last executing test programs:

11.998491128s ago: executing program 1 (id=253):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002f00)=@newtaction={0x8b8, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x6b0, 0x1, [@m_ipt={0x238, 0x17, 0x0, 0x0, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x88, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x5f, 0x6, "195244b493b69a109e343c480b0e5901a067ccccb2000506f4e67246fce6276de9355aae8297e75102c3d840d298f57b39b923e728eec180e252560262d28e3dcbd1c60cbef5aa738a80d9582b7bf55300"/91}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x170, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x130, 0x18, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e209018497d8f1cfa0d69961cc5b133c25b0a606d866018fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xa4, 0x1, [@m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5d, 0x6, {0x8, 'mangle\x00', 0x80, 0xa62, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a38"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x150, 0x1, [@m_ipt={0xd8, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xa8, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d606"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818ccff96e8938cf0100000000000000c9bdc74a0a5b7f653980ed0af5c857ee3a0361bfe072c3d9c7043b1d027446cc8454c51cbd25fb61c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x8b8}}, 0x4008800)
recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$rxrpc(0x21, 0x2, 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r7 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24)
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

10.21037643s ago: executing program 3 (id=256):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
brk(0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xda, 0x3}, 0x1c)
pipe2$watch_queue(&(0x7f0000001180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @multicast2}, {0x1, @local}, 0x6, {0x2, 0x4e24, @multicast1}, 'ip6erspan0\x00'})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000001c0)={0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000240)={0x2, r8, 0x800, 0x80000000, 0x1, 0x37a2, 0xff800000})
openat$dsp1(0xffffffffffffff9c, 0x0, 0xaa802, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

10.20943307s ago: executing program 4 (id=257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="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", 0x19c}], 0x1, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil)
recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0)

10.160864056s ago: executing program 1 (id=258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x200000}, 0x1c) (async)
acct(0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0)

8.869278317s ago: executing program 4 (id=261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = socket(0x2c, 0x3, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
dup(r3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)

8.59151812s ago: executing program 3 (id=264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c00000c00180002000000000000e80b0007010700000000000000"], 0x2c}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$key(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x2, 0x17, 0x3, 0x8, 0x4d, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0xb, 0x1, 0x3, 0x1ff}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x28f1, 0x6, {0x6, 0x32, 0x5, 0x7f, 0x0, 0x9, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@local}}, @sadb_x_nat_t_port={0x1, 0x3, 0x4e20}, @sadb_lifetime={0x4, 0x3, 0x6, 0x7fff, 0x9, 0x8}, @sadb_key={0x10, 0x9, 0x3a0, 0x0, "e79b181539136c7441f871e53588db5753151ce2ed584e0f67f72015fac455445a1142e68ec27b26f9f66ab1afb431e501c8ba8f246e18b02b798ee27d3307a0445454a834be3c85b4b8311f0a5b0e52c734a4f239e5fdea41ce4ccb2d2cbace9363089ebe6e3df1d0a877e90564b9184b121c7c"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x7}, @in={0x2, 0x4e22, @private=0xa010102}}, @sadb_key={0x21, 0x9, 0x7d8, 0x0, "933f392b5e4e25fe014d008d38e0f6c2d9d87b9326878db106e97c80763244b7dff986ea2104acda42d972b8742c39d401a9b428738175a42abae49dd9cf0f5b7c591e93e2586dfd5549deec519ef58421a770ab972ecb3e00a9ad992c19ca72d3baeccd8e48234feaa760e2b7b85235937ff33c2ed20fb4cf57a84fbdd8f3f549bf700c6e0d0d57fa07d9479dc0f645c5b01f4ca9dc323b27ded6867fd29a8ca37239786e14d942465280fdfcf32c181d2557d03f6b193396eec7cdef9f23cf750a47a2c5eb1d0401cef5204468f3f3d471cd7dee8527a898871c062ac1c3e3bccd5d6f033a3db5d37717518a3ce771e647882f3b94a92c859902"}]}, 0x268}}, 0x4010014) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000001}, 0x4000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x8800}, 0x40000) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fedbdf25010000000000000007410000004c00180600000575647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8040001)

8.42522413s ago: executing program 1 (id=265):
syz_io_uring_setup(0xa8f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1db}, &(0x7f0000000000), &(0x7f00000000c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040832}, 0xc094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8a, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xcda}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
dup3(0xffffffffffffffff, r7, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

8.389099667s ago: executing program 3 (id=266):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async)
r0 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0) (async, rerun: 32)
prctl$PR_SET_PTRACER(0x59616d61, r0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000600fbb85204a3d08e1cc019ff1f00b60817b900000000000000b4bdc13f093ac49c3dbb71b6c938578ddb07d2c3771dbee9c8b67446ea90db35c07e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.246480259s ago: executing program 3 (id=267):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
ioctl$BLKFRASET(r2, 0x1264, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
sendmsg$tipc(r0, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0xad271c674e210b5d)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x709, 0x0, 0x4, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x709, 0x0, 0x4, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x2c, r9, 0x1, 0x70bd31, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) (async)
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x2c, r9, 0x1, 0x70bd31, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4480}, 0x4800)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xf4, r5, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="ac4f43fcb0"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7d2677289df8"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "b5cab03d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6647acb293b1bdec2319e1e47c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9c8bfe1de6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c393b0eb0a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}], @NL80211_ATTR_SSID={0x22, 0x34, @random="741a73b16b75efac8485f9da739e76113b13d163609dd8a20c4ff49cd16d"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xf4, r5, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="ac4f43fcb0"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7d2677289df8"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "b5cab03d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6647acb293b1bdec2319e1e47c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9c8bfe1de6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c393b0eb0a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}], @NL80211_ATTR_SSID={0x22, 0x34, @random="741a73b16b75efac8485f9da739e76113b13d163609dd8a20c4ff49cd16d"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)

7.799481492s ago: executing program 3 (id=269):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdbc, 0x10, &(0x7f0000000340)={0x3, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x2400)
ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000000))

7.128342139s ago: executing program 0 (id=270):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a05000000000000000000000100070900020073797a32000000000c000b400000000000000003080005400000001108000a40000000020900010073797a3000000000080003400000004408000f"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4004040)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x141)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000300)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180))
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x30)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r4], 0xf8}}, 0x0)
keyctl$clear(0x7, 0xfffffffffffffffb)

6.809389815s ago: executing program 2 (id=273):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0)
chdir(&(0x7f0000000380)='./file1\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.395002841s ago: executing program 0 (id=274):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1, 0x5, 0x7, 0x2)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1], 0x54}}, 0x20004804)

5.113704198s ago: executing program 2 (id=275):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/238, 0xee}], 0x5, &(0x7f0000000500)}, 0x20) (async)
recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/238, 0xee}], 0x5, &(0x7f0000000500)}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.opaque\x00')
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x194, r3, 0x20e, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xcce}, {0x8, 0xb, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2c15}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x601c}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0x3}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20048000}, 0x2000c044) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x194, r3, 0x20e, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xcce}, {0x8, 0xb, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2c15}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x601c}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0x3}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20048000}, 0x2000c044)
fcntl$getownex(r2, 0x10, &(0x7f0000000980)) (async)
fcntl$getownex(r2, 0x10, &(0x7f0000000980)={0x0, <r4=>0x0})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000009c0)) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000009c0)=<r5=>0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x1) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000a00)={r0, r0, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000ac0)={<r8=>0x0, @dev, @dev}, &(0x7f0000000b00)=0xc)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x20040800)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000c40)={<r9=>0x0, 0x4, 0x4000, 0x3}, &(0x7f0000000c80)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000cc0)={<r10=>r9, 0x9, 0x30}, &(0x7f0000000d00)=0xc)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000d40)={r10, 0x5}, &(0x7f0000000d80)=0x8)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x38}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040808) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x38}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040808)
openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x80000, 0x0)
fremovexattr(r2, &(0x7f0000000f00)=@known='system.posix_acl_access\x00')
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
r11 = accept4$ax25(r6, &(0x7f0000000f40)={{}, [@bcast, @rose, @rose, @default, @default, @default, @null, @bcast]}, &(0x7f0000000fc0)=0x48, 0x80000)
ioctl$AUTOFS_IOC_FAIL(r11, 0x9361, 0x10001)
socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x100}]}, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x24004041)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x998}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x88d1)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000012c0), &(0x7f0000001300)=0x4) (async)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000012c0), &(0x7f0000001300)=0x4)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r12)
sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, r13, 0x685fae6ec43fec12, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x6c}}, 0x4000) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, r13, 0x685fae6ec43fec12, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x6c}}, 0x4000)

4.985178526s ago: executing program 0 (id=276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = timerfd_create(0x0, 0x80000)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r3, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r9=>r7, {0xf49c}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{&(0x7f0000000240)="a484948d67c2f1e0609deed903002289d8e159adc542595010dec9e07f76ec38953a68c8d7eba51210a449b3f6354da95166e312693db42e9149db4378f9c19844b63f540e7b5de7d1374f196becac886564dbef9899d4a1b493a824e58a0432010b219345a98c817c", 0x69, 0x1}]}, 0x1, 0x1}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, 0x80000})

