last executing test programs:

11m32.03997806s ago: executing program 2 (id=92):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r8, 0x5608)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
socket$kcm(0x29, 0x5, 0x0)
listen(r3, 0xda90)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)

11m30.789727913s ago: executing program 2 (id=100):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r0 = socket$tipc(0x1e, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x2000c096)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="cf011f05923e19c769b13ccc2df28629dbbd5387d35db926a46e4415711b619e8e8c3de81fe8ec814199fad0a8a6f5ebe9471c27b82323a055de4a395ae46e9b4b5727d2b83c172ddb377d18fe76a2af2fa79e09e6e091608fe56319c155e247a3ed14d4e52d882dcad59515ed78bc228c69b4b43316f883222f5541cf18510e7acfe863497df6d5d3be553ea7d9206c5abaf4d277d556e5c34bb7dd200fea1db5ca7d36d1c2a2811bd4c9113da16e4a9242673cbaae19bf7a93f59179ec27666e14e481118f51c929", 0xc9}, {&(0x7f00000001c0)="ebc4812d06a1394020f79d93bf74c767146f4574e04fd7e13018bd9f9f61d195b3d2fc8e07d29ed878eebb2da8f57a98c8be1f97fa47d381045ab9c91f748452220eed4ef9d57425de69b2f315d31ceb07d294a24bc6cc439603dfd7", 0x5c}, {&(0x7f00000013c0)="4c1d5093", 0x4}, {&(0x7f0000001400)="d7b1eb1e1eed356bdeb1369627779c887e5327064e5d28255dad9f573bd5b8cee51823b8bdae6862eacf6970a97ef65062c613bdbf633f7183cb8036a39e157bee7cddd4724bba2720c4606430e0d887857248d081dfec608115ea3c74daace9116e89faadcfa621d3fdee2c9425837369a88d20da3c95d7c0b794", 0x7b}, {&(0x7f0000001480)="7f882095e868f1809b0d89c80e1773d710eca8364e70fe6aba597d9c13d364d7cd2b30df00af81ac5ad17e44d1a919fca6b434f85824b344a7feb80418fb26b97ed0f5f2b9c9775fc0b9e9286d32d096e968e7c1bba06ecf", 0x58}, {&(0x7f0000001500)="ff3e35a5052fea072a1d39cddff1a97f515cd69a3e990224cb869aa1c6deaf7fcb2fe5d9b3164ec4f6387138452f9e62093da02ec552ef5ab12aae0b6ac0eaca38c4615198364c0aa80bd4f4ce274f65280586210ad7d8d478563d80265fa52e17c1f09a843b49d73623cde463d18387f4e7e1d4322a53640e64ca56b4e5b5f7c86a55501a27f4af3d966c71d6bd3799dcfa59d8c031d3bcc9aaa02889072339d17391dbc4cd227c50881f816a22f9f0820c77648746945d06c27196bb56302376", 0xc1}, {&(0x7f0000001600)="0041c5a0dc4d46f4209a109a4cb464e2dfa6b68f795cf685546bb010261df11573b69b87abcdae09778f5edcd8140318dc84fb06c7b55c4a93", 0x39}], 0x8}}, {{&(0x7f00000016c0)={0xa, 0x4e23, 0x9, @empty, 0x3}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001700)="6b18ba6f03f795fe066b15dd04a0dfd24244c3", 0x13}, {&(0x7f0000001740)="3ba516933a7559ba02ee30f50ff611d7a6003416db3a2f3598f1c8d3a0e5dbb3603a8293f6e3f84ce00ace0f02c49e1343aba18836f2d41be04cfeb2e23903a57cc5d6d0a4447ad3b8ad02044f2d82b78c1f", 0x52}, {&(0x7f0000002680)="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", 0x1000}], 0x3, &(0x7f0000001800)}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001880)="31bbc913ab5d44c19ebecba53371794258c5941f7ec1a580c460894f2ce41414de554c345048fad5604585843d730417612f37490fb1b8a0be910f328e0a591c2a4d3794adaea5924891ab44d5a214c7e3b003d1ece05d2d865fdbb15783c1992c11f9593d7d4e5d6806f4a5635dbeac0b59c0ae43e47a298e97b9fe1b92bb7fa1e7d4b833d5aee8435b29fd9096399d9abe203cac59a49150101d1a9c29a2e2efbab7a932563fc93d0de0c597143f984d63db0b5bfff606b8c1ec55ae7bc24b15b4b0bfa49a018ee9cc54c511144611b6a8fce33356a67f58", 0xd9}, {&(0x7f0000001980)="b85a2471cddd1456f56b266dd842926aacc0471c6f5b698fd017c6faea0a1e6502272481203229ff9eb738f45093daa6b5d6b9938c1b6371e4ce6c2b48e5c4b537efb7c7c4c522151335f65bd07d6e60785f5efb7bdc94761148ae2fede32ac73495b011e57d89dbdbe3395f60b2c86eac134d0ad8501bfda0360a2d9bd745a72c3d2cc5301a5b50b51fafd254eba555bff3eb40e40bdaeaf1", 0x99}, {&(0x7f0000001a40)="84ff5beeb0e3dc9e28912a8afd6fadf6f849f2457faf189f08d09cfc95f53fb7d8c70a8da7ad76ad184deb4622423bb03dac30e9adf772b30cc9fa3289ff0274fcd6c9a8ec75386de9d5715d0c88ae2444976792e4e7048b215fe3dc891eaf06102df2efb9a0775b13224f7967be8b3e0315d8207f7fc6130272521206e17dfc9b14c7fc5d1b84fb45992e1d51fc728dd353205b75423656668d71c335ca854f3929d75a3d6b4bc82b2e7c98de07d2a08f517470c28e5f12a5", 0xb9}, {&(0x7f0000001b00)="04a752f81109978c8ff96002d22c4c431ed4aba88b72aace8a7df82fcd92a889227adb611e397b2f6de3ec7ec5a164c65ae5f8a8ec677d7919a580858bc53ada125b9f7433dd3ad139d407c99630402a32", 0x51}, {&(0x7f0000001b80)="ff0a849861b5fa3dce5fdb3a3bb50f6c87077b8050d8cc43ec40644aab3a878849830ce02fbb755a5e1c1fd8267f6fc210195e88", 0x34}, {&(0x7f0000001bc0)="9ec5062238afd75c6a7af07c2c06aa2144c6a983b54187b13cbcfe968324a067a673f61817b13807f261392b8286f23e1119335efbd30b4fdc4e212f744a2261b6cdb91c846945aaba0a7cd95e119cb4d15f21a58a1d47022a4fc0a9cfd6378e4c0a164c165d37586e1c8deee96f837c01702811b0ef84862a1d2cea2dcae6002defb9ebffbc2b142a3aa474444dd615", 0x90}], 0x6}}, {{&(0x7f0000001d00)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000003680)="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", 0x1000}, {&(0x7f0000001d40)}, {&(0x7f0000004680)="9d761503c838d58fbfb32c5e2f3064d7f6695be5bc0b50001dc76589b1a1e3f6ff18708aa7cfdfecd173fcc08600c2a107dc5ac0c862a3da1cadca88484ebab0651dc52264c0152f3a0eadae6f8d33e8b1d9926317df857baec4e7a070c27db01c3cee14b83bf233a8c2fdbca997aeddf5077c62239c56e86b652262c38a5763bbdd8c989823baad73c8988018b9870583bd1155bf8778462456204c64088567c7e0f5eee8bbd6f2936af95b086a809f8745fe1493f8e3b93134e0ef2e4c94fb740cc80881b4c51aee9d9c5ed0ed5564ab1334b6fea38c89f4f85aca3932c14816d7a9825f166e76ac81febaf15c892be797528de6f50e2c96d823797d17ac9d8602f838de7de0937bf7b059ec179393c268a9b28f3b7693247228582f4587f63e99beb03ae5252defa9dce83ebbe0f72ecfefb1f884aed8b85b66281c36ffa973ff964a3ce4bc2f1a4d04826cb8b5e23ae9a4fc0fcb5a2801c6379cc3d42a2a642d4442c9accaf913611e6a69a2bf995e69022a25098d22e504504bab87611b149983509f06f0b203567e1ed1198953fd21c2e965cb2a37672680516e9cdc17f3378d1d703750bef82a2b00a4525c0a3f3ead2efcdc84af2d1382b134ba10ad55e81db2025a6994daabb2ef67ef79962fec3507041dbbc82f446425bbf1c7e3b39e3885641fb039939b9a2c19b67a9064b819ec8332daf063878bc4d03b231d39810a4e5cdcd7567b905d2215b77a2102a666590835c420e54a3228f96c307be740b7bd1ca4faed14001ac76d73b4b7cb2e7e05306e9f8270b24185a47b4f35786076f2ab8faab3c7806ea18b726e9f76fea6d16946029dc882cb05edd86652594fec6d34e55b1adb2d2466cc28ab2094c012014d1aace8c179eacf0b4d99beb1cef4a9f905f65f95e2c4d64c6d2868f76e594cb242e10c60cedec76d8bcaef71c24426a97bfa654514d5efdea2848df0869aa4fcf6b2fe83dfca9cc3220279472d52666aee0f2d712bd02c48e29805b4d14b414f5942d5fafd0d757abe533574bc84ce2abeca2f90c8c57cde42f64ba1c4f3f70ddc66d58fb3e7ff359f1e427059a601a85a256e5b5de2942f50dbab6238969d473f96088a5c808c6fa9b3ef2ecaafe80dcd4fb3bd82a803164fd0db8f1cf7b660a82eefe56eca53fa2ebbcb8e74b0de1b9fe44c046f6d32e22da737cccbee5ce8babb418beafaebb9380ff4a26f36854f4ad97e9578dbb81c816c29ba02017ba9aa79808c038554ac541feaba53704de772489b919e61288bec44c88da180ec2ea8ddaebafc0ae00c4b179c688db996306f72fb5a64504b7f236e04d816bf53f203a4fc2b7cb198c309cde9ba35c86451c7f0c65fa249343e82bc61e34957786ff711f531c2767bb3aafeac9e3722eb483f0b462c781cdf8f0312505737a5ea9a55f5315510193418bb59ea822ee1632f5d9b5effbab38b5191a95d801e88a2dd2d095382dd0e174f3ffe309380eb98f8b1d471b43c4be77be840e3db64d2b305c9967ff821a864f4dd328379c7a15cd611e1c18a7f9ae40975bf1f83a8613411f68f48d490343d6d054ae1b9d7194a39bf1137d2e90d0fa33359129b08c83fba146abfc8c8a1d4254cfc546972bf1e20a3988d80a6cbf2c8610bea183858a1bb86f5b84ed22405a4db21bc2804942b7cd95ba52f299e96537beb8e9a0f5f23dc320d3a7e26693e24e675c754c583f3394d1d7f2a50e37dc16f2961a9cd37157efdafb13f4a715481d8406d2fd7f3517d6657a7d7f699c3e9dc12f51bf883d52e294c6c150b3f896b5af283139b5d4e6695ba3b462a00f7d69d494a701dd3de59e25c1f3dca5677ad540bf08ad385f291ed5a7b7e520a57fae744b202dec13af13b86ce6ec2b2c5a6cf1eb59f6033fc71d0f82747be9e87a7eb29d4476cbeae393ce67175717fd08327b7307929a9098e3764eaa5b724638e49b1ac194f75618ad0c89c9352757cb8572388dc4af1d60d0ac7274171cbb723f5278b70612820c74f937dfb4afac521832c9a5fc91774409fd2f928bc0506334b13ee8816617ce6371ae790291457ce62708dfdd194ae6db5b0a2b359df85bf900f30c956402c9eb2cdaa83b0a58fd1e05ae4b4191b1e87c699414fa173fd41c6a0ce0fafc421f95b1412a3e2d7a60f00797a83d58eb445a025a6d06556bfacd95ecb99d2ef4f520a91e5b7f7c3c401a386047f388124a54aa8bbc187ff95f969b5ef3ae24bf4eaa2e38c3ef5cdbd01f994e3ea25ca0a7afd82b3478ba141c9b92075ec444acd5267014e3860f2b64200d5ab0229d0ee0cd59ae62b29fdd0622c85384f01cb8736988ae6c8b3ce73a28d79442d04e86d125e417cd9de39f165f93affedaffef69fa389c049e9d6c0955679a15312bdff32a8111dfd962e033ae1a3af42c0fd296acfe8a6895cfa730c7d2cccc5a1609b3cf76eecd09d38b88b28740b96c5104fc2d874796a552e04d2bbe579a2897461d0363f4d514ea36df0dccb731d0cbbd6a47d7fe81473a617d86283c8d2a3db40fa5500433b42782b21fa8e148ae2f96ae752daa3cc3aa47aa522a1b3901dc6289d7089bb369b7584342b0430d2b74e002254fbe70633db806d3ad7e4c62d33c95a4149bb83d7b8b79a13eeb0db6efaf833c66997be87150c9cbc3d34104a93b1630ca248783858c8538b4b46c9d6072ad068f4d8b082a0ab246d1d100bd4f35c7591130938d20ac95be7407c23ee3fdaa9992db03e8ba4e0c183aeda5f20ac70c698cad17ee7707dabbe2bc10d12c0f63b191a868e7c66b12bf2121cd9ecc98b60ceba8d5daec088bcbd2a451c3a03eb6b0494023f4519f110afb05156889b1d598a00b6eb360c52fafa4755dacbaa3bb163b43a984b14c4f01c762a3c3481fb767776a8a4197ada63ec500bdf331fc278153c906c5099478d91888be51e91672097f58efdabc0630bb5536b09d14a64da6a1a0d6bdb2a46658e0fb949edd5d6c7bb964b887a301d470e09e7948b4f2c246f53ec9d5b7dc7b7138e728569234098586c3afd1447c1e5fb87d706ff9ae6bbf4f25a3f3bfd596cda90cb7f4afaad747824b65faf189a15da5c58f257c9ddfe591e52fe06900cc2efca2aa1edf8b9d72b4c753bdfcd6d99e1f89b1faaedfed7c8e60232719eb37e816a2debde00cdccd6ff46af8c4dc8deb12a611da4740023ebb582412c2262153602574a04a81649ac806de178377eea4bae9d00557e3bc1e34a499fc1f6a2a9739b9b6798cadce4c281b2d0c64f4fa693ccb9ea395debcb5e1e00059e8c87588fb916ad40cf5bb9e6010c2da509256f029d1f51f66d543f951160e32caf921ff02ef5f47e331a9b19b86b5c0e481a2330012cc605c37a5346a3aabe2f920980cad6db8a6fcb498225b38f2f16869fc2452719557ed30a9273fc3974a18fede487ae18f4cd27375645b028f5b4c03184700a6282cd4b1c026f5f2ae93b3086d5edbe23862521241f4714a129b7be2a20b19fa5999ce52c7f41c30bfd50ec692ad61508e5b35b510a7a105f3b8a39f13ec9c73304f308d035c0aeb0c850377235fcc136361101ea9137f4ee554cf67d4955b225468adf51b0775dbff88559f80199250ebeadc545d48bb5c931103ea261d435a9ae288e05f6fe49102f36787b41b8b0a5a5b4c5beba85eb7cafc527494483d5d550b02b3a604ee94052479619d42054f4a7ed13c7de3f4bfc96f07eaa8d674608c19fb9e47e505450b770d339379a5a3e60470039f1caef48c3390af5f6d1d5b60faa31435fbeb51fdfc85e14314bd10c37e6e5f4a28701f9e534049aa237f2b7ea3e3202a270521c0320fb25bf932a544f57a312d798bae8a51a587794ded453aed55245937334b2fda77f753dae23250ebcdc7e85ec7cc11f4412d264b1ad1c0780991645fcd5509a38e4a5cbcf94477efea07c4959760d5fe1ea4c4c9254b38dffee0043b089f3f5e558b96d148054133f43b67dfdec999ec6f3f2dafa3544b8acab9d0eba8ee73acfc3bc23cb022187aef55bdbf544f89c7cfe562c6b19cd4a19b5e9aa6f082da9d2283d7f47da1fdaf8c674e7e0bbcab98ac6816483be55492629d5ab2989ebbd8d93281e2902ada08b7c9ea7ff02251706c07acd03534578be32cb9810cbf4e650c06284afe782f6de05eb2a60cbe3c5e9eecd17ce6b2302a53b2589b3e8e52595c7248bd12de6361d59ce1c5adcae2b4c3b1e55c1c0f05912d1f6597b4279183724d8426bba5ec3791fd46b460263c9834642bb65c879a3e2c66ff18126f062ae31f75913caa2e92fb7ef5cf625cb055a696916d6311714c91aa2eca98460489067c0390bb5dad9af230d485851b3abb30f786a0cb91af1f96cc3f84108e9e98b301dc9ef021af714fdb5171f19c97274c10286ebfe0614907f2a1b8aa50d49d3ef3452eda14fde4b0446209f5e5d799f4f7293326c21a9b94a76ec449fb44f1282c71b89917c020e6cfd6160f2bbfbfc2ff4fc53d2b0d52f91729df00f325b8f8101327da9f9fa3d7ded50838c7aba0e9905e55a8537332119653a13a11d2b5b02c3ee6bc21310166d1965d4b07ed6a43f548bd1d9ee86ef02d71e70aa931ffe8572b9afff2037594cc3c148c306b3222c1aa91721ca08f5bd7e932066e22c2797788d8d72ff6089d669f7f37b0b256749d42e4bcbb4e11c31595fae1228eb018029fd402a806eb8dbf23ba791297aa108fc9e0d5e64b02bf4b7817c0a4e5a2a294d278e32c8d6cd77f1b07402272efc5d94cf770c0a9a902b42b2ed70b402561a8dd11b327c05b40cc884929805ef34203bc7a7a02f4fcd4b47f6aa925342d158bd8614877f61ed70c873d8dd3e7a43055cc250ce4a28adab7bb8ef482d8bbfb953bfff755a5fcb8b6d67e2e9abaf5ae5ae6d4c4bf312af26275c59b1364ce24b194cc07a5f30fa960046f5dd5ba7f1dd6646acc10c393aeb1843eec06e0c69cc5d7d8e7e7a7a028ea9d62195c29adf7953760cf577df6a25e4d48c3caa567384b1c9919a17a80ee0e7df5e042bcb1bf5af46f9b074a59baf601cdfd9a1a0ec8cd4a55c3201d13aea4eb43c5d3d752620d5ebbd31839340af346e7d20aa609f7a4a68596c21decf005ffd83e0d4d2a16ce4b3ef07d6aa9d3d6973d66565d660f3b7a8991af63a52808739d7b8750f6cc03163023246452057f87108f2e19556f45a477c8279de72db939f485d3e07524ac3ca402e7878cdb069097cc2c7c9aa60cf4cc46bc65f2663c39ad2b9baa24cc1403ebe0589ebdff5a7f70def327f9e8f389b0f9c2a3e17f647c6bbb62ad59c55df4bb8e123197b708245e6a92d6e2ab9f8f0d729c41aa6374c7936aabb6a3b5dc9b1503f54aa0b742b99e553f1511ce1abd11f05efb55c5775686106f7b8f0796a0b4ec9cd39c2741afb807c2f87cddee31b090cc18b12b51435cd5eb045e04117a67f4ab8f1d41108be5fcf7c3cfb99d985eade68dce004707d3284d4cc8db92461892374169b4d938064660dfb6a1afa7125ef685f8107345deee18bcd1f342202734dfb126cacdf364b00a4778f95bd728d83a1ff2112929f03316d829e539267a6e132a5d32a5c10aa97b86830a07152fc080546f0be60de0ca3f0c4273f2f4659cf05578a6915b00a86bb11bcda925b703b0a3ef7a879398f12df669fda56e03c3eebf88a5eedf1590ff9fc2e59dbf3d23843118943e45b2325247073877b48bf225272c621ef3cc163357a248e1dc826ab9f1f3578dc0d8291024c37ca4ef81d13189edb83b4cf199753d90409c52a85aef9", 0x1000}, {&(0x7f0000001d80)="ba10d8db232064342490dc1545fb772bf803f53b6a19123dbea525fac4ba7f7de7295421695cb54e0fe67a62bdd301c4d8fcbadcda48513e83b5fca1cc83f7832cf2858f3129f11960f3229a94030ee12313368f827759f4da7e34741f35fcba601b938975ca9764807aa31017e2ae568110c0ad920cfce8bbecd4c8bf01a63327e0f17e6a5ad51453615ad2b3a38359313743717a51b8dee7c9604f0958d712a2ed69809627d1ed3d958eb7812a95f019822c70a8355af921d362b51d5ed31efe35", 0xc2}, {&(0x7f0000001e80)="4c46f2241b214bb110c2f34d611debefced143d33fb3", 0x16}], 0x5, &(0x7f0000005840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x370}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000023c0)="620b65ba49b3ab69432936856c3adbb83ed28e4a1f040b2fa0166083d8c5cbbb498bd5a41347ac67d3ba8f2ea96d5ac137ee418849b3df293ecdbaf09269209ba16a568570c472c31d2c8ccd4bcad990c45553bc43349aa6e7a98419bbd490b5057f3d472cc5a73e3662db71b6e99eb80d66a64180d3d3a8e247225b2ca8fe2a36371de648d5d9d0e9ac30c974c9c110246e789ccca16cbb750db3", 0x9b}, {&(0x7f0000002480)="afab5ca634c0086dd65e2f8a39ec1bd56da07820e90eb2ab189b07937608135ab994af57d87779efb8e4b79f59033bc110c4b6e7bf70c54b47ad63681359ce480efaad698bcd4e2666224299a0d10f2ba3a8469eec2018d83dbf7d3f45e92989cd8ed6f51242af8f1233ffe35d280b845519e03c41f52ee0b4d01a534a5ebccf1037f957718121e9190730fa2b2c03382ec1b1147651be25fbcbebac5dd60c83cb0a5c9c3c37204c375c6a50102c94a4dfca38a71eae3f50d86d50d590c763165067feea4d", 0xc5}, {&(0x7f0000002580)="b2dfac66749ace681c925e9ad9a6e7b1ae27071c59bc091b51cdbb7ed86b9383838a62d6fd71cb4d1718e01f27a27b7c72f1b93879bb07bb823f3b2962f2e5b96b6814c8ea10850c75890584c5e6703a8037d40f5ef6bf9f4d3030ff1b23071182a82403408b5dee059775529aa65daaf91eceb0bd972a765f986dd23bcf322f0e31098c02028d46784f1ded2c1906dba5cb5002d774560e2badd201c2ef5443b1a168a3", 0xa4}, {&(0x7f0000005680)="fdc5cd027f57210cd88796ff72b0426e71f166926a25c065fec7f1aa57a96a00c9a6b519b4c1d2", 0x27}], 0x4}}], 0x5, 0x4001c94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5)
r5 = dup(r4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="cff4e03d489c5c18"], 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4001}}}, 0x10)
listen(r0, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x65, 0x80800)

