd8d61c5b8
[  237.482434][ T7639]  </TASK>
[  237.486078][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.786777][ T5835] usb 4-1: Product: syz
[  237.791113][ T5835] usb 4-1: Manufacturer: syz
[  237.796370][ T5835] usb 4-1: SerialNumber: syz
[  237.802903][ T5835] usb 4-1: config 0 descriptor??
[  237.812609][ T5835] gspca_main: spca500-2.14.0 probing 046d:0900
[  238.012024][ T5835] gspca_spca500: reg write: error -71
[  238.018075][ T5835] gspca_spca500: reg write: error -71
[  238.024157][ T5835] gspca_spca500: reg write: error -71
[  238.029987][ T5835] gspca_spca500: reg write: error -71
[  238.035849][ T5835] gspca_spca500: reg write: error -71
[  238.041833][ T5835] gspca_spca500: reg write: error -71
[  238.047560][ T5835] gspca_spca500: reg write: error -71
[  238.053296][ T5835] gspca_spca500: reg write: error -71
[  238.058987][ T5835] gspca_spca500: reg write: error -71
[  238.065010][ T5835] gspca_spca500: reg write: error -71
[  238.070688][ T5835] gspca_spca500: reg write: error -71
[  238.077039][ T5835] gspca_spca500: reg write: error -71
[  238.082938][ T5835] gspca_spca500: reg write: error -71
[  238.088626][ T5835] gspca_spca500: reg write: error -71
[  238.096720][ T5835] usb 4-1: USB disconnect, device number 9