4.967077001s ago: executing program 2 (id=277):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x5000000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r2, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRESOCT=r0, @ANYBLOB="1c81140ab651c48bd9e3563c432ed404961cdd2ca432b948f60cb79afbcc313acde5eb45b54228aae120b2e5f79bbb7f"])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50)
r4 = getgid()
chown(&(0x7f00000004c0)='./cgroup\x00', 0x0, r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000973333a726cad9fb85000000030000009500000000000080"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)=0x1)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r7, 0x0, 0x0)
timerfd_create(0x4, 0x0)
openat(r7, &(0x7f0000000000)='./file0\x00', 0x4600, 0x1)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0})
fchdir(r1)
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75801, 0x0)

4.687568514s ago: executing program 4 (id=278):
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[], 0x2a, 0x0)
r1 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
keyctl$read(0xb, r1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x18000, 0x0)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u'])

3.773255769s ago: executing program 0 (id=279):
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x37)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf000000)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x0, 0xe, 0x42474752, 0x47425247, [0x0, 0x3], [0x5, 0x6], 0x1}})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = dup(r7)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
r9 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)

3.703987568s ago: executing program 1 (id=280):
socket$kcm(0x10, 0x2, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
getsockopt(r2, 0x0, 0x100, &(0x7f0000000080)=""/6, &(0x7f00000000c0)=0x6)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
waitid(0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000040)=0xc)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, r4)

3.308915948s ago: executing program 2 (id=281):
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0)
renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001c80)=ANY=[@ANYRESHEX=r3, @ANYRES16=r2, @ANYBLOB="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", @ANYRESDEC=r5, @ANYRES64=r5, @ANYRESHEX=r4], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001c80)=ANY=[@ANYRESHEX=r3, @ANYRES16=r2, @ANYBLOB="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", @ANYRESDEC=r5, @ANYRES64=r5, @ANYRESHEX=r4], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
mknodat(r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10, 0xfffffc00) (async)
mknodat(r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10, 0xfffffc00)
r6 = openat$fb0(0xffffff9c, &(0x7f0000000200), 0x109282, 0x0)
ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000040)={0x2, 0x1, &(0x7f00000047c0)=[0x0], 0x0, 0x0, 0x0})
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r1, 0x0)
shmget(0x3, 0x3000, 0x4, &(0x7f0000002000/0x3000)=nil) (async)
r7 = shmget(0x3, 0x3000, 0x4, &(0x7f0000002000/0x3000)=nil)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0)
shmat(r7, &(0x7f0000002000/0x3000)=nil, 0x2000)

3.148611016s ago: executing program 3 (id=282):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000001c0)=0xffbffffe, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8002}, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite6\x00')
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r11 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r11)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000b00000000000000080000008520000003000000181f0000", @ANYRES32=r5, @ANYBLOB="00c3a4e9d66fb155c860130000000000f667d726a5dd0cdba5c81dca147daf9636f1696c64c680ef2be4b3d3c4e6fa5800"/61], &(0x7f0000000240)='GPL\x00', 0x10001, 0x77, &(0x7f0000000500)=""/119, 0x41000, 0x2, '\x00', 0x0, 0x1a, r10, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x2, 0x8, 0x7}, 0x10, 0x2729f, r11, 0x4, &(0x7f0000000740)=[0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000780)=[{0x2, 0x5, 0x4, 0x5}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x7, 0x2}, {0x4, 0x1, 0x4, 0x6}]}, 0x94)
io_uring_enter(r2, 0x47b8, 0x2669, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0)

3.093621133s ago: executing program 4 (id=283):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e10000001f000000e1ffffe8e800"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
r5 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_ipv6host(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb1)
r6 = socket$tipc(0x1e, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x0)
munmap(&(0x7f0000331000/0x1000)=nil, 0x1000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x3, 0x42711, 0x0, &(0x7f0000000000))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_open_dev$loop(0x0, 0x3, 0x80001)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r8=>0x0}, 0x2082)
write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x400100, 0x0, 0x0, 0x81}}, 0x50)

2.304896373s ago: executing program 0 (id=284):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0xc4b, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000880)=0xfbf, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r2, 0x851, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000003f80)=""/4098, 0x1002)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)

2.215163671s ago: executing program 1 (id=285):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000240))
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='aio\x00', 0x8c000, &(0x7f0000000340)='syz1\x00') (async)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='aio\x00', 0x8c000, &(0x7f0000000340)='syz1\x00')
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
ppoll(&(0x7f0000000000)=[{r0, 0x4230}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa)

1.96139474s ago: executing program 2 (id=286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="ac0900000000ec67838717bd86dd", 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140071d632a049332b7b000005001500050000000d000300686173683a6e657400000000"], 0x5c}}, 0x0)

1.688945411s ago: executing program 4 (id=287):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000000c0)={0x28, 0x10000, 0x0, 0x0, 0x112677, 0x9, 0x2, 0x3f5a32})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
wait4(0x0, &(0x7f0000000080), 0x2, &(0x7f0000000340))
syz_emit_vhci(0x0, 0x16)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000008010900000000000000000700000e0900010073797a30000000000600024088a80000050003002f000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x20000005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

1.215210488s ago: executing program 2 (id=288):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2}, 0x10)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x1, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5)
r6 = dup(r5)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1d000000b9aa0000"], 0x8)
ioctl$SIOCSIFHWADDR(r6, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r1, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa)
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa)
r9 = getpid()
get_robust_list(r9, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000300)={&(0x7f0000000200)}}, &(0x7f00000003c0)=0x18)

261.309932ms ago: executing program 1 (id=289):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rseq(&(0x7f00000006c0), 0x20, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x20000, 0x30, 0x6}, 0x18)
symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f00000002c0)='./file0\x00')
r6 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x800, 0x511000)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6})
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xd}, 0x1c)
r7 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0xfffffedb}, {0x0}], 0x2, 0x7, 0x0, {0x0, r10}})
io_uring_enter(r7, 0x4d10, 0x2, 0x2, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)