11m29.988241186s ago: executing program 4 (id=105):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904", @ANYRESOCT=r0], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0xf, 0x1) (async)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) (async)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095", @ANYRES8=r2], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r4, 0x0, 0x1}, 0x18) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000001400000018", @ANYRES16=r4], 0x44}}, 0x0)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2829da0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) (async)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async)
mmap(&(0x7f000019c000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r5, 0x10e1e000) (async, rerun: 32)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x5, 0x6, 0x2) (async, rerun: 32)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x7fff, 0x1000, 0x1)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x4000001)

11m29.73127782s ago: executing program 2 (id=106):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='sou\\\xaee', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000001c0)='\xac\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt(r2, 0x4a000000, 0xe, 0x0, &(0x7f0000006700))
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='&:\x00', &(0x7f00000002c0)='\xac\x00', 0x0)
timerfd_create(0x9, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x10000)
tkill(r1, 0xb)
socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f00000000c0))

11m29.012468716s ago: executing program 2 (id=108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x13)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
creat(&(0x7f00000000c0)='./bus\x00', 0x20)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084)
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x7f, 0x1000, 0x3, 0x4, 0x8]}, &(0x7f0000000100)=0x54)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

11m28.4941807s ago: executing program 4 (id=109):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x90)
r8 = syz_clone(0x200400, &(0x7f0000000040)="44a33ff43c50ed8eb2cfddf4772d5bc4282a35434f2c025bf93ed7fa3c8b59f73f183e69c43507f7beb6a472516458e281", 0x31, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="749e82fd47fbb99492c5cdad5b21f3d090846315c2d601f6b0e92e412cc9a76fc4457b4eebbcce3c1239b9e13fc8701f14dd1e1ab8555bcc2309dfd2218572")
sched_setscheduler(r8, 0x5, &(0x7f0000000180)=0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

11m26.962036785s ago: executing program 4 (id=110):
r0 = socket(0x11, 0x2, 0x80000000002)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
listen(r1, 0x9)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={<r3=>0x0, 0x95, "7fa1e7457925002e8169e7a8b0d2d4b6a8b7b585eb93f7d181719e75e9ee59a286bff91d14d81d3f6de4118119b9b3e71cd2e5ee02d94b1add8c70b29bbf8207b07317fc4d3de7c788707bba2be9771b2742bf85a2b5af5d5a62332569a13d4c66dbda57f8a9c0d3f445738a8401b967990eed28175eef1910f2e87a2b9f55dd5b6c4d3e76cd5510d2de11d701de77d8400b07d71e"}, &(0x7f0000000180)=0x9d)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x6}, 0x8)
sendto$inet(r2, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)
syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x85, 0x35, 0x26, 0x8, 0x4f2, 0xb746, 0x8e6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x4, 0xe9, 0x0, 0x9, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xe, 0x1, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x1, "a530"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0x8, 0x4, 0x5, 0x6, 0x1], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x1, 0xf9}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x5, "cbad"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x3, 0xdf}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x6, 0x5}]}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1f})

11m25.925244092s ago: executing program 2 (id=112):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000002c0)={0x2, 0x20, [0x4, 0xfffffffffffff815, 0xb7, 0xfffffffffffff000], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
pwritev(r3, 0x0, 0x0, 0x4, 0x6) (async)
pwritev(r3, 0x0, 0x0, 0x4, 0x6)
getdents64(r3, &(0x7f0000000800)=""/4096, 0x1000)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0xffffffffffffff36, 0x24, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x97}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c894}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84880)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1ee00000008000ab6b18b6000400000000040000", @ANYRES32=0x1, @ANYBLOB="ea00"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0300000001000000040000000900"/28], 0x50)
unshare(0x20000400)
r8 = getpid()
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000300)=0x9) (async)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000300)=0x9)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x3)
process_vm_readv(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003296fb608229084d488ff0102030109021200010495008109041e800056a7f60268a03dbca82cb3e8ee3a99bf39e5da6b15b11645151d32885b2e743d79e2cec0f1660900000067e06d79d5d62280d3255a0176dfea386d0eb6aec427b1a6606d6a811ad939513bb07348503685cb"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}], 0x2})
prlimit64(r8, 0xe, 0x0, &(0x7f00000001c0)) (async)
prlimit64(r8, 0xe, 0x0, &(0x7f00000001c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x5e, 0xfffffffffffffffd}, 0x10)
mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x204c81, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x204c81, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) (async)
lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)

11m25.497739397s ago: executing program 2 (id=116):
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000100)={0x1, 0x30000, 0x40, 0x6dd, 0x20, 0x1, 0x2, 0x801, 0xffffff6f, 0x9, 0x100, 0x8, &(0x7f0000000000)=[0x8, 0x6, 0x1], 0x3, 0x0})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000440)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x100, 0x5}})
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

11m24.942269178s ago: executing program 32 (id=116):
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000100)={0x1, 0x30000, 0x40, 0x6dd, 0x20, 0x1, 0x2, 0x801, 0xffffff6f, 0x9, 0x100, 0x8, &(0x7f0000000000)=[0x8, 0x6, 0x1], 0x3, 0x0})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000440)={0x2, 0x0, 0x98, &(0x7f0000000380)={0x6, 0x100, 0x5}})
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

11m24.177750445s ago: executing program 4 (id=122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x2)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084)
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

11m23.884770836s ago: executing program 4 (id=124):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x2000001, 0x55, 0x3})
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x8, &(0x7f0000002680)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000850000000700000018260000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000001100)='GPL\x00', 0x1000004, 0x1000, &(0x7f0000001140)=""/4096, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x0, 0x20000, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, r1, r2, r1, r2, r1], 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$video(0x0, 0x7, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
lseek(r5, 0xfffffffffffffff5, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)
mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYBLOB])
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'})
preadv2(r4, 0x0, 0x0, 0x9, 0x4, 0x10)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0xd54, 0x0, 0x1}, {0x0, 0x20000000}, 0x0, 0x10, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x6})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
read$FUSE(r5, &(0x7f0000000580)={0x2020}, 0x1614)
r7 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x3a}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x8, 0x1, {{}, @multicast2, @remote}}]}, {0xffffff1a}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

11m21.449954896s ago: executing program 4 (id=133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, &(0x7f0000000500)='t\x12\xe1\xc2\x95/!\xa2\xea\xe2N(Y\xf0%\x01\xf8U\x17\xa2\x89\x98\x0f\x9e\xdfhY\v9\x92\v\xb2\xd3\xd5<\xfe\x8c\xa34]\xca\xad\x94\x18L\x948e\xec\xe4ZN\x8au\xf7\x05\xba\xb9\xd9|\xe9\xab[3\xc2\xa2\xc5x\x92[\x93\x9b\x9b\xdd\xec\xf7\xa3\x1d\xe2\x92\xef\x0eiN\xa2\bz\x11\xa8|\xb9c\x905\x03\xac\xb0rZ\xe3~@>r\xe7\xb6\x12\xf8\xbf\x06(\x87\xc2\x154\x12\xaa9\x12IC\v\xce\x1f\xf1r\x97\xe3\xedYU+\xc3\x7fw\xd8w\xf2#em\nd')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x14})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084)
r4 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8)
mount$9p_unix(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x40000, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=unix,fscache,posixacl,nodevmap,uid>', @ANYRESDEC, @ANYBLOB="2c61707072616973652c61707072616973655f747970653d696d617369672c6861a49f2c657569643da33254b991ad5a2ed63245c4cfa41cf3427ec87ee51f37f6b90e654ccae0d97a432d5fa7d59be5baf08b5fe683424f384bb0e0b266ccf457a18eb66dfa03ee1855619cc657c42a17b19192d738007558626d9afcdca02479477227b36cdafeb6cf", @ANYRESDEC=r5, @ANYBLOB=',rootcontext=user_u,\x00'])
chdir(&(0x7f0000000440)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
socket$can_bcm(0x1d, 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11m21.029076187s ago: executing program 33 (id=133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, &(0x7f0000000500)='t\x12\xe1\xc2\x95/!\xa2\xea\xe2N(Y\xf0%\x01\xf8U\x17\xa2\x89\x98\x0f\x9e\xdfhY\v9\x92\v\xb2\xd3\xd5<\xfe\x8c\xa34]\xca\xad\x94\x18L\x948e\xec\xe4ZN\x8au\xf7\x05\xba\xb9\xd9|\xe9\xab[3\xc2\xa2\xc5x\x92[\x93\x9b\x9b\xdd\xec\xf7\xa3\x1d\xe2\x92\xef\x0eiN\xa2\bz\x11\xa8|\xb9c\x905\x03\xac\xb0rZ\xe3~@>r\xe7\xb6\x12\xf8\xbf\x06(\x87\xc2\x154\x12\xaa9\x12IC\v\xce\x1f\xf1r\x97\xe3\xedYU+\xc3\x7fw\xd8w\xf2#em\nd')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x14})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084)
r4 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8)
mount$9p_unix(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x40000, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=unix,fscache,posixacl,nodevmap,uid>', @ANYRESDEC, @ANYBLOB="2c61707072616973652c61707072616973655f747970653d696d617369672c6861a49f2c657569643da33254b991ad5a2ed63245c4cfa41cf3427ec87ee51f37f6b90e654ccae0d97a432d5fa7d59be5baf08b5fe683424f384bb0e0b266ccf457a18eb66dfa03ee1855619cc657c42a17b19192d738007558626d9afcdca02479477227b36cdafeb6cf", @ANYRESDEC=r5, @ANYBLOB=',rootcontext=user_u,\x00'])
chdir(&(0x7f0000000440)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
socket$can_bcm(0x1d, 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10m57.42327705s ago: executing program 3 (id=203):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x138c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1330, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x21c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x17c, 0x1e, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb6, 0x3, 'bpf\x00\x02\xd7(\x83\xdd}&\xc5\xb3\x93rS\xcdP\xd8\xed\x8d\xfd\x9a\xf0\x88\x8c$\x18\x1ee\xee\xb2\xbb8\x8a\x88\xa2\xd8X\x86\xa1a\x9d\x8a\xfc\x89\xf1\x8d\xe0,\x14h|\xde5\x86\xf2z\xf4\x9d\xe3\xfc\x95\xd9\x06P\xf9\x03\xb0\xe1\xb5\xb2\x8d&?R\xc9-.\xd8\x7f\xedb\\J\x97\x8d\xf4\x0e\x10S~\x00\x00\x00\x00s\x82\xf9\xcb\x88\xb3z2u\x91\xd4B\xad\x86sIT\x04\x87\xe2p\xf3OU\xa3\xc0\\\xd2DZ\xa3\\\x11\xd5\x81\xa2\x8a\xf2\x9e\xbd\xb6\xac\xd7e\xcc\r\x80\xdc\x10\x8e\xaa\xe6\xf5\xa3nV\x04\xa98\\\x16z\xa5+AV\xe2\x88\xe1\xc6h\x01d\xaa\x9bSw\xffm\xe0\xedO'}]}, {0x95, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010127b2a9ceab9c4085f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x10f4, 0x1, [@m_pedit={0xfb8, 0x11, 0x0, 0x0, {{0xa}, {0xef0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xff, 0x4, 0xffffffffeffffff5, 0x5, 0x53}, 0x6, 0x40}, [{0x1ff, 0x4, 0x3, 0xa82, 0x80000000, 0xd7}, {0x5, 0x200, 0xb, 0x6b00000, 0x57, 0xffffffe6}, {0xc, 0x9, 0x7f, 0x3, 0x4, 0x4}, {0xfffffffc, 0x5, 0x4, 0x9, 0x5, 0x1}, {0x3, 0x40000, 0xff, 0x6, 0x5, 0x200000}, {0x0, 0x1, 0x1000, 0x6, 0x3, 0x64}, {0x400, 0x48, 0x7fff, 0x2, 0x6, 0x1ff}, {0x8, 0xf57, 0x8, 0x462e, 0x7, 0x200}, {0x1, 0x80, 0x8, 0x6, 0x1, 0xe}, {0xffff7fad, 0x9, 0x3, 0x3, 0x80000000, 0x8}, {0x6, 0x1, 0x3, 0x0, 0x10000, 0x4}, {0xb88, 0x3, 0x9b, 0x57, 0x40, 0x3ff}, {0x7, 0x1, 0x6, 0x0, 0x2, 0xc}, {0xeb3, 0x1, 0xa, 0x1, 0x7, 0x2}, {0x0, 0x2, 0x3, 0x101, 0x8, 0x5d00377a}, {0x7f, 0x5, 0xc, 0x7, 0xfffff1ab, 0x7}, {0xe, 0xe, 0x9, 0x4, 0x1}, {0x1ff, 0x9, 0xd, 0x0, 0x8, 0x7}, {0xf2a, 0x400, 0x8ac, 0x4ec, 0x3ff, 0xfffffbff}, {0x7, 0x4, 0x7f, 0x7c, 0x1, 0x4ba}, {0x7, 0x6, 0x6, 0xff, 0x40000, 0x3}, {0x7ff, 0x0, 0x4, 0x9, 0x7, 0x3}, {0xfffffff9, 0x0, 0x5, 0x19, 0x7, 0x9}, {0x6, 0x1, 0x1, 0x23b, 0x1a0c, 0x7ff}, {0x6, 0x8, 0x5, 0x4, 0x4d07}, {0x800, 0xfffffffa, 0xcb0c, 0x4, 0x3034000}, {0x10, 0xabbc, 0x80000000, 0x7, 0xe71, 0xc}, {0x10000, 0xd, 0x3, 0x7, 0x1, 0x7b59}, {0x7fff, 0x5, 0x0, 0x3, 0x8000, 0x7fffffff}, {0x0, 0x8, 0x2, 0x7fffffff, 0x6, 0x4}, {0x10000, 0x6, 0x81, 0x1000, 0x2, 0x2}, {0x0, 0x200, 0x80, 0x0, 0x96da, 0x1}, {0xeb0, 0x2, 0x9, 0x2, 0xa2, 0x40000000}, {0x9, 0x1, 0xc4, 0xe, 0x3, 0x8}, {0x7ff, 0x5, 0x7, 0x1000, 0x7, 0x2400}, {0x13b, 0x7, 0x10, 0xffffffff, 0x4}, {0x6, 0x7, 0x8, 0x1, 0x6, 0x3}, {0x8, 0x47361e1a, 0xfffff000, 0xcb, 0x6, 0xeae7}, {0xffff, 0x2, 0x5, 0xffffffff, 0xdd, 0x8}, {0x0, 0x7ff, 0x4f46, 0x1, 0x8, 0x4a1fba9a}, {0x5, 0xc, 0xf260, 0x0, 0x7fff, 0x3134}, {0x81, 0x2, 0x2a65, 0x7ff, 0x6596, 0x928}, {0xa00, 0x400, 0x9, 0x0, 0x8, 0x6}, {0x6, 0x4, 0x9, 0x6, 0x5, 0x2}, {0x0, 0x3, 0x8000, 0x4000000, 0x7f, 0x6}, {0x80000000, 0x8, 0x2, 0x4, 0x3, 0x2}, {0x66, 0x0, 0x100, 0x8000, 0x5, 0x2}, {0x220, 0x7, 0x6, 0x5, 0x4, 0xbe1}, {0x1, 0x10000, 0x3, 0x785b, 0x200, 0x6}, {0x1c045826, 0x3, 0xfff, 0x4, 0x7, 0x8}, {0x4, 0xfa2, 0x7fffffff, 0x7fffffff, 0xffffffff, 0x6}, {0x9bc, 0x5, 0x8, 0x1, 0xe, 0x3}, {0x3, 0x0, 0x2, 0x7ff, 0x8, 0x7}, {0x7ff, 0x6, 0x1, 0x4000, 0xffffffff, 0x1}, {0xfffffaee, 0xe, 0x7, 0x5, 0x7f, 0x9}, {0xffffffff, 0x9, 0x3, 0x5, 0x6, 0x200}, {0x7f, 0xfd8, 0x8, 0x9, 0xffffd026, 0x5}, {0x3, 0x4, 0x4, 0x8, 0x4, 0x80000001}, {0x7e7, 0x8000, 0x58, 0x2, 0x7, 0x6}, {0x81, 0x8, 0x7, 0x80000001, 0x9, 0x6}, {0x7c1c, 0x6, 0x7f, 0x727a, 0xd, 0x10}, {0x6, 0x7, 0x78b, 0xf, 0x3}, {0x4b, 0x0, 0x133b, 0x1ff, 0x7e3b, 0x500000}, {0x4, 0xb, 0xff, 0x7, 0x6, 0xc}, {0xfc9, 0x1, 0x2, 0x4, 0x1ff, 0x9c4}, {0x6, 0x5, 0x4e5, 0x80000000, 0x10000, 0x9}, {0x7ff, 0xff, 0x0, 0xf0, 0x9, 0xb}, {0x5, 0x5, 0xf7c5, 0x5, 0x9caa}, {0x7, 0x7fffffff, 0x2, 0x9, 0x8, 0x7}, {0x1ff, 0x8, 0x4a78eb5c, 0x0, 0x8, 0xfffffffa}, {0x9, 0x8001, 0x4, 0xfffffffe, 0x400, 0x8}, {0x4c, 0x1ff, 0x3cb, 0x1, 0xbd5d, 0x7}, {0x1, 0x3c9b, 0x8, 0x6, 0x8, 0x5}, {0x8, 0x2, 0xffffffff, 0x7, 0xfff, 0xffffffff}, {0x9, 0xd, 0x6dfb, 0xffffff56, 0x8, 0x22f4}, {0x8, 0x3, 0x2, 0x200, 0x1, 0x6}, {0x0, 0x5, 0xffff, 0x1, 0x6, 0x4}, {0x2383, 0xffff, 0x9, 0x5, 0x6}, {0x1, 0x9, 0x2, 0x7, 0x7, 0xaa}, {0x4, 0x66c, 0x9, 0x2, 0x5, 0x8001}, {0x3, 0xfffffff7, 0x7, 0x16, 0xffffffff, 0x7fff}, {0x2ab2, 0x1, 0x9, 0xc, 0x62015bce, 0x3}, {0x3, 0xffffffff, 0x7, 0x6, 0x401, 0x4}, {0x2, 0x7ff, 0x8, 0xffff, 0x3, 0x9}, {0x0, 0x40, 0x0, 0x3, 0x5, 0x4}, {0x2, 0x5, 0x4, 0xe, 0x0, 0x1}, {0xfcfd, 0xfffffe00, 0xd, 0x2, 0x1000, 0x8b}, {0x7, 0xfffff000, 0x621, 0xf, 0x8, 0x4}, {0x4, 0x55, 0x5, 0x3, 0x60, 0x8000}, {0x6, 0x400, 0x4, 0xfffffff2, 0x10000, 0x5}, {0x3, 0x9, 0x7a, 0x800, 0x6, 0x2}, {0x6, 0x0, 0x401e, 0x800, 0x9, 0xffffffff}, {0x6, 0x2, 0x1, 0x1, 0x2, 0x4}, {0x4, 0x0, 0x1, 0x200, 0x8, 0x9}, {0x401, 0x6, 0x6, 0x1c, 0xfb26, 0x4}, {0x4, 0x1, 0x1, 0x10, 0x2ed, 0x1ff00000}, {0xf319, 0x4, 0xfd, 0x11, 0x8, 0x4}, {0x6613, 0xf, 0x9, 0x8, 0x7, 0x300}, {0xb21a, 0x1, 0x10001, 0x200, 0x80000000, 0x2}, {0xff, 0x1, 0xcdb, 0x536c, 0x5, 0x82}, {0xffffab55, 0x7, 0x1, 0xffff0001, 0x8000, 0x90f9}, {0x8000, 0xa7, 0x5, 0x69, 0x20000, 0x2}, {0x7, 0x5, 0x1, 0x2, 0x1, 0x3}, {0xd, 0x6, 0x1, 0x3, 0x6, 0xc8}, {0x0, 0x5, 0x3, 0x0, 0x5, 0x1ff}, {0x989b, 0x2, 0x0, 0x5, 0x0, 0x80000001}, {0xffffffff, 0x8, 0x9, 0x1, 0xcc}, {0x2, 0xa5d, 0x1d0d, 0xc3d, 0x0, 0x4}, {0x8, 0x2, 0xdbd, 0xf910, 0x9, 0x2}, {0x8, 0x4, 0x5, 0x4, 0xb, 0x1}, {0x2, 0x80000000, 0x3, 0x9, 0x0, 0xfffffffe}, {0x0, 0xcd94, 0x0, 0x1, 0x4}, {0x9, 0x8, 0x1, 0x8001, 0x7cf85c00, 0x1}, {0x3, 0xe, 0x7, 0x1, 0x2, 0x7}, {0xfffffe00, 0x6, 0x5, 0x4, 0x7656130d, 0x7}, {0xb, 0x5795792a, 0x4, 0xffff, 0x9, 0x2}, {0x4, 0x3, 0x4, 0x3ff, 0x8, 0x800}, {0x4, 0x6c44, 0x101, 0x4, 0x2, 0x1ff}, {0x6, 0x0, 0x3, 0x9, 0x9, 0x101}, {0xfe, 0x2, 0x1, 0x3, 0x6, 0x7}, {0x4, 0x10001, 0x4, 0x0, 0x4bd, 0x3}, {0x0, 0xffff, 0x7, 0x6, 0x101, 0x3}, {0x7, 0x80000001, 0x9, 0x101, 0x8, 0x7}, {0x3ff, 0x1, 0xdc1, 0x7fe, 0x8, 0xf}, {0x2, 0x5f688859, 0xb1, 0xffffffff, 0x5de4, 0x3}, {0x7fffffff, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x3, 0xe9a, 0x30000, 0xf, 0xd0, 0x326}, {0x2, 0x400, 0xf3, 0x0, 0xb, 0x8}], [{0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x6}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x2}, {0x1}, {0xf8a12baccb22d23}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x0, 0x518aa8d1e2bb545a}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xcc, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xb}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7b4f990e179599aa}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x9d, 0x6, "8901e361b494b5d8b0d32d835539ead4af550bea79e34365d32c492ff2e22234f2b145ddfc4f30f688e0164a553709adb1ccfc33f7bfc5becc42c696048040e4af43c9d285d1929094f5f40aa47666599f464f6df29bb65f74bbfc47c573c887701724a39e55989a4e5554729f6e53e8719a8bf21160b4676b58ad17436dd03428b944405d29d7f2cda329b961ab58304018c8ec4f47d32b79"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x138, 0x2, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "57512c7328557d10b965d75ac9efcd29"}, @TCA_CT_LABELS={0x14, 0x7, "8d60149ca32328c8edfdc3932ed2949b"}, @TCA_CT_ZONE={0x6, 0x4, 0x8000}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x3c}, @TCA_CT_LABELS={0x14, 0x7, "563a101103fc28bace1d7baeed16f654"}]}, {0xbb, 0x6, "a8ac60a5c02cb307a2d4bd88100e383a56bcac0ef91a36ca7b23f8a3b3ac8212c5b55af1ed7b3d7324e8dee052ddf2bec6c9681278fd0104852520d8895bc36a40c1b7ef79ad021940e59775a6a4db78cc2753995c5d27f21e38676e72468eb0467ce7f663d2f9596b724b1aafe8680a2d0d906fc4076104055c4dbefacb20e8683cb78d438536e46e3584ad5ef6c22fd4bb246efa974c3d313cf9ae18a9e7f6c4399bf86440cfa440a9a91faa112c6c99506f8d72ddb8"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x138c}, 0x1, 0x0, 0x0, 0x81}, 0x20000084)
r0 = socket(0x10, 0x803, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r2=>0x0)
fcntl$setown(r0, 0x8, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
setrlimit(0xf, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r7=>0x0)
sched_setscheduler(r7, 0x6, &(0x7f00000000c0)=0xffff)
sendfile(r4, r4, 0x0, 0x7fffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