260.723929ms ago: executing program 0 (id=290):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x33, 0x0, 0x0)
ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d59a5e9d5150d81}, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f00000000c0))
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 4 (id=291):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4)
mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0))
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000180)={0x6c7, <r2=>r1, 0x1})
getdents64(r2, &(0x7f00000001c0)=""/69, 0x45)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000280)={0x7, 0x7, 0x2, {0x6, 0x9}, 0xfffffff9, 0x3})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0x65d1eead5144ed9b})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000340)={0xc7, 0x0, 0x1})
r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x400, 0x91)
fchmodat(r4, &(0x7f0000000400)='./file0\x00', 0x13e)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0x10001, r1, 0x10, {0x4, 0x6d311ec4}}, 0x1)
r5 = syz_open_dev$video(&(0x7f0000000480), 0xb0, 0x10000)
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000500)={0x9b0000, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9b0960, 0x0, '\x00', @value=0x1000}})
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x402000, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001740)={0x2, 0x1, &(0x7f0000000580)=""/172, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=""/234, 0xeeee8000})
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000001a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1e0, 0x1, 0x1, 0x307, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0xd4, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x24}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x12}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x621}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4b4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x108}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x628}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000840)
r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001bc0))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000001c00)=0x3)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001c40)={r6}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001c80)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x9}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}], 0x84)
ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, &(0x7f0000001d40)=""/216)
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001e40)={'gre0\x00'})
truncate(&(0x7f0000001e80)='./file1\x00', 0x8000)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[   75.643365][ T5822] cgroup: Unknown subsys name 'net'
[   75.774339][ T5822] cgroup: Unknown subsys name 'cpuset'
[   75.783155][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.161991][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.774038][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.782333][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.799641][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.807492][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.815283][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.823668][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.831549][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.838863][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.845668][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.847669][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.860381][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.860834][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.868793][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.875726][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.892135][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.892446][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.907734][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.916280][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.919424][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.943860][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.959968][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.968007][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.976236][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.009662][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.021121][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.615987][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   82.794070][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   82.996986][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.004933][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.012426][ T5843] bridge_slave_0: entered allmulticast mode
[   83.019484][ T5843] bridge_slave_0: entered promiscuous mode
[   83.042882][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   83.084036][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.091853][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.099132][ T5843] bridge_slave_1: entered allmulticast mode
[   83.106101][ T5843] bridge_slave_1: entered promiscuous mode
[   83.127428][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   83.173086][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.180500][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.187735][ T5835] bridge_slave_0: entered allmulticast mode
[   83.196299][ T5835] bridge_slave_0: entered promiscuous mode
[   83.232032][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.239390][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.246597][ T5835] bridge_slave_1: entered allmulticast mode
[   83.254500][ T5835] bridge_slave_1: entered promiscuous mode
[   83.325204][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.350974][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   83.365241][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.377880][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.424828][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.525677][ T5843] team0: Port device team_slave_0 added
[   83.554892][ T5835] team0: Port device team_slave_0 added
[   83.561108][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.570556][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.577690][ T5832] bridge_slave_0: entered allmulticast mode
[   83.584909][ T5832] bridge_slave_0: entered promiscuous mode
[   83.595884][ T5843] team0: Port device team_slave_1 added
[   83.623013][ T5835] team0: Port device team_slave_1 added
[   83.629104][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.636268][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.646031][ T5832] bridge_slave_1: entered allmulticast mode
[   83.654414][ T5832] bridge_slave_1: entered promiscuous mode
[   83.746285][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.753640][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.760917][ T5844] bridge_slave_0: entered allmulticast mode
[   83.767954][ T5844] bridge_slave_0: entered promiscuous mode
[   83.807272][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.820233][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.830478][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.837429][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.864082][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.876074][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.883412][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.890687][ T5844] bridge_slave_1: entered allmulticast mode
[   83.897652][ T5844] bridge_slave_1: entered promiscuous mode
[   83.917920][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.925032][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.951647][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.974281][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.981668][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.008755][ T5849] Bluetooth: hci3: command tx timeout
[   84.012408][   T51] Bluetooth: hci1: command tx timeout
[   84.014435][ T5849] Bluetooth: hci2: command tx timeout
[   84.025335][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.049128][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.056289][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.063943][ T5839] bridge_slave_0: entered allmulticast mode
[   84.071210][ T5839] bridge_slave_0: entered promiscuous mode
[   84.079629][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.086783][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.094062][ T5839] bridge_slave_1: entered allmulticast mode
[   84.100164][ T5849] Bluetooth: hci0: command tx timeout
[   84.100182][   T51] Bluetooth: hci4: command tx timeout
[   84.102377][ T5839] bridge_slave_1: entered promiscuous mode
[   84.119075][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.126036][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.152303][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.215353][ T5832] team0: Port device team_slave_0 added
[   84.225781][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.251884][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.266463][ T5832] team0: Port device team_slave_1 added
[   84.275194][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.314147][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.427484][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.434614][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.461166][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.473214][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.480210][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.506195][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.522269][ T5844] team0: Port device team_slave_0 added
[   84.531325][ T5844] team0: Port device team_slave_1 added
[   84.543051][ T5835] hsr_slave_0: entered promiscuous mode
[   84.549484][ T5835] hsr_slave_1: entered promiscuous mode
[   84.560573][ T5839] team0: Port device team_slave_0 added
[   84.571219][ T5843] hsr_slave_0: entered promiscuous mode
[   84.577441][ T5843] hsr_slave_1: entered promiscuous mode
[   84.583843][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.591913][ T5843] Cannot create hsr debugfs directory
[   84.630521][ T5839] team0: Port device team_slave_1 added
[   84.667427][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.675112][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.701712][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.762493][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.771619][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.798218][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.818515][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.825494][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.851556][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.910192][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.917176][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.943315][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.041179][ T5832] hsr_slave_0: entered promiscuous mode
[   85.047651][ T5832] hsr_slave_1: entered promiscuous mode
[   85.059029][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.066608][ T5832] Cannot create hsr debugfs directory
[   85.115427][ T5839] hsr_slave_0: entered promiscuous mode
[   85.122372][ T5839] hsr_slave_1: entered promiscuous mode
[   85.128873][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.136441][ T5839] Cannot create hsr debugfs directory
[   85.205387][ T5844] hsr_slave_0: entered promiscuous mode
[   85.213335][ T5844] hsr_slave_1: entered promiscuous mode
[   85.219823][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.227413][ T5844] Cannot create hsr debugfs directory
[   85.632471][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.670646][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.701740][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.749592][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.799578][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.818452][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.842001][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.856994][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.925718][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.960138][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.971260][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.992037][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.070172][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.085841][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.092687][ T5849] Bluetooth: hci1: command tx timeout
[   86.092727][ T5849] Bluetooth: hci3: command tx timeout
[   86.099255][ T5849] Bluetooth: hci2: command tx timeout
[   86.125896][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.151732][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.168743][ T5849] Bluetooth: hci0: command tx timeout
[   86.168750][   T51] Bluetooth: hci4: command tx timeout
[   86.258511][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.286249][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.314610][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   86.322540][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.334515][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.358889][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.383789][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.415213][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.422491][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.460622][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   86.469713][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.476817][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.520653][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.527845][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.543274][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.550438][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.769832][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.792754][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.812554][   T43] cfg80211: failed to load regulatory.db
[   86.821662][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.877599][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   86.896144][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   86.925547][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   86.953404][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.960635][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.973898][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.981529][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.042105][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.049323][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.065101][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.072327][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.085824][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.093048][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.123044][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.130285][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.212864][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.284375][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.493213][ T5843] veth0_vlan: entered promiscuous mode
[   87.536752][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.551235][ T5843] veth1_vlan: entered promiscuous mode
[   87.585772][ T5835] veth0_vlan: entered promiscuous mode
[   87.624804][ T5835] veth1_vlan: entered promiscuous mode
[   87.755493][ T5843] veth0_macvtap: entered promiscuous mode
[   87.785436][ T5843] veth1_macvtap: entered promiscuous mode
[   87.845288][ T5835] veth0_macvtap: entered promiscuous mode
[   87.882998][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.916011][ T5835] veth1_macvtap: entered promiscuous mode
[   87.947602][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.976380][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.003922][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.026395][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.055703][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.067317][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.079103][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.087851][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.097639][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.115592][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.131795][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.140702][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.150586][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.168942][ T5849] Bluetooth: hci2: command tx timeout
[   88.169750][   T51] Bluetooth: hci3: command tx timeout
[   88.174372][ T5849] Bluetooth: hci1: command tx timeout
[   88.248600][ T5849] Bluetooth: hci4: command tx timeout
[   88.259052][ T5849] Bluetooth: hci0: command tx timeout
[   88.312722][ T5844] veth0_vlan: entered promiscuous mode
[   88.326094][ T5844] veth1_vlan: entered promiscuous mode
[   88.374120][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.392446][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.442371][ T5832] veth0_vlan: entered promiscuous mode
[   88.476580][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.484811][ T5832] veth1_vlan: entered promiscuous mode
[   88.490877][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.515610][ T5839] veth0_vlan: entered promiscuous mode
[   88.571619][ T5844] veth0_macvtap: entered promiscuous mode
[   88.580158][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.602228][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.615449][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.659061][ T5844] veth1_macvtap: entered promiscuous mode
[   88.671747][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.682542][ T5839] veth1_vlan: entered promiscuous mode
[   88.697277][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.752253][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.778024][ T5832] veth0_macvtap: entered promiscuous mode
[   88.805532][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.833061][ T5832] veth1_macvtap: entered promiscuous mode
[   88.852043][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.873909][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.903989][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.935341][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.362681][ T5839] veth0_macvtap: entered promiscuous mode
[   89.426627][ T5839] veth1_macvtap: entered promiscuous mode
[   89.473658][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.571311][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.628854][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.696609][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.706522][ T5965] sysfs: cannot create duplicate filename '/module/raw_gadget'
[   89.707068][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.714761][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.1.6 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[   89.714784][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   89.714800][ T5965] Call Trace:
[   89.714811][ T5965]  <TASK>
[   89.714819][ T5965]  dump_stack_lvl+0x189/0x250
[   89.714853][ T5965]  ? kernfs_path_from_node+0x2c/0x260
[   89.714877][ T5965]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.714897][ T5965]  ? __pfx__printk+0x10/0x10
[   89.714922][ T5965]  ? kernfs_path_from_node+0x2c/0x260
[   89.714943][ T5965]  ? kernfs_path_from_node+0x2c/0x260
[   89.714966][ T5965]  ? kernfs_path_from_node+0x22c/0x260
[   89.714986][ T5965]  ? kernfs_path_from_node+0x2c/0x260
[   89.715010][ T5965]  sysfs_create_dir_ns+0x259/0x280
[   89.715035][ T5965]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   89.715064][ T5965]  ? do_raw_spin_unlock+0x122/0x240
[   89.715093][ T5965]  kobject_add_internal+0x59f/0xb40
[   89.715124][ T5965]  kobject_init_and_add+0x125/0x190
[   89.715152][ T5965]  ? __pfx_kobject_init_and_add+0x10/0x10
[   89.715176][ T5965]  ? __kasan_kmalloc+0x93/0xb0
[   89.715194][ T5965]  ? __kmalloc_cache_noprof+0x230/0x3d0
[   89.715212][ T5965]  ? lookup_or_create_module_kobject+0x75/0x170
[   89.715238][ T5965]  lookup_or_create_module_kobject+0xe3/0x170
[   89.715262][ T5965]  module_add_driver+0xb9/0x310
[   89.715285][ T5965]  bus_add_driver+0x391/0x640
[   89.715316][ T5965]  driver_register+0x23a/0x320
[   89.715339][ T5965]  usb_gadget_register_driver_owner+0xf9/0x270
[   89.715373][ T5965]  raw_ioctl+0x149a/0x3c90
[   89.715401][ T5965]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   89.715422][ T5965]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   89.715442][ T5965]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[   89.715460][ T5965]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   89.715480][ T5965]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   89.715497][ T5965]  ? smack_log+0xef/0x3f0
[   89.715520][ T5965]  ? __pfx_raw_ioctl+0x10/0x10
[   89.715549][ T5965]  ? smk_access+0x14c/0x4e0
[   89.715580][ T5965]  ? __lock_acquire+0xab9/0xd20
[   89.715600][ T5965]  ? __asan_memset+0x22/0x50
[   89.715625][ T5965]  ? smack_file_ioctl+0x24a/0x340
[   89.715645][ T5965]  ? __pfx_smack_file_ioctl+0x10/0x10
[   89.715672][ T5965]  ? __fget_files+0x2a/0x420
[   89.715691][ T5965]  ? __fget_files+0x3a0/0x420
[   89.715710][ T5965]  ? __fget_files+0x2a/0x420
[   89.715733][ T5965]  ? bpf_lsm_file_ioctl+0x9/0x20
[   89.715755][ T5965]  ? __pfx_raw_ioctl+0x10/0x10
[   89.715779][ T5965]  __se_sys_ioctl+0xfc/0x170
[   89.715807][ T5965]  do_syscall_64+0xfa/0x3b0
[   89.715827][ T5965]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.715846][ T5965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.715864][ T5965]  ? clear_bhb_loop+0x60/0xb0
[   89.715886][ T5965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.715904][ T5965] RIP: 0033:0x7fa55858e7eb
[   89.715925][ T5965] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   89.715940][ T5965] RSP: 002b:00007fa55949bf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.715960][ T5965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa55858e7eb
[   89.715973][ T5965] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[   89.715984][ T5965] RBP: 00007fa55949cfe0 R08: 0000000000000000 R09: 00312e6364755f79
[   89.715997][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.716007][ T5965] R13: 00007fa55949bfb0 R14: 0000200000000040 R15: 00007fa5588e0320
[   89.716036][ T5965]  </TASK>
[   89.716069][ T5965] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory.
[   89.729226][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.768910][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.108128][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.116889][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.136918][ T5965] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable.
[   90.180001][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.201061][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.231147][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.249020][ T5849] Bluetooth: hci3: command tx timeout
[   90.249070][   T51] Bluetooth: hci2: command tx timeout
[   90.254891][ T5849] Bluetooth: hci1: command tx timeout
[   90.285818][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.288431][ T5926] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.325487][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.334585][ T5842] Bluetooth: hci0: command tx timeout
[   90.334636][ T5842] Bluetooth: hci4: command tx timeout
[   90.346283][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.359476][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.369542][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.459086][ T5926] usb 2-1: Using ep0 maxpacket: 16
[   90.496090][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.559367][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.611204][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.658377][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   90.685074][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.696035][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   90.707953][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.835948][ T5926] usb 2-1: config 0 descriptor??
[   90.963088][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.997948][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.045863][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.064341][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.070123][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.086706][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.106820][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   91.157043][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.189800][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.358177][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   91.399371][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   91.408250][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   91.419859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   91.538186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   91.608481][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   91.623827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   91.727122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   91.868328][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   92.218844][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.226775][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.695529][ T5991] netlink: 'syz.3.9': attribute type 1 has an invalid length.
[   92.703586][ T5991] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9'.
[   92.894935][ T5926] usbhid 2-1:0.0: can't add hid device: -71
[   92.929947][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   92.980379][ T5926] usb 2-1: USB disconnect, device number 2
[   94.448425][ T6025] tipc: Started in network mode
[   94.453436][ T6025] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   94.461029][ T6025] tipc: Enabled bearer <eth:vlan0>, priority 10
[   94.477565][ T6025] lo speed is unknown, defaulting to 1000
[   94.483590][ T6025] lo speed is unknown, defaulting to 1000
[   94.494083][ T6025] lo speed is unknown, defaulting to 1000
[   94.506710][ T6025] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.537869][ T6025] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   94.591468][ T6025] lo speed is unknown, defaulting to 1000
[   94.602559][ T6025] lo speed is unknown, defaulting to 1000
[   94.707758][ T6025] lo speed is unknown, defaulting to 1000