10m56.195366089s ago: executing program 3 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
read$FUSE(r1, &(0x7f0000003000)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000003000)={0x2020}, 0x2020)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x280}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x3]}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002200)={0x18, 0x0, 0xc8da923139bed765, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x200080c0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)
sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0xe, 0x2014}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0xe, 0x2014}, 0x20)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

10m55.588315213s ago: executing program 3 (id=207):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0xf, &(0x7f0000002100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000021c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002300)={0x3, 0x9, 0x2, 0x7}, 0x10}, 0x94) (async)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async, rerun: 32)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async, rerun: 32)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x2, 0x20002f7})

10m55.347703742s ago: executing program 3 (id=209):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

10m55.029979087s ago: executing program 3 (id=212):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='afs_call\x00', r3, 0x0, 0xd}, 0xffffffffffffffbe)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
inotify_init1(0x800)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x28e, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r8, &(0x7f0000003680)={0x2020}, 0x2020)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8b, 0x0, 0x4}}}}]}, 0x40}}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

10m54.670065991s ago: executing program 3 (id=214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000009000000857040da4205ac26b275038fb567fb98fd0000000f0000009500"/48], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0xe6, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote})
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)

10m54.229545584s ago: executing program 34 (id=214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000009000000857040da4205ac26b275038fb567fb98fd0000000f0000009500"/48], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0xe6, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote})
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)

7m29.249869885s ago: executing program 1 (id=947):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000009000000000000000000850000002e00000095000000000000000000c83b82d057d503da5d5565e7fca6f2e743e05c4eedc609c37c165de5e74d2abf34431850334aa45f3877cee4784e0942e03e7eaa4974aaf9c5df37803ee740f392169a9538b6c3d422ffa93f39fd8fd820df29b2825c16e9bcf37257b66220f7a79c45971e1ee902033fa5b466a212885282f9e907ea911182fa28235057ec9c52965eec56302fb8db2e74d6d6446c3c8d3fd327e0dea8bbac4b27"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xffffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x9, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1ed, 0x5, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x100000, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f0000000080))
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="ad56b699f75b62641d884d2e43ca00f58cd2488900630c", 0x17)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x1002, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="cf042bbd701200000008000300", @ANYRES8, @ANYBLOB="0a00060008021100000100000c004300f8fffffff5ffffff0600b500bc060000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000836}, 0x0)
ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080))

7m26.819327499s ago: executing program 1 (id=958):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
creat(0x0, 0x3) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80)=[0x7fff], 0x0, 0x4, 0x1, 0x1}}, 0x40) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unshare(0x24020400) (async)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x4, 0x3, 0x1000, 0x200, 0x0, 0xffff}) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)

7m25.136250515s ago: executing program 1 (id=963):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c)
syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=<r6=>0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1})
io_uring_enter(r3, 0x47fb, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r10 = fsmount(r0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000772ae3408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241aee000a85240101070424020a1524120009a317a88b", @ANYBLOB="20b69849ff1b096fbfd4c41f8e4f4cd5e45b7aa0948fd93409b7be278c3ee0af0f951692279ab28294caa9bb75259a46a9987dbdff91d700881a3c660352069c91223cf8f581bf68c274db3499101c25a13e319dcc6a88e9e74dc9c11b798060aca95ab0cc43ae57692b1d121965f75d021499c5382800d71588", @ANYRESOCT=r10], 0x0)

7m24.44050768s ago: executing program 1 (id=966):
socket(0xa, 0x3, 0x2) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x300)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r7 = socket(0x2b, 0x3, 0x0)
write(r7, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9) (async)
r8 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400)
ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000001c0)={0x9, 0x3, 0x1, {0xb, 0xfdfffe40, 0x20000009, 0xf}})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110025bd7000000000002500000008000300", @ANYRES32=0x0, @ANYBLOB="0a003400020202020202000005000800000000000800350003000000080009010000000000000000080211000001000011000700bac904fc3c65f1a259e8f0dea50000000800260000000000"], 0x68}}, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000)

7m22.137782731s ago: executing program 1 (id=974):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

7m20.894306442s ago: executing program 1 (id=977):
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x0, 0x0, 0x5, 0x590f, 0x202})
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])

7m5.841455043s ago: executing program 35 (id=977):
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x0, 0x0, 0x5, 0x590f, 0x202})
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])

14.275279742s ago: executing program 0 (id=2505):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_dev$media(0x0, 0x66, 0x180502)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0)
prlimit64(r1, 0xe, 0x0, &(0x7f0000000040))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84880, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x2})

13.138140921s ago: executing program 0 (id=2508):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0xfffffffffffffff5, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x4, 0x0, 0x200000000e, 0xffff, 0x369, 0x7, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x5c}}, 0x0)

12.551922494s ago: executing program 0 (id=2510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000340)={@local, @random="62f200ada462", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0x72, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x1, 0x0, 0x3, 0x65, 0x78, 0x11, 0x88, 0xe, @multicast1, @rand_addr=0x64010100, {[@end, @cipso={0x86, 0x40, 0x2, [{0x1, 0x12, "890000020100000000b753db448c258e"}, {0x5, 0x11, "23f1102ca3b5164f26fba9873b17d4"}, {0x0, 0x12, "5264dea83ace2dd0fcaf5b3dbd950c25"}, {0x0, 0x5, "32ced9"}]}]}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

12.285854415s ago: executing program 0 (id=2513):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x20}, {}, {0x0, 0x3}], 0x3f}})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000180)={0xfffffff9, 0x32314742, 0x9, 0x0, 0x2, @stepwise={{0x3, 0x7ff}, {0xa2fe, 0x5}, {0x6438, 0x6d4}}})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)

11.25803356s ago: executing program 0 (id=2518):
syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
unshare(0x20000400)
r0 = socket(0x2a, 0x2, 0x0)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x16}, 0x20)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r6 = accept(r5, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

11.104370533s ago: executing program 0 (id=2519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r1, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}]}, {0x14}]}]}, 0x30}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x67, @broadcast, 0x4e21, 0x0, 'lblcr\x00', 0x6, 0x0, 0x36}, 0x2c)

6.647310201s ago: executing program 7 (id=2533):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022d00010700800b0904"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x20, 0x30, 0x2, "e9de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x1a, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30323953})
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x0, 0x3, "4417d5ca22363683a82c15fc5efa046a7996a0c6aef1141beeac0c3036fc024ad52feab6b3e72317a39b8a32b04c8cb9284a0ab9cb0656d6bc0f0d0ce513e18c86acf28d196c53ccefaebad55a00f79d21733da8ca69e4d92b9534367a91fb107c1ca73de49e0e3f0d4160053000000000"}}, 0x0, 0x0}, 0x0)

6.054153584s ago: executing program 6 (id=2535):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x80, 0x0, 0xc}, {0x3, 0x0, 0x0, 0x5}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff7}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect(r2, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005fd0a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', <r5=>r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @local, @empty, 0x7800, 0x40, 0xb, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0)
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca002000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{r8}, &(0x7f0000001740), &(0x7f0000001780)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4)
write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d)

6.053902793s ago: executing program 5 (id=2536):
r0 = gettid()
sync()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
sync()
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

5.526883064s ago: executing program 6 (id=2538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x6}, @code={0xa, 0x5d, {"410f017800c482fd3453790f01cf660f3a22b7614c00005a48b8b2240000000000000f23d00f21f835300000020f23f866b8d3000f00d88f2878c1500f056744f88f4978e3218f69d89a6800"}}, @wrmsr={0x1e, 0x20, {0x8ff, 0x2ca}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x437, 0xaa35}}, @code={0xa, 0x62, {"660f38813666400f231f4c0fc719c4a1fa7ec966baa10066ed2e439cf30fc7b7c78a0000b9800000c00f3235008000000f30c744240000000000c7442402d2d5eb43c7442406000000000f011c2467f398"}}, @rdmsr={0x32, 0x18, {0xb4c}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @wrmsr={0x1e, 0x20, {0x24e, 0x100}}, @code={0xa, 0x71, {"3e0f01c9c42189e53248b8bf4fffffffffffff0f23c80f21f8350800f0000f23f80f060f01c3c4814df647a048b800000000010000000f23d80f21f835000000900f23f8b9f2030000b825d31b85ba000000000f3044d9eb440fc72d32690000"}}, @wr_crn={0x46, 0x20, {0x4, 0xfff}}, @rdmsr={0x32, 0x18, {0xb89}}, @cpuid={0x14, 0x18, {0x6, 0x7}}, @rdmsr={0x32, 0x18, {0x897}}, @wrmsr={0x1e, 0x20, {0x40000432, 0xffffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x232, 0x9}}, @rdmsr={0x32, 0x18, {0xbef}}, @rdmsr={0x32, 0x18, {0xb2e}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @uexit={0x0, 0x18}, @rdmsr={0x32, 0x18, {0xaf3}}], 0x348})
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000006c0)={0xa, 0x0, [{0x3, 0x0, 0x80c}, {0x9}, {0x8000, 0x0, 0x4c}, {0xa, 0x0, 0x800}, {0x841, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x75ac, 0x0, 0x3}, {0x8001, 0x0, 0x7}, {0x9, 0x0, 0xea}, {0x8, 0x0, 0x4}, {0x4, 0x0, 0x8000000000000001}, {0x7, 0x0, 0x5}, {0x2, 0x0, 0x2}, {0x125, 0x0, 0x7f}, {0x0, 0x0, 0xffffffffffffffff}, {0x7fff, 0x0, 0x7}]})
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r2, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)

4.682583995s ago: executing program 7 (id=2540):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x6, 0x0, {0x15, 0x4, 0x3, 0x3, 0x8, 0x67, 0x4, 0x77, 0x1, 0x8, @multicast1, @broadcast, {[@ssrr={0x89, 0x1f, 0xec, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x4, [{@loopback}, {@private=0xa010102, 0x4}]}, @ssrr={0x89, 0x7, 0x4b, [@remote]}, @timestamp_prespec={0x44, 0x4, 0x1}]}}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)={0x98, r3, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0xa, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2a0c}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x98}}, 0x0)