[   94.715654][ T6025] lo speed is unknown, defaulting to 1000
[   94.725537][ T6025] lo speed is unknown, defaulting to 1000
[   95.586540][    T9] tipc: Node number set to 10005162
[   96.106668][ T6037] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   96.467071][ T6044] process 'syz.4.21' launched '/dev/fd/3' with NULL argv: empty string added
[   96.597797][ T6049] =======================================================
[   96.597797][ T6049] WARNING: The mand mount option has been deprecated and
[   96.597797][ T6049]          and is ignored by this kernel. Remove the mand
[   96.597797][ T6049]          option from the mount to silence this warning.
[   96.597797][ T6049] =======================================================
[   96.795370][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24'.
[   96.919019][ T6063] Zero length message leads to an empty skb
[   98.018726][ T6080] ubi31: attaching mtd0
[   98.025526][ T6080] ubi31: scanning is finished
[   98.030311][ T6080] ubi31: empty MTD device detected
[   98.257609][ T5975] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   98.331902][ T6080] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   98.339600][ T6080] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   98.346922][ T6080] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   98.354005][ T6080] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   98.361527][ T6080] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   98.368541][ T6080] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   98.376642][ T6080] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3955342084
[   98.388288][ T5975] usb 3-1: device descriptor read/64, error -71
[   98.394592][ T6080] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   98.416453][ T6083] ubi31: background thread "ubi_bgt31d" started, PID 6083
[   98.491082][ T6086] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   98.628804][ T5975] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   98.788346][ T5975] usb 3-1: device descriptor read/64, error -71
[   98.812251][ T6092] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   99.806401][ T3203] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.814921][ T5975] usb usb3-port1: attempt power cycle
[  100.378165][ T3203] usb 1-1: Using ep0 maxpacket: 8
[  100.402164][ T3203] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.421545][ T3203] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  100.449465][ T3203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.475392][ T3203] usb 1-1: config 0 descriptor??
[  100.688136][ T5926] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  100.850213][ T5926] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  100.903460][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.064989][ T5926] usb 5-1: config 0 descriptor??
[  101.124398][ T5926] cp210x 5-1:0.0: cp210x converter detected
[  101.637166][ T5926] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  101.781677][ T5926] usb 5-1: cp210x converter now attached to ttyUSB0
[  102.071139][ T5975] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.112407][ T3203] usbhid 1-1:0.0: can't add hid device: -71
[  102.126243][ T3203] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  102.231561][ T5936] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.387387][ T3203] usb 1-1: USB disconnect, device number 2
[  102.548217][ T5975] usb 2-1: Using ep0 maxpacket: 32
[  102.551443][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.555232][ T5975] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  102.574272][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.580071][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  102.585836][ T5975] usb 2-1: config 0 has no interface number 0
[  102.600814][ T5975] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  102.612247][ T5975] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  102.657007][ T6134] ubi: mtd0 is already attached to ubi31
[  103.153780][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  103.171853][ T5936] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  103.181141][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.189308][ T5936] usb 3-1: Product: syz
[  103.193554][ T5936] usb 3-1: Manufacturer: syz
[  103.210542][ T5975] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  103.223316][ T5975] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  103.237411][ T5975] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  103.238959][ T5926] usb 5-1: USB disconnect, device number 2
[  103.251419][ T5975] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  103.268383][ T5975] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 101, changing to 10
[  103.270405][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  103.302409][ T5936] usb 3-1: SerialNumber: syz
[  103.315539][ T5975] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25461, setting to 1024
[  103.318005][ T5936] usb 3-1: config 0 descriptor??
[  103.335129][ T5975] usb 2-1: config 0 interface 239 has no altsetting 0
[  103.353141][ T5975] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  103.367372][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.383508][ T5975] usb 2-1: Product: syz
[  103.387911][ T5975] usb 2-1: Manufacturer: syz
[  103.394822][ T5975] usb 2-1: SerialNumber: syz
[  103.412763][ T5975] usb 2-1: config 0 descriptor??
[  103.427196][ T6124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  103.434992][ T6124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  103.573262][ T5926] cp210x 5-1:0.0: device disconnected
[  103.637516][ T6139] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  103.671126][ T5849] Bluetooth: hci5: BCM: Reset failed (-71)
[  103.673204][ T5936] usb 2-1: USB disconnect, device number 3
[  104.518357][ T3203] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  104.658366][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.678934][ T3203] usb 2-1: Using ep0 maxpacket: 32
[  104.686568][ T3203] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.696892][ T5926] usb 3-1: USB disconnect, device number 5
[  104.701732][ T3203] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.717098][ T3203] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  104.727032][ T3203] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  104.743180][ T3203] usb 2-1: Product: syz
[  104.757850][ T3203] usb 2-1: Manufacturer: syz
[  104.774879][ T3203] hub 2-1:4.0: USB hub found
[  104.830333][ T5913] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  104.863096][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.875420][ T5913] usb 4-1: config 0 descriptor??
[  104.884625][ T5913] cp210x 4-1:0.0: cp210x converter detected
[  105.139460][ T3203] hub 2-1:4.0: 2 ports detected
[  105.528258][ T5913] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -121
[  105.564075][ T5913] usb 4-1: cp210x converter now attached to ttyUSB0
[  105.628257][ T6157] program syz.4.57 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.741597][   T43] usb 4-1: USB disconnect, device number 2
[  105.753215][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  105.788384][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.972918][   T43] cp210x 4-1:0.0: device disconnected
[  106.276005][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  106.283077][ T5905] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  106.308122][ T5905] usb 1-1: config 0 has no interface number 0
[  106.347856][ T5905] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  106.571103][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.847408][ T5905] usb 1-1: Product: syz
[  107.004986][   T43] hub 2-1:4.0: activate --> -90
[  107.027919][ T5905] usb 1-1: Manufacturer: syz
[  107.033782][ T5905] usb 1-1: SerialNumber: syz
[  107.059220][ T5905] usb 1-1: config 0 descriptor??
[  107.073232][ T5905] smsc95xx v2.0.0
[  107.212798][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.221867][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.232486][   T43] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  107.252141][   T43] usb 2-1: USB disconnect, device number 4
[  107.258976][ T3203] usb 2-1: Failed to suspend device, error -19
[  107.461553][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  107.620146][ T5913] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  107.630666][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.642119][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.651428][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.659489][ T5913] usb 5-1: Product: syz
[  107.663782][ T5913] usb 5-1: Manufacturer: syz
[  107.668434][ T5913] usb 5-1: SerialNumber: syz
[  107.813447][ T3203] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  108.032011][ T5905] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  108.052058][ T5905] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  108.140454][ T6197] ubi: mtd0 is already attached to ubi31
[  108.787333][ T6201] xt_recent: hitcount (1048576) is larger than allowed maximum (65535)
[  108.943109][ T5913] usb 5-1: 0:2 : does not exist
[  109.010110][ T5913] usb 5-1: USB disconnect, device number 3
[  109.153613][ T6204] overlay: Unknown parameter 'euid<00000000000000000000'
[  109.271888][ T3203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  109.283204][ T5905] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  109.305599][ T3203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.316055][ T5905] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  109.328492][ T3203] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  109.337573][ T3203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.347365][ T5905] usb 1-1: USB disconnect, device number 3
[  109.363637][ T3203] usb 3-1: config 0 descriptor??
[  109.641628][ T3203] usbhid 3-1:0.0: can't add hid device: -71
[  109.655947][ T3203] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  109.672095][ T3203] usb 3-1: USB disconnect, device number 6
[  110.043656][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  110.778137][    T9] usb 4-1: Using ep0 maxpacket: 16
[  110.787258][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.798509][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.808462][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  110.914104][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  110.927743][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.947707][    T9] usb 4-1: config 0 descriptor??
[  111.438143][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.451642][    T9] hid (null): invalid report_size 29545
[  111.463996][    T9] hid (null): report_id 0 is invalid
[  111.469599][    T9] hid (null): unknown global tag 0xd
[  111.474931][    T9] hid (null): invalid report_size 10717
[  111.480627][    T9] hid (null): invalid report_count 64132
[  111.565506][ T6249] xt_recent: hitcount (1048576) is larger than allowed maximum (65535)
[  111.608308][ T5926] usb 3-1: Using ep0 maxpacket: 32
[  111.627905][ T5926] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  111.710295][ T5926] usb 3-1: config 0 has no interface number 0
[  111.830828][    T9] usb 4-1: USB disconnect, device number 3
[  111.862126][ T5926] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  111.969387][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.167475][ T6244] fscrypt: Error allocating hmac(sha512): -2
[  112.174213][ T5926] usb 3-1: Product: syz
[  112.181483][ T5926] usb 3-1: Manufacturer: syz
[  112.186128][ T5926] usb 3-1: SerialNumber: syz
[  112.195802][ T5926] usb 3-1: config 0 descriptor??
[  112.203648][ T5926] smsc95xx v2.0.0
[  112.463017][ T6258] syz.3.86: attempt to access beyond end of device
[  112.463017][ T6258] loop3: rw=0, sector=64, nr_sectors = 1 limit=0
[  112.495980][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.574698][ T6258] syz.3.86: attempt to access beyond end of device
[  112.574698][ T6258] loop3: rw=0, sector=256, nr_sectors = 1 limit=0
[  112.595705][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  112.638699][ T6258] syz.3.86: attempt to access beyond end of device
[  112.638699][ T6258] loop3: rw=0, sector=512, nr_sectors = 1 limit=0
[  112.638814][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  112.638833][ T6258] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  112.638855][ T6258] UDF-fs: Scanning with blocksize 512 failed
[  112.640022][ T6258] syz.3.86: attempt to access beyond end of device
[  112.640022][ T6258] loop3: rw=0, sector=64, nr_sectors = 2 limit=0
[  112.698167][ T5936] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  112.721801][ T6258] syz.3.86: attempt to access beyond end of device
[  112.721801][ T6258] loop3: rw=0, sector=512, nr_sectors = 2 limit=0
[  112.738399][ T5905] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  112.747501][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.765533][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  112.783641][ T5905] usb 2-1: config 0 descriptor??
[  112.792625][ T5905] gspca_main: cpia1-2.14.0 probing 0813:0001
[  112.803393][ T6258] syz.3.86: attempt to access beyond end of device
[  112.803393][ T6258] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  112.817012][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  112.834535][ T6258] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  112.842381][ T6258] UDF-fs: Scanning with blocksize 1024 failed
[  112.854798][ T6258] syz.3.86: attempt to access beyond end of device
[  112.854798][ T6258] loop3: rw=0, sector=64, nr_sectors = 4 limit=0
[  112.867981][ T6258] syz.3.86: attempt to access beyond end of device
[  112.867981][ T6258] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  112.892855][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  112.903890][ T6258] syz.3.86: attempt to access beyond end of device
[  112.903890][ T6258] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  112.921492][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  112.945391][ T6258] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  112.953839][ T6258] UDF-fs: Scanning with blocksize 2048 failed
[  112.964423][ T6258] syz.3.86: attempt to access beyond end of device
[  112.964423][ T6258] loop3: rw=0, sector=64, nr_sectors = 8 limit=0
[  112.991763][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  113.002214][ T6258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  113.012372][ T6258] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  113.024987][ T5926] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  113.050142][ T6258] UDF-fs: Scanning with blocksize 4096 failed
[  113.056500][ T5926] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  113.075201][ T6258] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  113.287663][ T6276] ubi: mtd0 is already attached to ubi31
[  113.892973][ T5905] gspca_cpia1: usb_control_msg 05, error -110
[  113.951256][ T5926] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  113.953815][ T5905] gspca_cpia1: usb_control_msg 01, error -32
[  113.972760][ T5905] gspca_cpia1: usb_control_msg 01, error -32
[  113.988460][ T5905] gspca_cpia1: usb_control_msg 01, error -32
[  113.993642][ T5926] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  114.072556][ T5905] gspca_cpia1: usb_control_msg 01, error -32
[  114.114723][ T5926] usb 3-1: USB disconnect, device number 7
[  114.118594][ T5905] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  114.505048][   T30] audit: type=1326 audit(1755918423.995:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.3.92" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97fd18ebe9 code=0x0
[  114.728312][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.196131][    T9] usb 5-1: device descriptor read/64, error -71
[  115.645542][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  115.896638][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'.
[  116.074569][    T9] usb 5-1: device descriptor read/64, error -71
[  116.185159][ T5926] usb 2-1: USB disconnect, device number 5
[  116.289481][    T9] usb usb5-port1: attempt power cycle
[  116.322423][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[  116.351390][ T6306] mmap: syz.1.97 (6306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.589209][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  116.662862][ T6312] fuse: Unknown parameter '87�h‹ú¼.	ªx–lž’6R†®
'
[  116.724448][ T6312] warning: `syz.4.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.740552][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'.
[  116.751216][   T30] audit: type=1326 audit(1755918426.245:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6311 comm="syz.4.99" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe95998ebe9 code=0x0
[  116.773765][ T5913] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  116.783268][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.797002][ T5913] usb 3-1: config 0 descriptor??
[  116.822411][ T5913] cp210x 3-1:0.0: cp210x converter detected
[  116.978397][   T92] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.098324][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  117.131920][   T92] usb 1-1: Using ep0 maxpacket: 16
[  117.143839][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.160808][   T92] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  117.174738][   T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.193960][   T92] usb 1-1: config 0 descriptor??
[  117.229000][ T5913] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  117.248130][ T5898] usb 4-1: Using ep0 maxpacket: 32
[  117.350068][ T5898] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  117.358616][ T5898] usb 4-1: config 0 has no interface number 0
[  117.367629][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  117.377313][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.385599][ T5898] usb 4-1: Product: syz
[  117.390253][ T5898] usb 4-1: Manufacturer: syz
[  117.395012][ T5898] usb 4-1: SerialNumber: syz
[  117.406818][ T5898] usb 4-1: config 0 descriptor??
[  117.416054][ T5898] smsc95xx v2.0.0
[  117.504664][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[  118.267599][   T92] usbhid 1-1:0.0: can't add hid device: -71
[  119.253298][ T5913] usb 3-1: cp210x converter now attached to ttyUSB0
[  119.260488][   T92] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  119.508422][   T92] usb 1-1: USB disconnect, device number 4
[  119.509340][ T5898] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  119.526483][ T5898] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  119.567673][ T5913] usb 3-1: USB disconnect, device number 8
[  119.602264][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  119.648486][ T5913] cp210x 3-1:0.0: device disconnected
[  119.835123][ T5898] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  119.850360][ T5898] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  119.863761][ T5898] usb 4-1: USB disconnect, device number 5
[  120.009874][ T6351] ubi: mtd0 is already attached to ubi31
[  120.624004][ T6344] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  120.788322][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  120.958674][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  120.966725][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  120.975845][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.996150][ T5913] usb 3-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[  121.005415][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.015015][ T5913] usb 3-1: Product: syz
[  121.020491][ T5913] usb 3-1: Manufacturer: syz
[  121.025106][ T5913] usb 3-1: SerialNumber: syz
[  121.032813][ T5913] usb 3-1: config 0 descriptor??
[  121.058944][ T5898] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  121.117742][ T6368] ipvlan0: entered allmulticast mode
[  121.126412][ T6368] veth0_vlan: entered allmulticast mode
[  121.262585][ T5913] usb 3-1: USB disconnect, device number 9
[  122.289769][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.305629][ T5898] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  122.315244][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.327391][ T5898] usb 1-1: config 0 descriptor??
[  122.924227][ T5898] petalynx 0003:18B1:0037.0002: item fetching failed at offset 0/2
[  122.932832][ T5898] petalynx 0003:18B1:0037.0002: parse failed
[  122.939109][ T5898] petalynx 0003:18B1:0037.0002: probe with driver petalynx failed with error -22
[  123.752287][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  123.777010][ T6399] tipc: Started in network mode
[  123.783812][ T6399] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  123.791486][ T6399] tipc: Enabled bearer <eth:vlan0>, priority 10
[  123.798867][ T6399] siw: device registration error -23
[  123.921822][ T5905] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  123.951651][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.977754][ T6406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.104370][ T5905] usb 2-1: config 0 descriptor??
[  124.140833][ T5905] cp210x 2-1:0.0: cp210x converter detected
[  124.173770][ T6408] overlayfs: missing 'lowerdir'
[  124.575324][ T5905] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  124.941580][ T5898] tipc: Node number set to 10005162
[  125.029835][ T5905] usb 2-1: cp210x converter now attached to ttyUSB0
[  125.033575][ T6412] capability: warning: `syz.2.123' uses 32-bit capabilities (legacy support in use)
[  125.066813][ T5905] usb 1-1: USB disconnect, device number 5
[  125.078888][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[  125.300316][ T5913] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  125.396968][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'.
[  125.420504][ T5905] usb 2-1: USB disconnect, device number 6
[  125.453844][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  125.488181][ T5913] usb 3-1: device descriptor read/64, error -71
[  125.508373][ T5905] cp210x 2-1:0.0: device disconnected
[  125.595732][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'.
[  125.612234][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'.
[  125.738525][ T5913] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  125.888128][ T5913] usb 3-1: device descriptor read/64, error -71
[  126.048251][ T5913] usb usb3-port1: attempt power cycle
[  127.176074][ T5913] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  127.208619][ T5913] usb 3-1: device descriptor read/8, error -71
[  127.345231][ T6453] input: syz1 as /devices/virtual/input/input6
[  127.781784][ T5913] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  128.063082][ T5913] usb 3-1: device not accepting address 13, error -71
[  128.127503][ T5913] usb usb3-port1: unable to enumerate USB device
[  128.277251][ T6461] xt_recent: hitcount (1048576) is larger than allowed maximum (65535)
[  128.906169][ T6465] capability: warning: `syz.0.137' uses deprecated v2 capabilities in a way that may be insecure
[  129.430943][ T6476] netlink: 'syz.3.141': attribute type 21 has an invalid length.
[  129.453735][ T6476] netlink: 128 bytes leftover after parsing attributes in process `syz.3.141'.
[  129.462317][ T6474] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  129.483363][ T6476] netlink: 3 bytes leftover after parsing attributes in process `syz.3.141'.
[  129.679434][ T6483] Falling back ldisc for ptm0.
[  129.910772][ T6496] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  129.953320][ T6497] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  130.260232][ T6502] xt_recent: hitcount (1048576) is larger than allowed maximum (65535)
[  130.719780][ T5905] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  131.070245][ T5905] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  131.275158][ T5905] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.371050][ T5905] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.383983][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0
[  131.390651][ T5905] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  131.418108][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.512977][ T5905] usb 2-1: config 0 descriptor??
[  131.705802][ T6523] input: syz0 as /devices/virtual/input/input7
[  132.264748][ T5905] uclogic 0003:2179:0077.0003: interface is invalid, ignoring
[  132.781079][   T92] usb 2-1: USB disconnect, device number 7
[  133.071457][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  133.077988][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.228249][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  133.489246][    T9] usb 1-1: Using ep0 maxpacket: 32
[  133.856361][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.908106][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.933399][    T9] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  133.945508][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.147172][    T9] usb 1-1: config 0 descriptor??
[  134.288132][ T5905] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  134.460445][ T5905] usb 5-1: config index 0 descriptor too short (expected 28708, got 36)
[  134.484630][ T5905] usb 5-1: config 241 has too many interfaces: 33, using maximum allowed: 32
[  134.525459][ T5905] usb 5-1: config 241 has an invalid descriptor of length 184, skipping remainder of the config
[  134.557925][ T5905] usb 5-1: config 241 has 0 interfaces, different from the descriptor's value: 33
[  134.579242][ T5905] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  134.598187][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.725221][    T9] smartjoyplus 0003:0925:8866.0004: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0
[  134.743752][    T9] smartjoyplus 0003:0925:8866.0004: Force feedback for SmartJoy PLUS PS2/USB adapter
[  134.916456][   T43] usb 1-1: USB disconnect, device number 6
[  135.163694][   T92] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  135.740691][ T6590] kernel read not supported for file /!se÷ih,i¬PælNnuxselinux (pid: 6590 comm: syz.0.172)
[  135.755148][   T30] audit: type=1800 audit(1755918445.245:4): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.172" name=217365F769682C1769AC50E66C4E6E757873656C696E7578 dev="mqueue" ino=10206 res=0 errno=0
[  135.778376][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.818700][ T6590] 9pnet: Could not find request transport: fw
[  135.948439][   T43] usb 4-1: Using ep0 maxpacket: 32
[  135.988917][   T92] usb 3-1: device descriptor read/64, error -71
[  135.992324][   T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.009399][   T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  136.029622][ T5975] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  136.120025][   T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.146590][   T43] usb 4-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3