4.269097659s ago: executing program 6 (id=2542):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x8805)
readv(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x84, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)
prlimit64(0x0, 0x1, &(0x7f0000000200)={0x8, 0x7fffffffffffffff}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x98, 0x218, 0x98, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@local, @empty, 0x0, 0xff00, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x32}, 0x287, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@local, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x1, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x40}, 0x100, 0x1000, 0x4e21, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4eb)

4.134180526s ago: executing program 5 (id=2543):
r0 = socket$kcm(0x10, 0x5, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2008080, &(0x7f00000003c0)=ANY=[@ANYBLOB="1582f5d86571ef7b8fd8c99e542a89fabbcf127b4c21f7aa93731ac7b6ee6e2150df4638111a3e35ea57d9a6b25257809c90b3505682b3a9e31c9ca7e06a86eb82e325c29857389098d801000000000000b25eb6c851c9786df6e03012a55888c4ddac6f4a8bfb32c70dd29b6cad550000000000"]) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async, rerun: 64)
recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000280)=""/183, 0xb7}], 0x7}, 0x60}], 0x1, 0x62, 0x0) (rerun: 64)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x2010, r1, 0x8000000) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x148, &(0x7f0000000000)=0x1, 0x0, 0x4) (async, rerun: 64)
fcntl$getown(0xffffffffffffffff, 0x9) (rerun: 64)

4.073988575s ago: executing program 5 (id=2544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50)

2.688746709s ago: executing program 6 (id=2545):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x2c020400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x10, 0x1405, 0x131}, 0x10}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r5=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, &(0x7f0000000100))
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x0, 0x0, &(0x7f0000000200))
r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000600)={'\x00', 0x0, 0x2, 0xb, 0xd17, 0x1, <r8=>r5})
getpriority(0x2, r8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x32}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0x1, &(0x7f0000000300)="309f2774880349f71bc43cc777c65904da58343ea7d4713d2ce101802bf03cd4b9b44238dda908c351148867d421b19b333a136bc37bee3cc7cdbbb72bd2672fac81d78dd80544"}, 0x20)
sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {0xd, 0xe}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2.684880835s ago: executing program 8 (id=2546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="07000000010001", 0x7)
r6 = syz_pidfd_open(r3, 0x0)
setns(r6, 0x24020000)
r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee00)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x10000000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206030000000000000000000000000605000100070000000900020073797a31000000000c00078008001300000003f0050005000200000005000400010000000c000300686173683a697000590a3e33771bdb055400056bda766bd511262610e303dec47d161199873f37c066d4ea2a353e142fed842e289b0e7602b2"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

2.684621685s ago: executing program 7 (id=2547):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000003820000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0}) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x18, &(0x7f0000000800)={r2, 0x1, 0x6, @random="be189782b5ba"}, 0x10) (async)
sendto$packet(r3, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000140)=""/79, 0x4f}], 0x2, 0x5, 0xbd91)

2.561643085s ago: executing program 5 (id=2548):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x6)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=r0], 0x0)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf1, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x240000ef)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x480)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4})
ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0xfe, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000500)="43dd93573829", 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

2.097872668s ago: executing program 7 (id=2549):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x1}, 0x20) (async)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0xe7, 0x0, {r3}, {0xee01}, 0xda7}) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)

1.646311643s ago: executing program 8 (id=2550):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x20)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000240), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, '\x00.\x11U!\xac\xb2\x80\x9f4Lg\x1d\xbek\xefL !\t\xa8\x81\x1a\x84O\xcb\x9b5\x0e^\xe8\xd72L\xba\x06\xef7m\xb6z\xa2\xfev 2\x12X\xbb\xe3-1\xac\xdc\xeaX\xb8\xdb\x88\x80;\xd2\xf7\x11\xcd\xc1\x81\x144\x96tJ&\xaa\x8e\x111HX\xc2Z\xdc\xa5\xe1\xc2p/\xc1\xa7\x82*\v\xbfk\x12S\x92\xa3\x87\xa8v\xa0\x01\xca\xab\xa1\x19\'j\x8a\xbdf \xf5@\xb1\x8aE <\xa7K\xe3\xedG\xffM\xd2e\xadfi\xba\x121\x175\x1a\xee+X*\x8a\x82\x8aNm9\x96\x11\x15\xe9\xb5;3\t\x06-\xe6\xf2\xdf%[C6,\x91\xe6\xfb\xef\xcd\xd3\x0fg\x8e;p\xa7_\x98\xcen\xb2\a\xfb7y\xec\xd1\xdb\xd3\x1e\xd1\xcc\xc7e\x82\xf6\xe0\xbb\xeftD\x7f\x89\xb7\xf8\xc1\x1f\xfbz9\xa8\xc9\x87\x0f\xb8!\xb5\x93\xf6\xe9m\xb4\x13M\xf9E\x06\x85\x1f]\xd7\n3\x0e\x1f\x1aT\x05\xc7\x81\xdfs\'UJ\x92\xc3\x9a\xfe\xa8\xa7\xa9G\xd3'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d"}, 0x161)
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2)
write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x200000]}})
listen(r3, 0x3)

1.453873004s ago: executing program 7 (id=2551):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x4800)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}})
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0)

1.437113447s ago: executing program 6 (id=2552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (rerun: 64)
write$binfmt_misc(r1, &(0x7f0000000140)="bf7103ee541082941b47115b7d254fc503e13b1594a49de4c84a32c66c455d51e314c741f6204172183bb9220cc5d6516b2cceac33354cb8ce9774a729312c12e58a5e47653887b3dd202fd97c353488104c67ce0231ef297ebfce535604bd44858b91572b6b38e369896bac5b6a19a39c68e12a7b9560ebf1232046caa57dcfd7ee4986bacdc0aba851b3757dff9a2a8d6d0116e09cd74c9e56e433dc49c07aa8ecf0ae91d3657e105684b419013b5b23fb0514fa8765726d7679cb2e4ae5a5c3d2eb2703fb5143cb3849283c968be41e1b6cdba3d2f181d3a85c", 0xdb) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) (rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000040)}, 0x20) (async)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x9f, 0x2) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601020000000000000000000000001400c3a0a78df015a276feff070013400000000211000300686173683a69702c6d61726b00000000050005000a00000005000400000000000900020073797a31000000000500010007000000e25685f74cc7a3d75b947a22a16b33eeba60451ec9b6831b8b8d4b20303a9b00592be534670d000000f2f7"], 0x60}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) (async, rerun: 64)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x10, 0x1, 0x6, 0xfe, 0x0, 0x20}, {0x0, 0x6000, 0x9, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x3, 0x4}, {0x8080000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2}, {0xdddd3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x408, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async)
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x22}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)

1.400967631s ago: executing program 8 (id=2553):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000740)=0x402e, 0x4)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2, 0x3c, r3}, 0x10)

1.270117197s ago: executing program 8 (id=2554):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x8805)
readv(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x84, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9)
prlimit64(0x0, 0x1, &(0x7f0000000200)={0x8, 0x7fffffffffffffff}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x98, 0x218, 0x98, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@local, @empty, 0x0, 0x2000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x32}, 0x287, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@local, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x1, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x40}, 0x100, 0x1000, 0x4e21, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4eb)

1.26984751s ago: executing program 6 (id=2555):
socket$rds(0x15, 0x5, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd5, 0x5e, 0x68, 0x20, 0x9710, 0x7820, 0x2016, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0x91, 0x0, 0x0, 0x5f, 0xa3, 0x53}}]}}]}}, 0x0)

1.241808442s ago: executing program 8 (id=2556):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

1.053597547s ago: executing program 5 (id=2557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x7, 0xf4, 0xed0}, 0x10)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a)
sendmsg$nl_route(r4, 0x0, 0x4000864)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380))
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20)

30.077144ms ago: executing program 7 (id=2558):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0xc00, 0x1)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x28a80, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
madvise(&(0x7f00005b7000/0x4000)=nil, 0x4000, 0xd)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1c1081, 0x0)
getdents64(r5, 0x0, 0x0)
getdents(r5, 0x0, 0x0)
syz_io_uring_setup(0x2f75, 0x0, 0x0, &(0x7f00000000c0)=<r6=>0x0)
eventfd2(0xff, 0x80001)
syz_io_uring_submit(0x0, r6, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})

29.713577ms ago: executing program 5 (id=2559):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=<r0=>0x0)
capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0x5, 0x200000, 0x7, 0x0, 0x4d0aaa7d}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5f8d}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xbc}}, 0x20008004) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x4c, r5, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xd92}, {0x6, 0x11, 0x2300}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1])

0s ago: executing program 8 (id=2560):
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x10500, 0x34)
socket$netlink(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