[  136.208671][   T43] usb 4-1: Product: syz
[  136.216019][   T43] usb 4-1: Manufacturer: syz
[  136.242682][   T43] usb 4-1: SerialNumber: syz
[  136.258588][ T5975] usb 2-1: Using ep0 maxpacket: 32
[  136.398570][   T92] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  136.459043][ T5975] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  136.504357][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.513902][ T5975] usb 2-1: Product: syz
[  136.521148][ T5975] usb 2-1: Manufacturer: syz
[  136.526751][ T5975] usb 2-1: SerialNumber: syz
[  136.595987][ T5975] usb 2-1: config 0 descriptor??
[  136.634039][ T6583] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  136.648406][   T92] usb 3-1: device descriptor read/64, error -71
[  136.768457][   T92] usb usb3-port1: attempt power cycle
[  136.888741][   T43] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  136.903647][   T43] cdc_ncm 4-1:1.0: bind() failure
[  136.928807][   T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  136.941713][ T5975] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  136.950764][   T43] cdc_ncm 4-1:1.1: bind() failure
[  137.004610][ T5975] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  137.093461][ T6605] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  137.298365][   T92] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  137.378537][   T92] usb 3-1: device descriptor read/8, error -71
[  137.423620][ T5905] usb 5-1: string descriptor 0 read error: -71
[  137.468293][ T5905] usb 5-1: USB disconnect, device number 7
[  137.519349][ T6607] lo speed is unknown, defaulting to 1000
[  137.710720][ T5975] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  137.738588][ T5975] usb 2-1: USB disconnect, device number 8
[  137.789821][ T6621] trusted_key: syz.0.179 sent an empty control message without MSG_MORE.
[  137.819934][   T92] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  137.838275][ T5905] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  137.849852][   T92] usb 3-1: device descriptor read/8, error -71
[  137.988492][   T92] usb usb3-port1: unable to enumerate USB device
[  137.990319][ T5905] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  138.014713][ T6627] serio: Serial port ptm0
[  138.021813][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.032145][   T92] usb 4-1: USB disconnect, device number 6
[  138.037182][ T5905] usb 5-1: config 0 descriptor??
[  138.081595][ T5905] cp210x 5-1:0.0: cp210x converter detected
[  138.111269][   T43] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  138.279766][   T43] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  138.322512][   T43] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  138.368090][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.388115][   T43] usb 1-1: Product: syz
[  138.396555][   T43] usb 1-1: Manufacturer: syz
[  138.427235][   T43] usb 1-1: SerialNumber: syz
[  138.450576][   T43] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  138.505044][ T5905] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  138.531979][ T5905] usb 5-1: cp210x converter now attached to ttyUSB0
[  138.796487][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'.
[  138.896045][ T5905] usb 5-1: USB disconnect, device number 8
[  138.915728][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  138.941673][ T5905] cp210x 5-1:0.0: device disconnected
[  138.948595][   T92] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  139.057783][   T43] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  139.084149][   T43] usb 1-1: USB disconnect, device number 7
[  139.110283][   T92] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.122216][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.134271][   T92] usb 3-1: config 0 descriptor??
[  139.144726][   T92] cp210x 3-1:0.0: cp210x converter detected
[  139.556167][   T92] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  139.601316][   T92] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  139.629786][   T92] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  139.651539][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'.
[  139.701099][   T92] usb 3-1: cp210x converter now attached to ttyUSB0
[  139.710681][ T6662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.191'.
[  139.742315][   T92] usb 3-1: USB disconnect, device number 18
[  139.799823][   T92] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  139.973838][   T92] cp210x 3-1:0.0: device disconnected
[  141.290090][ T6672] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.310099][ T6672] bond0: (slave bond1): Enslaving as an active interface with an up link
[  141.486551][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[  141.648154][ T6699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  142.217441][ T6704] loop2: detected capacity change from 0 to 7
[  142.273317][ T6704]  loop2:
[  142.278603][ T6704] loop2: partition table partially beyond EOD, truncated
[  143.211915][ T6713] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[  143.321513][ T6729] tipc: Started in network mode
[  143.326540][ T6729] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  143.334801][ T6729] tipc: Enabled bearer <eth:vlan0>, priority 10
[  143.350700][ T6729] siw: device registration error -23
[  144.217108][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'.
[  144.268774][   T92] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  144.329733][ T5936] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  144.508296][   T92] usb 4-1: Using ep0 maxpacket: 16
[  144.534796][ T5936] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  144.643843][   T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.690363][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.767470][   T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  145.059091][ T5936] usb 3-1: config 0 descriptor??
[  145.066548][ T5936] cp210x 3-1:0.0: cp210x converter detected
[  145.072543][   T92] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  145.083899][   T92] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  145.093854][   T92] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  145.129371][   T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.153440][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  145.177369][   T92] usb 4-1: SerialNumber: syz
[  145.195851][ T5898] tipc: Node number set to 10005162
[  145.200778][ T6739] veth1_macvtap: left promiscuous mode
[  145.260228][ T6737] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  145.278556][   T92] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  145.297258][   T92] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[  145.768215][ T5936] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  145.776642][ T5936] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  145.784470][ T5936] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  145.798266][ T5936] usb 3-1: cp210x converter now attached to ttyUSB0
[  145.807111][ T5936] usb 3-1: USB disconnect, device number 19
[  145.829576][ T6737] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  145.840799][ T5936] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  145.884196][ T5936] cp210x 3-1:0.0: device disconnected
[  145.900672][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.949004][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.993958][ T5905] usb 4-1: USB disconnect, device number 7
[  146.278625][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[  146.367406][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[  147.032533][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'.
[  147.041631][ T6774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'.
[  147.049468][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  147.250133][ T6778] fuse: Unknown parameter ''
[  147.472712][ T6783] tipc: Started in network mode
[  147.477758][ T6783] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  147.486122][ T6783] tipc: Enabled bearer <eth:vlan0>, priority 10
[  147.498925][ T6783] siw: device registration error -23
[  147.928667][ T6786] smc: net device bond0 applied user defined pnetid S
[  148.260962][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[  148.453774][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'.
[  148.524688][ T6798] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.534196][ T6798] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.543319][ T6798] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.552191][ T6798] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.564612][ T6801] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  148.594024][ T6793] lo speed is unknown, defaulting to 1000
[  148.600848][ T5898] tipc: Node number set to 10005162
[  149.454913][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  149.859203][ T5898] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  149.869591][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.925121][ T6856] fuse: Unknown parameter 'X0x0000000000000008'
[  150.020079][ T5898] usb 2-1: config 0 descriptor??
[  150.053224][ T6859] fuse: Bad value for 'fd'
[  150.063212][ T5898] cp210x 2-1:0.0: cp210x converter detected
[  150.530012][ T5898] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  150.545737][ T5898] cp210x 2-1:0.0: querying part number failed
[  150.560919][ T5898] usb 2-1: cp210x converter now attached to ttyUSB0
[  150.587317][ T5898] usb 2-1: USB disconnect, device number 9
[  150.597899][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  150.610613][ T5898] cp210x 2-1:0.0: device disconnected
[  150.685388][ T6880] loop2: detected capacity change from 0 to 7
[  150.712853][ T6880]  loop2:
[  150.716973][ T6880] loop2: partition table partially beyond EOD, truncated
[  151.118223][ T6889] tipc: Started in network mode
[  151.123256][ T6889] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  151.133376][ T6889] tipc: Enabled bearer <eth:vlan0>, priority 10
[  151.148273][ T6889] siw: device registration error -23
[  152.138375][ T5898] tipc: Node number set to 10005162
[  152.243258][ T6892] binder: binder_mmap: 6891 200000000000-200000b36000 bad vm_flags failed -1
[  152.568751][ T5898] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  152.841904][   T92] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  153.014494][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.041605][   T92] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.059768][   T92] usb 4-1: config 0 interface 0 has no altsetting 1
[  153.075742][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  153.077825][   T92] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f
[  153.120726][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  153.133817][   T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  153.140847][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  153.160706][   T92] usb 4-1: Product: syz
[  153.165176][   T92] usb 4-1: Manufacturer: syz
[  153.169864][ T5898] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  153.169892][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  153.169910][ T5898] usb 1-1: Product: syz
[  153.169924][ T5898] usb 1-1: Manufacturer: syz
[  153.169938][ T5898] usb 1-1: SerialNumber: syz
[  153.200375][ T5898] usb 1-1: config 0 descriptor??
[  153.202146][   T92] usb 4-1: SerialNumber: syz
[  153.217638][   T92] usb 4-1: config 0 descriptor??
[  153.225273][ T5898] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  153.245735][ T5898] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  153.320081][ T5898] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  153.447018][ T5898] usb 1-1: USB disconnect, device number 8
[  153.460484][   T92] usb 4-1: USB disconnect, device number 8
[  154.296184][   T30] audit: type=1326 audit(1755918463.785:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.360651][ T6922] loop2: detected capacity change from 0 to 7
[  154.397709][   T30] audit: type=1326 audit(1755918463.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.419551][ T6922]  loop2:
[  154.428763][ T6922] loop2: partition table partially beyond EOD, truncated
[  154.502181][   T30] audit: type=1326 audit(1755918463.795:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f059b58d550 code=0x7ffc0000
[  154.560947][   T30] audit: type=1326 audit(1755918463.795:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.624620][   T30] audit: type=1326 audit(1755918463.795:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.652346][   T30] audit: type=1326 audit(1755918463.795:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.689575][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[  154.764100][   T30] audit: type=1326 audit(1755918463.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.786600][   T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  154.819505][   T30] audit: type=1326 audit(1755918463.795:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059b58ebe9 code=0x7ffc0000
[  154.858325][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  154.950160][   T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  154.959493][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.982373][   T43] usb 1-1: config 0 descriptor??
[  154.994378][   T43] cp210x 1-1:0.0: cp210x converter detected
[  155.011607][ T5905] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  155.021013][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.032421][ T5905] usb 4-1: config 0 descriptor??