peed USB device number 60 using dummy_hcd
[  540.157030][T12172] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  540.471066][T12164] usb 8-1: Using ep0 maxpacket: 16
[  541.428064][T12164] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  541.460249][T12172] usb 7-1: device descriptor read/8, error -71
[  541.546982][T12164] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  541.567405][T12164] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  541.577091][T12164] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.598284][T12164] usb 8-1: Product: syz
[  541.602853][T12164] usb 8-1: Manufacturer: syz
[  541.608449][T12164] usb 8-1: SerialNumber: syz
[  541.629086][T12164] usb 8-1: config 0 descriptor??
[  541.652792][T12164] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  541.663219][T12164] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  541.711748][T12173] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  541.766000][T12172] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  541.793922][T12173] usb 6-1: USB disconnect, device number 76
[  541.933214][T12172] usb 7-1: device descriptor read/8, error -71
[  542.045675][T12172] usb usb7-port1: unable to enumerate USB device
[  542.376417][T12164] em28xx 8-1:0.0: chip ID is em2870
[  542.387588][T12172] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  542.565305][T12172] usb 7-1: Using ep0 maxpacket: 32
[  542.587175][T12172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.590114][ T5931] usb 8-1: USB disconnect, device number 60
[  542.624086][ T5931] em28xx 8-1:0.0: Disconnecting em28xx
[  542.631102][T12172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.657410][ T5931] em28xx 8-1:0.0: Freeing device
[  542.663294][T12172] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  542.678690][T12172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.699153][T12172] usb 7-1: config 0 descriptor??
[  542.735469][T12463] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1657'.
[  543.334928][T12172] usbhid 7-1:0.0: can't add hid device: -71
[  543.361547][T12172] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  543.387595][T12172] usb 7-1: USB disconnect, device number 59
[  543.515968][T12489] 9pnet_fd: Insufficient options for proto=fd
[  543.941399][T12498] bridge0: entered promiscuous mode
[  543.946762][T12498] bridge0: entered allmulticast mode
[  543.982865][T12498] team0: Port device bridge0 added
[  544.455451][T12503] input: syz0 as /devices/virtual/input/input48
[  546.024944][T12528] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  546.214606][T12538] overlayfs: failed to resolve './bus': -2
[  546.313817][T12536] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1679'.
[  547.284772][T12547] netlink: 'syz.0.1681': attribute type 5 has an invalid length.
[  547.396897][ T6902] vlan2: left promiscuous mode
[  548.065126][T12164] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  548.226305][T12164] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  548.262026][T12164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.282856][T12164] usb 6-1: config 0 descriptor??
[  548.307817][T12164] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  548.325165][T12164] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  548.530984][ T5931] usb 6-1: USB disconnect, device number 77
[  548.562322][ T5931] ftdi_sio 6-1:0.0: device disconnected
[  549.316291][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1694'.
[  549.358004][T12593] affs: No valid root block on device nullb0
[  550.909290][T12630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.935326][T12630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.116805][T12635] input input49: cannot allocate more than FF_MAX_EFFECTS effects
[  551.604914][T12172] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  551.612603][T12164] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  551.783540][T12172] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.834134][T12172] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  551.849951][T12164] usb 8-1: Using ep0 maxpacket: 8
[  551.864962][T12172] usb 7-1: config 1 has no interface number 0
[  551.871224][T12172] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  551.888906][T12164] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1023
[  551.900617][T12172] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  551.910358][T12164] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16
[  551.920615][T12172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.934728][T12164] usb 8-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.953073][T12172] usb 7-1: Product: syz
[  551.980231][T12172] usb 7-1: Manufacturer: syz
[  551.983793][T12641] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.993678][T12641] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  551.999556][T12172] usb 7-1: SerialNumber: syz
[  552.002490][T12641] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.009694][T12164] usb 8-1: config 1 interface 0 has no altsetting 0
[  552.015820][T12641] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.042991][T12164] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  552.057376][T12172] usb 7-1: selecting invalid altsetting 1
[  552.065738][T12164] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.073883][T12164] usb 8-1: Product: 툎픒ᓇ앉톛㻎㎍늷ⴄ傡垸㘵秽凞俆쬅
[  552.076953][T12641] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  552.082921][T12164] usb 8-1: Manufacturer: ࠯
[  552.091466][T12641] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  552.096203][T12164] usb 8-1: SerialNumber: ࠓ
[  552.110360][T12641] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  552.119594][T12641] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  552.123234][T12618] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  552.144431][T12618] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  552.355439][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.364543][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.420156][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.429426][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.459520][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.540153][T12630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.552182][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.572374][T12630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.630377][T12172] usb 7-1: selecting invalid altsetting 1
[  552.638401][T12164] cdc_ether 8-1:1.0: skipping garbage
[  552.653787][T12172] cdc_ncm 7-1:1.1: bind() failure
[  552.660321][T12164] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[  552.722656][T12164] usb 8-1: USB disconnect, device number 61
[  552.864400][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.894975][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.895199][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.923055][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.004787][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1719'.
[  553.021735][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1719'.
[  553.031286][T12686] netlink: 'syz.7.1719': attribute type 12 has an invalid length.
[  554.044563][T12172] usb 7-1: USB disconnect, device number 60
[  554.145915][T12164] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  554.734028][T12164] usb 8-1: Using ep0 maxpacket: 8
[  554.739708][T12164] usb 8-1: too many configurations: 98, using maximum allowed: 8
[  554.754358][T12164] usb 8-1: unable to read config index 0 descriptor/start: -61
[  554.762862][T12164] usb 8-1: can't read configurations, error -61
[  554.831265][T12719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  554.915022][T12164] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  555.090068][T12164] usb 8-1: Using ep0 maxpacket: 8
[  555.099158][T12164] usb 8-1: too many configurations: 98, using maximum allowed: 8
[  555.112958][T12164] usb 8-1: unable to read config index 0 descriptor/start: -61
[  555.135757][T12164] usb 8-1: can't read configurations, error -61
[  555.154560][T12164] usb usb8-port1: attempt power cycle
[  555.505216][T12164] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[  555.573348][T12164] usb 8-1: Using ep0 maxpacket: 8
[  555.666981][T12745] loop2: detected capacity change from 0 to 7
[  556.076278][T12745] Dev loop2: unable to read RDB block 7
[  556.081969][T12745]  loop2: AHDI p1 p2 p3
[  556.086303][T12745] loop2: partition table partially beyond EOD, truncated
[  556.093554][T12745] loop2: p1 start 1601398130 is beyond EOD, truncated
[  556.100490][T12745] loop2: p2 start 1702059890 is beyond EOD, truncated
[  556.165579][T12164] usb 8-1: too many configurations: 98, using maximum allowed: 8
[  556.306284][T12164] usb 8-1: unable to read config index 0 descriptor/start: -61
[  556.313956][T12164] usb 8-1: can't read configurations, error -61
[  556.469448][T12164] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[  556.507377][T12164] usb 8-1: Using ep0 maxpacket: 8
[  556.526215][T12164] usb 8-1: too many configurations: 98, using maximum allowed: 8
[  556.558517][T12164] usb 8-1: unable to read config index 0 descriptor/start: -61
[  556.568370][T12164] usb 8-1: can't read configurations, error -61
[  556.581399][T12164] usb usb8-port1: unable to enumerate USB device
[  556.620905][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1742'.
[  556.633757][T12764] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1742'.
[  556.646863][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1742'.
[  556.862384][T12768] netlink: 'syz.6.1744': attribute type 39 has an invalid length.
[  557.209392][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1748'.
[  560.336812][T12799] netlink: 'syz.5.1755': attribute type 1 has an invalid length.
[  560.375929][T12807] netlink: 'syz.0.1758': attribute type 23 has an invalid length.
[  561.158761][T12826] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 12826 comm: syz.8.1763)
[  561.197775][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  561.197793][   T30] audit: type=1800 audit(1755961478.602:699): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1763" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=47312 res=0 errno=0
[  561.615592][T12835] 9pnet_fd: Insufficient options for proto=fd
[  562.285574][T12837] input: syz0 as /devices/virtual/input/input50
[  562.716395][T12846] hub 8-0:1.0: USB hub found
[  562.724725][T12846] hub 8-0:1.0: 1 port detected
[  563.255559][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  563.262113][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  564.154839][T12857] Cannot find del_set index 2 as target
[  565.914489][T12886] ip6gretap2: entered allmulticast mode
[  566.285299][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  566.355634][ T5931] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  566.362281][ T5931] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  566.794861][T12172] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  567.709515][T12172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.748359][T12172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.817383][T12172] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  567.868138][T12172] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  567.905207][T12172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.945386][T12172] usb 7-1: config 0 descriptor??
[  569.216034][T12172] hid (null): global environment stack underflow
[  569.320181][T12916] wg1 speed is unknown, defaulting to 1000
[  569.328134][T12916] wg1 speed is unknown, defaulting to 1000
[  569.372661][T12916] wg1 speed is unknown, defaulting to 1000
[  569.504585][T12916] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  569.531454][T12172] viewsonic 0003:2133:0018.0017: global environment stack underflow
[  569.739196][T12172] viewsonic 0003:2133:0018.0017: item 0 4 1 11 parsing failed
[  569.765614][T12172] viewsonic 0003:2133:0018.0017: probe with driver viewsonic failed with error -22
[  569.809796][T12172] usb 7-1: USB disconnect, device number 61
[  569.951983][T12916] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  569.958291][ T5931] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  569.959504][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  569.994346][ T5931] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  570.387905][T12928] netlink: 'syz.6.1792': attribute type 3 has an invalid length.
[  570.398731][T12930] netlink: 'syz.0.1793': attribute type 6 has an invalid length.
[  570.604470][T12916] wg1 speed is unknown, defaulting to 1000
[  570.664216][T12916] wg1 speed is unknown, defaulting to 1000
[  570.731983][T12916] wg1 speed is unknown, defaulting to 1000
[  570.765937][T12916] wg1 speed is unknown, defaulting to 1000
[  570.773036][T12916] wg1 speed is unknown, defaulting to 1000
[  570.794537][T12916] wg1 speed is unknown, defaulting to 1000
[  571.925109][T12164] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  571.932913][T12172] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  572.134847][T12164] usb 7-1: Using ep0 maxpacket: 8
[  572.140908][T12172] usb 6-1: Using ep0 maxpacket: 32
[  572.154215][T12164] usb 7-1: unable to get BOS descriptor or descriptor too short
[  572.172309][T12172] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  572.194443][T12164] usb 7-1: config 4 has an invalid interface number: 147 but max is 0
[  572.214971][T12172] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  572.234955][T12164] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  572.245066][T12172] usb 6-1: config 0 has no interface number 0
[  572.251203][T12172] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  572.261820][T12164] usb 7-1: config 4 has no interface number 0
[  572.301452][T12164] usb 7-1: string descriptor 0 read error: -22
[  572.325043][T12164] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  572.334297][T12172] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 528
[  572.380433][T12164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.388895][T12172] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  572.433173][T12164] usb 7-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  572.460346][T12172] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  572.485696][T12164] usb 7-1: No valid video chain found.
[  572.499566][T12172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.530303][T12172] usb 6-1: Product: syz
[  572.545245][T12172] usb 6-1: Manufacturer: syz
[  572.550343][T12172] usb 6-1: SerialNumber: syz
[  572.570138][T12172] usb 6-1: config 0 descriptor??
[  572.590807][T12956] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  572.598290][T12956] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  572.630314][T12164] usb 7-1: USB disconnect, device number 62
[  572.757420][ T5931] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  572.764847][ T5856] Bluetooth: hci4: command 0x0405 tx timeout
[  572.773870][ T5931] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  572.795141][ T5840] usb 8-1: new high-speed USB device number 66 using dummy_hcd
[  573.014791][ T5840] usb 8-1: Using ep0 maxpacket: 32
[  573.056392][ T5840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.103817][ T5840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  573.158964][T12971] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1807'.
[  573.206852][ T5840] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  573.271531][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.372646][   T30] audit: type=1326 audit(1755961490.772:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  573.395768][ T5840] usb 8-1: config 0 descriptor??
[  573.486009][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'.
[  573.592072][   T30] audit: type=1326 audit(1755961490.772:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  573.952249][   T30] audit: type=1326 audit(1755961490.772:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  574.079101][   T30] audit: type=1326 audit(1755961490.772:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  574.166017][T12990] netlink: 'syz.6.1810': attribute type 1 has an invalid length.
[  575.016317][   T30] audit: type=1326 audit(1755961490.772:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  575.087836][   T30] audit: type=1326 audit(1755961490.772:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  575.310266][   T30] audit: type=1326 audit(1755961490.772:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  575.418759][T12172] usb 6-1: probing VID:PID(0424:012C)   
[  575.494834][   T30] audit: type=1326 audit(1755961490.772:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  575.496868][T12172] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B
[  575.523154][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout
[  575.550706][ T5931] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  575.601065][ T5931] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  575.987424][   T30] audit: type=1326 audit(1755961490.772:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  576.064826][T12172] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0F
[  576.071327][T12172] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[  576.105067][   T30] audit: type=1326 audit(1755961490.772:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d6d18ebe9 code=0x7ffc0000
[  576.220237][T12172] vub300 6-1:0.133: probe with driver vub300 failed with error -22
[  576.285623][T12172] usb 6-1: USB disconnect, device number 78
[  576.296117][T13008] 9pnet_fd: Insufficient options for proto=fd
[  576.550687][T13012] zonefs (nullb0) ERROR: Not a zoned block device
[  576.720547][T13020] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.1819'.
[  576.752236][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1819'.
[  576.839296][T13017] binder_alloc: binder_alloc_mmap_handler: 13015 200000ffd000-200001000000 already mapped failed -16
[  576.852701][T13019] binder: BINDER_SET_CONTEXT_MGR already set
[  576.864462][T13019] binder: 13015:13019 ioctl 4018620d 200000000040 returned -16
[  576.930724][T13017] binder_alloc: binder_alloc_mmap_handler: 13015 200000ffd000-200001000000 already mapped failed -16
[  576.962833][T13019] binder: BINDER_SET_CONTEXT_MGR already set
[  577.004380][T13019] binder: 13015:13019 ioctl 4018620d 200000000040 returned -16
[  577.006326][T13017] binder_alloc: binder_alloc_mmap_handler: 13015 200000ffd000-200001000000 already mapped failed -16
[  577.292536][ T5840] usb 8-1: string descriptor 0 read error: -71
[  577.313139][ T5840] usbhid 8-1:0.0: can't add hid device: -71
[  577.321959][ T5840] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  577.374337][ T5840] usb 8-1: USB disconnect, device number 66
[  578.150959][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.206010][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.394962][T12173] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[  578.563477][T13060] 8021q: VLANs not supported on sit0
[  578.594032][T12173] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  578.634878][T12173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.660114][T12173] usb 8-1: Product: syz
[  578.668944][T12173] usb 8-1: Manufacturer: syz
[  578.678609][T12173] usb 8-1: SerialNumber: syz
[  578.716322][T12173] usb 8-1: config 0 descriptor??
[  578.946290][T12173] usb 8-1: USB disconnect, device number 67