[  155.045439][ T5905] cp210x 4-1:0.0: cp210x converter detected
[  155.526990][   T43] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  155.541423][ T5905] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  155.614741][ T5905] cp210x 4-1:0.0: querying part number failed
[  156.016578][ T5905] usb 4-1: cp210x converter now attached to ttyUSB0
[  156.023484][   T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  156.042547][   T43] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  156.049148][ T5905] usb 4-1: USB disconnect, device number 9
[  156.075192][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  156.089662][   T43] usb 1-1: cp210x converter now attached to ttyUSB1
[  156.232912][ T5905] cp210x 4-1:0.0: device disconnected
[  156.276289][   T43] usb 1-1: USB disconnect, device number 9
[  156.994516][   T43] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  157.117175][   T43] cp210x 1-1:0.0: device disconnected
[  158.522857][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'.
[  158.552580][ T6983] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  158.732763][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.743732][ T6981] lo speed is unknown, defaulting to 1000
[  158.774481][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.884194][ T7003] nfs: Unknown parameter ''
[  158.968694][   T92] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  159.008249][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  159.971865][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'.
[  160.199896][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  160.207779][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short
[  160.227793][ T5913] usb 2-1: config 1 interface 0 has no altsetting 0
[  160.238403][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  160.238590][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  160.247470][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.247494][ T5913] usb 2-1: Product: syz
[  160.247508][ T5913] usb 2-1: Manufacturer: syz
[  160.247523][ T5913] usb 2-1: SerialNumber: syz
[  160.279184][ T7022] 9pnet_virtio: no channels available for device syz
[  160.458304][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  160.497122][ T5898] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  160.508565][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.752006][ T5898] usb 4-1: Product: syz
[  160.756375][ T5898] usb 4-1: Manufacturer: syz
[  161.667659][ T7030] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  161.723468][ T5898] usb 4-1: SerialNumber: syz
[  161.819004][ T5898] usb 4-1: config 0 descriptor??
[  161.841455][ T5898] gspca_main: sq930x-2.14.0 probing 2770:930c
[  161.892212][ T7033] sctp: [Deprecated]: syz.0.274 (pid 7033) Use of int in max_burst socket option.
[  161.892212][ T7033] Use struct sctp_assoc_value instead
[  163.207535][ T5898] gspca_sq930x: reg_w 0305 fd00 failed -110
[  163.323554][ T5898] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  163.717594][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8
[  163.759383][ T5926] usb 4-1: USB disconnect, device number 10
[  163.790996][ T5191] bcm5974 2-1:1.0: could not read from device
[  163.916038][ T5913] usb 2-1: USB disconnect, device number 10
[  163.946675][ T5191] bcm5974 2-1:1.0: could not read from device
[  164.157729][ T7059] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  164.317621][ T5191] bcm5974 2-1:1.0: could not read from device
[  164.349497][   T30] audit: type=1326 audit(1755918473.835:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7055 comm="syz.2.281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc34298ebe9 code=0x0
[  165.367454][ T7077] binder: 7073:7077 ioctl 4018620d 0 returned -22
[  165.539595][ T7085] binder: 7073:7085 ioctl c018620c 0 returned -14
[  165.841575][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'.
[  167.047438][ T7094] ------------[ cut here ]------------
[  167.053200][ T7094] WARNING: CPU: 1 PID: 7094 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  167.063197][ T7094] Modules linked in:
[  167.067318][ T7094] CPU: 1 UID: 0 PID: 7094 Comm: syz.0.290 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  167.077172][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.087298][ T7094] RIP: 0010:folio_memcg+0x1a8/0x310
[  167.092691][ T7094] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  167.113196][ T7094] RSP: 0018:ffffc90002f37250 EFLAGS: 00010283
[  167.119842][ T7094] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  167.127808][ T7094] RDX: ffffc90004802000 RSI: 0000000000002100 RDI: 0000000000002101
[  167.135951][ T7094] RBP: 0000000000000000 R08: ffffea0000bc9847 R09: 1ffffd4000179308
[  167.143970][ T7094] R10: dffffc0000000000 R11: fffff94000179309 R12: ffffea0000bc9870
[  167.152005][ T7094] R13: dffffc0000000000 R14: ffff8880325cf980 R15: 0000000000000002
[  167.160049][ T7094] FS:  00007f059c33a6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  167.169071][ T7094] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.175642][ T7094] CR2: 0000000000000000 CR3: 0000000033e8a000 CR4: 00000000003526f0
[  167.183748][ T7094] Call Trace:
[  167.187063][ T7094]  <TASK>
[  167.190038][ T7094]  workingset_activation+0x5f/0x4a0
[  167.196250][ T7094]  ? folio_mark_accessed+0x361/0x4a0
[  167.202095][ T7094]  folio_mark_accessed+0x3b5/0x4a0
[  167.207208][ T7094]  kvm_release_page_clean+0x9a/0xe0
[  167.212489][ T7094]  kvm_tdp_page_fault+0x2dd/0x370
[  167.217507][ T7094]  kvm_mmu_do_page_fault+0x2c5/0x640
[  167.222879][ T7094]  ? vmx_vcpu_run+0xd8b/0x25d0
[  167.227635][ T7094]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  167.233480][ T7094]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  167.239075][ T7094]  kvm_mmu_page_fault+0x22f/0xb70
[  167.244092][ T7094]  ? __pfx_handle_ept_violation+0x10/0x10
[  167.249847][ T7094]  vmx_handle_exit+0x1090/0x18a0
[  167.254771][ T7094]  ? vcpu_run+0x361c/0x6f70
[  167.259316][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.264074][ T7094]  vcpu_run+0x432e/0x6f70
[  167.268439][ T7094]  ? vcpu_run+0x361c/0x6f70
[  167.272954][ T7094]  ? __pfx_vcpu_run+0x10/0x10
[  167.277624][ T7094]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  167.283374][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.288160][ T7094]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  167.293702][ T7094]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  167.299984][ T7094]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  167.305974][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.311251][ T7094]  ? look_up_lock_class+0x74/0x170
[  167.316366][ T7094]  ? register_lock_class+0x51/0x320
[  167.321625][ T7094]  ? __lock_acquire+0xab9/0xd20
[  167.326484][ T7094]  kvm_vcpu_ioctl+0x95c/0xe90
[  167.331219][ T7094]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  167.336409][ T7094]  ? __lock_acquire+0xab9/0xd20
[  167.341296][ T7094]  ? __asan_memset+0x22/0x50
[  167.345877][ T7094]  ? smack_file_ioctl+0x302/0x340
[  167.350925][ T7094]  ? __pfx_smack_file_ioctl+0x10/0x10
[  167.356286][ T7094]  ? __fget_files+0x2a/0x420
[  167.360922][ T7094]  ? __fget_files+0x3a0/0x420
[  167.365624][ T7094]  ? __fget_files+0x2a/0x420
[  167.370271][ T7094]  ? bpf_lsm_file_ioctl+0x9/0x20
[  167.375200][ T7094]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  167.380524][ T7094]  __se_sys_ioctl+0xfc/0x170
[  167.385147][ T7094]  do_syscall_64+0xfa/0x3b0
[  167.389684][ T7094]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.394880][ T7094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.401684][ T7094]  ? clear_bhb_loop+0x60/0xb0
[  167.406366][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.412812][ T7094] RIP: 0033:0x7f059b58ebe9
[  167.417227][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.436885][ T7094] RSP: 002b:00007f059c33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.445333][ T7094] RAX: ffffffffffffffda RBX: 00007f059b7b5fa0 RCX: 00007f059b58ebe9
[  167.453520][ T7094] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  167.461629][ T7094] RBP: 00007f059b611e19 R08: 0000000000000000 R09: 0000000000000000
[  167.469665][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.477624][ T7094] R13: 00007f059b7b6038 R14: 00007f059b7b5fa0 R15: 00007ffdebf3e108
[  167.485630][ T7094]  </TASK>
[  167.488667][ T7094] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  167.495956][ T7094] CPU: 1 UID: 0 PID: 7094 Comm: syz.0.290 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  167.505749][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.515810][ T7094] Call Trace:
[  167.519100][ T7094]  <TASK>
[  167.522018][ T7094]  dump_stack_lvl+0x99/0x250
[  167.526598][ T7094]  ? __asan_memcpy+0x40/0x70
[  167.531191][ T7094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.536378][ T7094]  ? __pfx__printk+0x10/0x10
[  167.540977][ T7094]  panic+0x2db/0x790
[  167.544861][ T7094]  ? __pfx_panic+0x10/0x10
[  167.549275][ T7094]  __warn+0x31b/0x4b0
[  167.553238][ T7094]  ? folio_memcg+0x1a8/0x310
[  167.557815][ T7094]  ? folio_memcg+0x1a8/0x310
[  167.562392][ T7094]  report_bug+0x2be/0x4f0
[  167.566707][ T7094]  ? folio_memcg+0x1a8/0x310
[  167.571279][ T7094]  ? folio_memcg+0x1a8/0x310
[  167.575853][ T7094]  ? folio_memcg+0x1aa/0x310
[  167.580426][ T7094]  handle_bug+0x84/0x160
[  167.584656][ T7094]  exc_invalid_op+0x1a/0x50
[  167.589144][ T7094]  asm_exc_invalid_op+0x1a/0x20
[  167.593973][ T7094] RIP: 0010:folio_memcg+0x1a8/0x310
[  167.599159][ T7094] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  167.618763][ T7094] RSP: 0018:ffffc90002f37250 EFLAGS: 00010283
[  167.624815][ T7094] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  167.632773][ T7094] RDX: ffffc90004802000 RSI: 0000000000002100 RDI: 0000000000002101
[  167.640742][ T7094] RBP: 0000000000000000 R08: ffffea0000bc9847 R09: 1ffffd4000179308
[  167.648724][ T7094] R10: dffffc0000000000 R11: fffff94000179309 R12: ffffea0000bc9870
[  167.656679][ T7094] R13: dffffc0000000000 R14: ffff8880325cf980 R15: 0000000000000002
[  167.664649][ T7094]  ? folio_memcg+0x1a7/0x310
[  167.669256][ T7094]  workingset_activation+0x5f/0x4a0
[  167.674439][ T7094]  ? folio_mark_accessed+0x361/0x4a0
[  167.679721][ T7094]  folio_mark_accessed+0x3b5/0x4a0
[  167.684819][ T7094]  kvm_release_page_clean+0x9a/0xe0
[  167.690005][ T7094]  kvm_tdp_page_fault+0x2dd/0x370
[  167.695017][ T7094]  kvm_mmu_do_page_fault+0x2c5/0x640
[  167.700293][ T7094]  ? vmx_vcpu_run+0xd8b/0x25d0
[  167.705046][ T7094]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  167.710856][ T7094]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  167.716391][ T7094]  kvm_mmu_page_fault+0x22f/0xb70
[  167.721410][ T7094]  ? __pfx_handle_ept_violation+0x10/0x10
[  167.727116][ T7094]  vmx_handle_exit+0x1090/0x18a0
[  167.732038][ T7094]  ? vcpu_run+0x361c/0x6f70
[  167.736527][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.741283][ T7094]  vcpu_run+0x432e/0x6f70
[  167.745612][ T7094]  ? vcpu_run+0x361c/0x6f70
[  167.750128][ T7094]  ? __pfx_vcpu_run+0x10/0x10
[  167.754794][ T7094]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  167.760503][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.765252][ T7094]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  167.770790][ T7094]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  167.776499][ T7094]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  167.782488][ T7094]  ? rcu_is_watching+0x15/0xb0
[  167.787234][ T7094]  ? look_up_lock_class+0x74/0x170
[  167.792331][ T7094]  ? register_lock_class+0x51/0x320
[  167.797547][ T7094]  ? __lock_acquire+0xab9/0xd20
[  167.802401][ T7094]  kvm_vcpu_ioctl+0x95c/0xe90
[  167.807069][ T7094]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  167.812255][ T7094]  ? __lock_acquire+0xab9/0xd20
[  167.817091][ T7094]  ? __asan_memset+0x22/0x50
[  167.821672][ T7094]  ? smack_file_ioctl+0x302/0x340
[  167.826683][ T7094]  ? __pfx_smack_file_ioctl+0x10/0x10
[  167.832043][ T7094]  ? __fget_files+0x2a/0x420
[  167.836615][ T7094]  ? __fget_files+0x3a0/0x420
[  167.841275][ T7094]  ? __fget_files+0x2a/0x420
[  167.845847][ T7094]  ? bpf_lsm_file_ioctl+0x9/0x20
[  167.850769][ T7094]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  167.855955][ T7094]  __se_sys_ioctl+0xfc/0x170
[  167.860538][ T7094]  do_syscall_64+0xfa/0x3b0
[  167.865028][ T7094]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.870211][ T7094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.876277][ T7094]  ? clear_bhb_loop+0x60/0xb0
[  167.880940][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.886822][ T7094] RIP: 0033:0x7f059b58ebe9
[  167.891222][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.910828][ T7094] RSP: 002b:00007f059c33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.919242][ T7094] RAX: ffffffffffffffda RBX: 00007f059b7b5fa0 RCX: 00007f059b58ebe9
[  167.927204][ T7094] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  167.935160][ T7094] RBP: 00007f059b611e19 R08: 0000000000000000 R09: 0000000000000000
[  167.943117][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.951073][ T7094] R13: 00007f059b7b6038 R14: 00007f059b7b5fa0 R15: 00007ffdebf3e108
[  167.959062][ T7094]  </TASK>
[  167.962357][ T7094] Kernel Offset: disabled
[  167.966677][ T7094] Rebooting in 86400 seconds..