[  580.374116][T13078] wg1 speed is unknown, defaulting to 1000
[  580.900589][T13081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  581.048661][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1839'.
[  581.535553][ T5958] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  581.762170][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.778028][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.789322][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  581.807383][ T5958] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  581.830576][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.853108][ T5958] usb 6-1: config 0 descriptor??
[  582.349084][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  582.349102][   T30] audit: type=1800 audit(1755961499.752:718): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1838" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  582.427245][ T5958] plantronics 0003:047F:FFFF.0018: unknown global tag 0xd
[  582.504012][ T5958] plantronics 0003:047F:FFFF.0018: item 0 2 1 13 parsing failed
[  582.560366][ T5958] plantronics 0003:047F:FFFF.0018: parse failed
[  582.607214][ T5958] plantronics 0003:047F:FFFF.0018: probe with driver plantronics failed with error -22
[  582.624560][T13085] input: syz0 as /devices/virtual/input/input51
[  583.164368][T13138] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1850'.
[  583.173900][T13138] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1850'.
[  583.184077][T13138] netlink: 'syz.7.1850': attribute type 5 has an invalid length.
[  583.193678][T13138] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1850'.
[  583.613452][T13141] fuse: Bad value for 'group_id'
[  583.643210][T13141] fuse: Bad value for 'group_id'
[  584.232792][ T5840] usb 6-1: USB disconnect, device number 79
[  584.248128][ T5958] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  584.441368][ T5958] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  584.508526][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  585.053935][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  585.065159][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  585.139790][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  585.219947][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  585.280525][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.320892][ T5958] usb 7-1: config 0 descriptor??
[  585.353431][T13153] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  585.667986][T13189] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  585.833763][T13190] loop2: detected capacity change from 0 to 7
[  585.867822][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  585.920039][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  585.939369][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  585.957115][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  586.018413][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  586.055017][T13190] Dev loop2: unable to read RDB block 7
[  586.057886][ T5958] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  586.066900][T13190]  loop2: AHDI p2 p3
[  586.072516][T13190] loop2: partition table partially beyond EOD, truncated
[  586.091008][T13190] loop2: p2 size 150995456 extends beyond EOD, truncated
[  586.160603][ T5958] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  586.625050][T12172] usb 7-1: USB disconnect, device number 63
[  586.860397][T13207] wg1 speed is unknown, defaulting to 1000
[  587.194984][ T5958] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  587.421906][ T5958] usb 6-1: Using ep0 maxpacket: 32
[  587.436078][ T7468] udevd[7468]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  587.462537][T13204] fido_id[13204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  587.497047][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.515342][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  587.528615][ T5958] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  587.538003][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.588346][ T5958] usb 6-1: config 0 descriptor??
[  588.195700][T13228] snd_dummy snd_dummy.0: control 0:9:0:syz1:524289 is already present
[  588.839202][T13227] FAULT_INJECTION: forcing a failure.
[  588.839202][T13227] name failslab, interval 1, probability 0, space 0, times 1
[  588.871181][T13227] CPU: 0 UID: 0 PID: 13227 Comm: syz.7.1876 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  588.871302][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  588.871315][T13227] Call Trace:
[  588.871324][T13227]  <TASK>
[  588.871333][T13227]  dump_stack_lvl+0x189/0x250
[  588.871360][T13227]  ? __pfx____ratelimit+0x10/0x10
[  588.871381][T13227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  588.871401][T13227]  ? __pfx__printk+0x10/0x10
[  588.871430][T13227]  ? __pfx___might_resched+0x10/0x10
[  588.871455][T13227]  should_fail_ex+0x414/0x560
[  588.871479][T13227]  should_failslab+0xa8/0x100
[  588.871501][T13227]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  588.871522][T13227]  ? __alloc_skb+0x112/0x2d0
[  588.871554][T13227]  __alloc_skb+0x112/0x2d0
[  588.871583][T13227]  netlink_sendmsg+0x5c6/0xb30
[  588.871622][T13227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.871658][T13227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  588.871676][T13227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.871705][T13227]  __sock_sendmsg+0x21c/0x270
[  588.871731][T13227]  ____sys_sendmsg+0x505/0x830
[  588.871767][T13227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  588.871806][T13227]  ? import_iovec+0x74/0xa0
[  588.871837][T13227]  ___sys_sendmsg+0x21f/0x2a0
[  588.871868][T13227]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.871940][T13227]  ? __fget_files+0x2a/0x420
[  588.871958][T13227]  ? __fget_files+0x3a0/0x420
[  588.871991][T13227]  __x64_sys_sendmsg+0x19b/0x260
[  588.872024][T13227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.872059][T13227]  ? __pfx_ksys_write+0x10/0x10
[  588.872075][T13227]  ? rcu_is_watching+0x15/0xb0
[  588.872100][T13227]  ? do_syscall_64+0xbe/0x3b0
[  588.872124][T13227]  do_syscall_64+0xfa/0x3b0
[  588.872144][T13227]  ? lockdep_hardirqs_on+0x9c/0x150
[  588.872163][T13227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.872182][T13227]  ? clear_bhb_loop+0x60/0xb0
[  588.872215][T13227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.872233][T13227] RIP: 0033:0x7f18e2f8ebe9
[  588.872250][T13227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.872267][T13227] RSP: 002b:00007f18e3eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.872287][T13227] RAX: ffffffffffffffda RBX: 00007f18e31b5fa0 RCX: 00007f18e2f8ebe9
[  588.872302][T13227] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  588.872314][T13227] RBP: 00007f18e3eaf090 R08: 0000000000000000 R09: 0000000000000000
[  588.872326][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.872337][T13227] R13: 00007f18e31b6038 R14: 00007f18e31b5fa0 R15: 00007ffcd257edd8
[  588.872367][T13227]  </TASK>
[  589.670254][T13238] netlink: 'syz.8.1881': attribute type 10 has an invalid length.
[  589.678861][T13238] team0: Device dummy0 is up. Set it down before adding it as a team port
[  589.705134][T12172] usb 7-1: new full-speed USB device number 64 using dummy_hcd
[  589.852603][T12172] usb 7-1: device descriptor read/64, error -71
[  589.852847][ T5958] usb 6-1: string descriptor 0 read error: -71
[  589.901695][ T5958] usbhid 6-1:0.0: can't add hid device: -71
[  589.912895][ T5958] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  589.938271][ T5958] usb 6-1: USB disconnect, device number 80
[  589.979387][T13242] ubi: mtd0 is already attached to ubi31
[  590.124909][T12172] usb 7-1: new full-speed USB device number 65 using dummy_hcd
[  590.557619][T12172] usb 7-1: device descriptor read/64, error -71
[  590.665377][T12172] usb usb7-port1: attempt power cycle
[  590.821113][   T30] audit: type=1326 audit(1755961508.222:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  590.850889][   T30] audit: type=1326 audit(1755961508.222:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  590.884446][   T30] audit: type=1326 audit(1755961508.222:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  590.950799][   T30] audit: type=1326 audit(1755961508.222:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.004936][T12172] usb 7-1: new full-speed USB device number 66 using dummy_hcd
[  591.012797][   T30] audit: type=1326 audit(1755961508.222:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.074461][T12172] usb 7-1: device descriptor read/8, error -71
[  591.133273][   T30] audit: type=1326 audit(1755961508.222:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.218077][   T30] audit: type=1326 audit(1755961508.222:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.240076][   T30] audit: type=1326 audit(1755961508.222:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.306165][   T30] audit: type=1326 audit(1755961508.222:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.365553][T12172] usb 7-1: new full-speed USB device number 67 using dummy_hcd
[  591.433788][   T30] audit: type=1326 audit(1755961508.392:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13254 comm="syz.7.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2f8ebe9 code=0x7ffc0000
[  591.434387][T12172] usb 7-1: device descriptor read/8, error -71
[  591.485323][T12173] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[  591.675088][T12172] usb usb7-port1: unable to enumerate USB device
[  591.708300][T12173] usb 6-1: config 0 has an invalid interface number: 213 but max is 0
[  591.724745][T12173] usb 6-1: config 0 has no interface number 0
[  591.773022][T12173] usb 6-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7
[  591.857581][T12173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.885538][T12173] usb 6-1: Product: syz
[  591.912042][T12173] usb 6-1: Manufacturer: syz
[  591.940258][T13284] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  591.960953][T12173] usb 6-1: SerialNumber: syz
[  591.993585][T12173] usb 6-1: config 0 descriptor??
[  593.193809][T13297] FAULT_INJECTION: forcing a failure.
[  593.193809][T13297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.220793][T13297] CPU: 0 UID: 0 PID: 13297 Comm: syz.6.1901 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  593.220819][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  593.220842][T13297] Call Trace:
[  593.220850][T13297]  <TASK>
[  593.220858][T13297]  dump_stack_lvl+0x189/0x250
[  593.220884][T13297]  ? __pfx____ratelimit+0x10/0x10
[  593.220902][T13297]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.220922][T13297]  ? __pfx__printk+0x10/0x10
[  593.220944][T13297]  ? __might_fault+0xb0/0x130
[  593.220973][T13297]  should_fail_ex+0x414/0x560
[  593.220999][T13297]  _copy_from_iter+0x1db/0x16f0
[  593.221027][T13297]  ? rcu_is_watching+0x15/0xb0
[  593.221049][T13297]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  593.221070][T13297]  ? __pfx__copy_from_iter+0x10/0x10
[  593.221094][T13297]  ? __build_skb_around+0x257/0x3e0
[  593.221125][T13297]  ? netlink_sendmsg+0x642/0xb30
[  593.221150][T13297]  ? skb_put+0x11b/0x210
[  593.221181][T13297]  netlink_sendmsg+0x6b2/0xb30
[  593.221216][T13297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.221249][T13297]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  593.221266][T13297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.221292][T13297]  __sock_sendmsg+0x21c/0x270
[  593.221317][T13297]  ____sys_sendmsg+0x505/0x830
[  593.221351][T13297]  ? __pfx_____sys_sendmsg+0x10/0x10
[  593.221389][T13297]  ? import_iovec+0x74/0xa0
[  593.221416][T13297]  ___sys_sendmsg+0x21f/0x2a0
[  593.221444][T13297]  ? __pfx____sys_sendmsg+0x10/0x10
[  593.221504][T13297]  ? __fget_files+0x2a/0x420
[  593.221525][T13297]  ? __fget_files+0x3a0/0x420
[  593.221554][T13297]  __x64_sys_sendmsg+0x19b/0x260
[  593.221583][T13297]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  593.221619][T13297]  ? __pfx_ksys_write+0x10/0x10
[  593.221640][T13297]  ? do_syscall_64+0xbe/0x3b0
[  593.221662][T13297]  do_syscall_64+0xfa/0x3b0
[  593.221680][T13297]  ? lockdep_hardirqs_on+0x9c/0x150
[  593.221697][T13297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.221714][T13297]  ? clear_bhb_loop+0x60/0xb0
[  593.221740][T13297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.221756][T13297] RIP: 0033:0x7fce7f58ebe9
[  593.221773][T13297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.221790][T13297] RSP: 002b:00007fce8041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.221810][T13297] RAX: ffffffffffffffda RBX: 00007fce7f7b5fa0 RCX: 00007fce7f58ebe9
[  593.221844][T13297] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  593.221856][T13297] RBP: 00007fce8041f090 R08: 0000000000000000 R09: 0000000000000000
[  593.221868][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  593.221879][T13297] R13: 00007fce7f7b6038 R14: 00007fce7f7b5fa0 R15: 00007fff071ec878
[  593.221912][T13297]  </TASK>
[  593.973896][T13315] xt_hashlimit: max too large, truncated to 1048576
[  593.981187][T13315] xt_hashlimit: overflow, try lower: 3/0
[  594.020113][T13314] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1906'.
[  594.131096][T13321] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1909'.
[  594.143110][ T5958] usb 6-1: USB disconnect, device number 81
[  594.282344][T13324] netlink: 'syz.6.1911': attribute type 83 has an invalid length.
[  595.041833][T13341] netlink: 'syz.5.1915': attribute type 1 has an invalid length.
[  595.091845][T13341] netlink: 'syz.5.1915': attribute type 1 has an invalid length.
[  595.107233][T13341] netlink: 'syz.5.1915': attribute type 2 has an invalid length.
[  595.146160][T13341] bridge0: entered promiscuous mode
[  595.152450][T13341] vlan2: entered promiscuous mode
[  596.473427][T13371] overlay: Unknown parameter '/'
[  597.117829][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1926'.
[  597.253001][T13376] program syz.6.1926 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.535475][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'.
[  597.715415][T12172] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  597.884792][T12172] usb 6-1: Using ep0 maxpacket: 32
[  597.898811][T12172] usb 6-1: too many configurations: 16, using maximum allowed: 8
[  597.919671][T12172] usb 6-1: unable to read config index 0 descriptor/start: -61
[  597.940309][T12172] usb 6-1: can't read configurations, error -61
[  597.951813][T13406] netlink: 'syz.6.1938': attribute type 10 has an invalid length.
[  598.013375][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1940'.
[  598.016100][T13406] netlink: 'syz.6.1938': attribute type 4 has an invalid length.
[  598.023763][T13410] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  598.038943][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.040781][T13406] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1938'.
[  598.069489][T13406] : renamed from bond0 (while UP)
[  598.094976][T12172] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  598.255251][T12172] usb 6-1: Using ep0 maxpacket: 32
[  598.281471][T12172] usb 6-1: too many configurations: 16, using maximum allowed: 8
[  598.303443][T12172] usb 6-1: unable to read config index 0 descriptor/start: -61
[  598.312535][T12172] usb 6-1: can't read configurations, error -61
[  598.331651][T12172] usb usb6-port1: attempt power cycle
[  598.705018][ T5958] usb 7-1: new full-speed USB device number 68 using dummy_hcd
[  599.204244][T12171] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  599.229930][T12171] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  599.275889][T12172] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  599.395453][T12172] usb 6-1: Using ep0 maxpacket: 32
[  599.405305][T12171] usb 9-1: USB disconnect, device number 25
[  599.424775][T12172] usb 6-1: too many configurations: 16, using maximum allowed: 8
[  599.449332][T12172] usb 6-1: unable to read config index 0 descriptor/start: -61
[  599.454848][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.457752][T12172] usb 6-1: can't read configurations, error -61
[  599.511086][ T5958] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  599.558512][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.590501][ T5958] usb 7-1: config 0 descriptor??
[  599.843782][T12172] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  599.865487][T12172] usb 6-1: Using ep0 maxpacket: 32
[  599.871615][T12172] usb 6-1: too many configurations: 16, using maximum allowed: 8
[  599.881856][T12172] usb 6-1: unable to read config index 0 descriptor/start: -61
[  599.890052][T12172] usb 6-1: can't read configurations, error -61
[  599.897226][T12172] usb usb6-port1: unable to enumerate USB device
[  600.351186][ T5958] petalynx 0003:18B1:0037.001A: item fetching failed at offset 0/2
[  600.360021][ T5958] petalynx 0003:18B1:0037.001A: parse failed
[  600.378419][ T5958] petalynx 0003:18B1:0037.001A: probe with driver petalynx failed with error -22
[  600.802915][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.862592][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.156851][ T5958] usb 7-1: USB disconnect, device number 68
[  602.699178][T13506] wg1 speed is unknown, defaulting to 1000
[  602.778670][T12172] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  602.979604][T12172] usb 6-1: Using ep0 maxpacket: 8
[  603.014814][T12172] usb 6-1: config 0 has no interfaces?
[  603.023593][T12172] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  603.043861][T12172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.053420][T12172] usb 6-1: Product: syz
[  603.068636][T12172] usb 6-1: Manufacturer: syz
[  603.074551][T12172] usb 6-1: SerialNumber: syz
[  603.303852][T12172] usb 6-1: config 0 descriptor??
[  604.087369][T12172] usb 6-1: USB disconnect, device number 86
[  604.704710][ T5958] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[  604.876427][ T5958] usb 8-1: config 0 has an invalid interface number: 219 but max is 0
[  604.884768][ T5958] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  604.914699][ T5958] usb 8-1: config 0 has no interface number 0
[  604.920882][ T5958] usb 8-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  604.976364][ T5958] usb 8-1: config 0 has an invalid interface number: 219 but max is 0
[  604.984610][ T5958] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.011948][ T5958] usb 8-1: config 0 has no interface number 0
[  605.020216][ T5958] usb 8-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  605.068452][ T5958] usb 8-1: config 0 has an invalid interface number: 219 but max is 0
[  605.087669][ T5958] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.109827][ T5958] usb 8-1: config 0 has no interface number 0
[  605.136602][ T5958] usb 8-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  605.174748][ T5958] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf
[  605.208855][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.246462][T13551] loop2: detected capacity change from 0 to 7
[  605.394660][T13551] Dev loop2: unable to read RDB block 7
[  605.401723][T13551]  loop2: AHDI p2 p3
[  605.406364][T13551] loop2: partition table partially beyond EOD, truncated
[  605.528528][ T5958] usb 8-1: config 0 descriptor??
[  605.574793][T13551] loop2: p2 size 150995456 extends beyond EOD, truncated
[  605.691057][ T5958] usb 8-1: bad CDC descriptors
[  605.714005][ T5958] cdc_acm 8-1:0.219: Zero length descriptor references
[  605.728757][ T5958] cdc_acm 8-1:0.219: probe with driver cdc_acm failed with error -22
[  605.789562][ T5958] usb 8-1: USB disconnect, device number 68
[  606.519954][ T7468] udevd[7468]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  607.195092][T12171] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  607.381229][T12171] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.424663][T12171] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.434458][T12171] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  607.471671][T12171] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.510097][T12171] usb 9-1: config 0 descriptor??
[  607.965394][T13587] loop2: detected capacity change from 0 to 7
[  608.038554][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.050229][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.075465][T13587] Dev loop2: unable to read RDB block 7
[  608.113353][T13587]  loop2: AHDI p2 p3
[  608.119320][T13587] loop2: partition table partially beyond EOD, truncated
[  608.140261][T13587] loop2: p2 size 150995456 extends beyond EOD, truncated
[  608.161035][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.386733][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.425130][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.432141][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.462032][ T7468] udevd[7468]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  608.494110][T12171] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  608.522793][T12171] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0
[  608.656298][T12171] cp2112 0003:10C4:EA90.001B: error requesting version
[  608.697544][T12171] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71
[  608.756363][T12171] usb 9-1: USB disconnect, device number 26
[  608.822083][T13595] fido_id[13595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  609.594116][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2000'.
[  609.785255][ T5958] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[  609.883070][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'.
[  609.955073][ T5958] usb 9-1: device descriptor read/64, error -71
[  610.139187][T13636] bond0: entered promiscuous mode
[  610.168545][T13636] bond0: entered allmulticast mode
[  610.205511][ T5958] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[  610.379794][ T5958] usb 9-1: device descriptor read/64, error -71
[  610.505254][ T5958] usb usb9-port1: attempt power cycle
[  610.564740][ T5840] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  610.720351][ T5840] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  610.960747][ T5840] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 3
[  610.973918][ T5840] usb 6-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=84.b2
[  610.983914][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.004794][ T5840] usb 6-1: Product: syz
[  611.009017][ T5840] usb 6-1: Manufacturer: syz
[  611.013618][ T5840] usb 6-1: SerialNumber: syz
[  611.019082][ T5958] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[  611.046069][ T5958] usb 9-1: device descriptor read/8, error -71
[  611.395267][ T5958] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[  611.446841][ T5958] usb 9-1: device descriptor read/8, error -71
[  611.589056][ T5958] usb usb9-port1: unable to enumerate USB device
[  613.304405][T13679] vxcan0: tx address claim with dlc 0
[  613.369680][T13681] macsec0: entered promiscuous mode
[  613.375039][T13681] macsec0: entered allmulticast mode
[  613.794418][ T5840] usb 6-1: selecting invalid altsetting 1
[  613.810661][ T5840] snd-usb-caiaq 6-1:4.0: can't set alt interface.
[  613.843006][ T5840] usb 6-1: unable to init card! (ret=-5)
[  613.887741][ T5840] snd-usb-caiaq 6-1:4.0: probe with driver snd-usb-caiaq failed with error -5
[  613.923201][ T5840] usb 6-1: USB disconnect, device number 87
[  615.467732][T13703] netlink: 'syz.7.2025': attribute type 3 has an invalid length.
[  615.476715][T13703] netlink: 'syz.7.2025': attribute type 3 has an invalid length.
[  615.505778][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2025'.
[  615.759131][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'.
[  616.575685][T12172] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  616.775397][T12172] usb 9-1: Using ep0 maxpacket: 16
[  616.825680][T12172] usb 9-1: config 0 has an invalid interface number: 105 but max is 0
[  616.834341][T12172] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.909055][T12172] usb 9-1: config 0 has no interface number 0
[  616.956621][T12172] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  617.152933][T12172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.168752][T12172] usb 9-1: Product: syz
[  617.180437][T12172] usb 9-1: Manufacturer: syz
[  617.195011][T12172] usb 9-1: SerialNumber: syz
[  617.213286][T12172] usb 9-1: config 0 descriptor??
[  617.226687][T12172] usb 9-1: Found UVC 0.00 device syz (046d:08f3)
[  617.233080][T12172] usb 9-1: No valid video chain found.
[  617.430347][T12172] usb 9-1: USB disconnect, device number 31
[  617.698205][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  617.698220][   T30] audit: type=1326 audit(1755961535.102:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13709 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  617.854579][   T30] audit: type=1326 audit(1755961535.102:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13709 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  617.966508][T13740] FAULT_INJECTION: forcing a failure.
[  617.966508][T13740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  617.980880][T13739] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  618.030922][T13740] CPU: 0 UID: 0 PID: 13740 Comm: syz.7.2036 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  618.030947][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  618.030958][T13740] Call Trace:
[  618.030966][T13740]  <TASK>
[  618.030974][T13740]  dump_stack_lvl+0x189/0x250
[  618.031001][T13740]  ? __pfx____ratelimit+0x10/0x10
[  618.031022][T13740]  ? __pfx_dump_stack_lvl+0x10/0x10
[  618.031045][T13740]  ? __pfx__printk+0x10/0x10
[  618.031083][T13740]  should_fail_ex+0x414/0x560
[  618.031109][T13740]  _copy_to_user+0x31/0xb0
[  618.031139][T13740]  simple_read_from_buffer+0xe1/0x170
[  618.031165][T13740]  proc_fail_nth_read+0x1df/0x250
[  618.031193][T13740]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  618.031220][T13740]  ? rw_verify_area+0x258/0x650
[  618.031248][T13740]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  618.031273][T13740]  vfs_read+0x200/0x980
[  618.031308][T13740]  ? __pfx___mutex_lock+0x10/0x10
[  618.031330][T13740]  ? __pfx_vfs_read+0x10/0x10
[  618.031360][T13740]  ? __fget_files+0x2a/0x420
[  618.031387][T13740]  ? __fget_files+0x3a0/0x420
[  618.031406][T13740]  ? __fget_files+0x2a/0x420
[  618.031438][T13740]  ksys_read+0x145/0x250
[  618.031458][T13740]  ? __pfx_ksys_read+0x10/0x10
[  618.031473][T13740]  ? rcu_is_watching+0x15/0xb0
[  618.031500][T13740]  ? do_syscall_64+0xbe/0x3b0
[  618.031526][T13740]  do_syscall_64+0xfa/0x3b0
[  618.031546][T13740]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.031566][T13740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.031593][T13740]  ? clear_bhb_loop+0x60/0xb0
[  618.031617][T13740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.031635][T13740] RIP: 0033:0x7f18e2f8d5fc
[  618.031652][T13740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  618.031669][T13740] RSP: 002b:00007f18e3eaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  618.031689][T13740] RAX: ffffffffffffffda RBX: 00007f18e31b5fa0 RCX: 00007f18e2f8d5fc
[  618.031704][T13740] RDX: 000000000000000f RSI: 00007f18e3eaf0a0 RDI: 0000000000000004
[  618.031717][T13740] RBP: 00007f18e3eaf090 R08: 0000000000000000 R09: 0000000000000000
[  618.031730][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  618.031742][T13740] R13: 00007f18e31b6038 R14: 00007f18e31b5fa0 R15: 00007ffcd257edd8
[  618.031775][T13740]  </TASK>
[  618.428609][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2038'.
[  618.438810][ T5840] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  618.634801][ T5840] usb 7-1: Using ep0 maxpacket: 8
[  618.691084][ T5840] usb 7-1: unable to get BOS descriptor or descriptor too short
[  618.727500][ T5840] usb 7-1: config 8 has an invalid descriptor of length 84, skipping remainder of the config
[  618.803998][ T5840] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[  618.821806][ T5840] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  618.831052][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.844674][ T5840] usb 7-1: Product: ь
[  618.848863][ T5840] usb 7-1: Manufacturer: Ъ
[  618.853442][ T5840] usb 7-1: SerialNumber: syz
[  619.959708][T13770] tmpfs: Bad value for 'mpol'
[  620.059524][T13771] xt_connbytes: Forcing CT accounting to be enabled
[  620.943396][T13776] overlayfs: failed to clone upperpath
[  620.995107][ T5840] usb 7-1: USB disconnect, device number 69
[  621.340439][T13786] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  621.815809][T13782] pim6reg: entered allmulticast mode
[  621.896235][T13783] pim6reg: left allmulticast mode
[  622.872687][T13812] 9pnet_fd: Insufficient options for proto=fd
[  624.282811][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  624.289984][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  625.297372][T13848] tun0: tun_chr_ioctl cmd 1074025675
[  625.304329][T13848] tun0: persist enabled
[  625.309877][T13848] tun0: tun_chr_ioctl cmd 1074025675
[  625.320347][T13848] tun0: persist disabled
[  625.365989][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'.
[  625.384066][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'.
[  625.396264][T13853] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  625.504771][ T5840] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  625.552295][T13853] cramfs: wrong magic
[  625.779764][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  625.805695][ T5840] usb 6-1: too many configurations: 250, using maximum allowed: 8
[  625.817331][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.826329][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.835329][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.838695][ T5840] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  625.844177][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.856229][ T5840] usb 6-1: can't read configurations, error -22
[  625.861668][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.876462][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.885401][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  625.894250][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  626.365013][ T5840] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  626.889953][T12171] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[  627.155207][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  627.161160][ T5840] usb 6-1: too many configurations: 250, using maximum allowed: 8
[  627.186671][ T5840] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  627.204711][ T5840] usb 6-1: can't read configurations, error -22
[  627.221498][ T5840] usb usb6-port1: attempt power cycle
[  627.256427][T12171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.292056][T12171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.309619][T12171] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  627.324202][T12171] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.338918][T12171] usb 8-1: config 0 descriptor??
[  627.674748][ T5840] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  627.845650][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  627.851700][ T5840] usb 6-1: too many configurations: 250, using maximum allowed: 8
[  627.863536][ T5840] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  627.877745][ T5840] usb 6-1: can't read configurations, error -22
[  627.894749][T12171] hid_mf 0003:0079:1846.001C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.7-1/input0
[  627.934186][T12171] hid_mf 0003:0079:1846.001C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  627.985085][T13894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  628.032826][T13894] program syz.6.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.042289][ T5840] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  628.112894][T13889] random: crng reseeded on system resumption
[  628.159747][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  628.185788][ T5840] usb 6-1: too many configurations: 250, using maximum allowed: 8
[  628.202429][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.211159][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.333253][ T5840] usb 6-1: unable to read config index 0 descriptor/start: -71
[  628.562543][ T5840] usb 6-1: can't read configurations, error -71
[  628.580409][ T5840] usb usb6-port1: unable to enumerate USB device
[  628.583920][T13902] netlink: 'syz.5.2083': attribute type 29 has an invalid length.
[  628.625207][T13902] netlink: 'syz.5.2083': attribute type 29 has an invalid length.
[  629.361884][T12171] usb 8-1: USB disconnect, device number 69
[  629.538019][T13926] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  629.544586][T13926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  629.554047][T13926] vhci_hcd vhci_hcd.0: Device attached
[  629.865493][T12172] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  629.985258][T13934] netlink: 'syz.7.2089': attribute type 3 has an invalid length.
[  629.993244][T13934] netlink: 'syz.7.2089': attribute type 3 has an invalid length.
[  630.302680][T13927] vhci_hcd: connection reset by peer
[  630.341865][ T6899] vhci_hcd: stop threads
[  630.348399][ T6899] vhci_hcd: release socket
[  630.352995][ T6899] vhci_hcd: disconnect device
[  630.505016][T13940] __nla_validate_parse: 45 callbacks suppressed
[  630.505035][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2092'.
[  631.685850][T13943] block device autoloading is deprecated and will be removed.
[  632.156254][T13959] overlayfs: failed to resolve './file1/file0': -2
[  632.337535][T13969] input: syz1 as /devices/virtual/input/input55
[  632.396109][T13970] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2099'.
[  632.704963][ T5840] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  633.634711][ T5840] usb 7-1: Using ep0 maxpacket: 32
[  633.642221][ T5840] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  633.684949][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.720714][ T5840] usb 7-1: config 0 descriptor??
[  633.952298][T13983] netlink: 'syz.7.2103': attribute type 3 has an invalid length.
[  633.955678][ T5840] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  633.967688][T13983] netlink: 'syz.7.2103': attribute type 3 has an invalid length.
[  634.019211][T13983] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2103'.
[  634.348462][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  634.389459][ T5840] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  634.400896][ T5840] usb 7-1: media controller created
[  634.466507][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.513560][ T5840] az6027: usb out operation failed. (-71)
[  634.580687][ T5840] az6027: usb out operation failed. (-71)
[  634.626700][ T5840] stb0899_attach: Driver disabled by Kconfig
[  634.632739][ T5840] az6027: no front-end attached
[  634.632739][ T5840] 
[  634.704838][ T5840] az6027: usb out operation failed. (-71)
[  634.710786][ T5840] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  634.726987][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input56
[  634.812770][ T5840] dvb-usb: schedule remote query interval to 400 msecs.
[  634.830818][ T5840] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  634.889433][ T5840] usb 7-1: USB disconnect, device number 70
[  634.987834][T12172] vhci_hcd: vhci_device speed not set
[  635.055437][ T5840] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  635.129783][T14002] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2108'.
[  635.237487][T14002] IPVS: Error connecting to the multicast addr
[  635.434776][ T5958] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  635.618761][ T5958] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  635.697958][ T5958] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129
[  635.837847][ T5958] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  635.950394][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.053423][ T5958] usb 9-1: Product: syz
[  636.144720][ T5958] usb 9-1: Manufacturer: syz
[  636.149399][ T5958] usb 9-1: SerialNumber: syz
[  636.177122][ T5958] usb 9-1: config 0 descriptor??
[  636.286267][T12171] usb 6-1: new full-speed USB device number 92 using dummy_hcd
[  636.582193][ T5958] mos7840 9-1:0.0: required endpoints missing
[  636.614993][T12171] usb 6-1: device descriptor read/64, error -71
[  637.275909][ T5958] usb 9-1: USB disconnect, device number 32
[  637.304916][T12171] usb 6-1: new full-speed USB device number 93 using dummy_hcd
[  637.395402][T14034] netlink: 'syz.7.2119': attribute type 3 has an invalid length.
[  637.408702][T14034] netlink: 'syz.7.2119': attribute type 3 has an invalid length.
[  637.425266][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2119'.
[  637.434846][T12171] usb 6-1: device descriptor read/64, error -71
[  637.555261][T12171] usb usb6-port1: attempt power cycle
[  638.059282][T12171] usb 6-1: new full-speed USB device number 94 using dummy_hcd
[  638.077205][ T5958] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[  638.085475][T12171] usb 6-1: device descriptor read/8, error -71
[  638.210732][T14048] syzkaller0: tun_chr_ioctl cmd 1074025672
[  638.219716][T14048] syzkaller0: ignored: set checksum disabled
[  638.248287][ T5958] usb 8-1: unable to get BOS descriptor or descriptor too short
[  638.258468][ T5958] usb 8-1: config 1 interface 0 has no altsetting 0
[  638.268040][ T5958] usb 8-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  638.284787][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.303038][ T5958] usb 8-1: Product: syz
[  638.308175][ T5958] usb 8-1: Manufacturer: syz
[  638.317358][ T5958] usb 8-1: SerialNumber: syz
[  638.324993][T12171] usb 6-1: new full-speed USB device number 95 using dummy_hcd
[  638.375430][T12171] usb 6-1: device descriptor read/8, error -71
[  638.489611][T12171] usb usb6-port1: unable to enumerate USB device
[  639.535939][T12171] kernel write not supported for file /uhid (pid: 12171 comm: kworker/0:63)
[  640.025699][T14076] netlink: 'syz.5.2131': attribute type 3 has an invalid length.
[  640.061440][T14076] netlink: 'syz.5.2131': attribute type 3 has an invalid length.
[  640.122569][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2131'.
[  640.834727][ T5931] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  641.000183][ T5931] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  641.009669][ T5931] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129
[  641.027394][ T5931] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  641.036704][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.044987][ T5931] usb 9-1: Product: syz
[  641.049250][ T5931] usb 9-1: Manufacturer: syz
[  641.053921][ T5931] usb 9-1: SerialNumber: syz
[  641.061479][ T5931] usb 9-1: config 0 descriptor??
[  641.294126][ T5931] mos7840 9-1:0.0: required endpoints missing
[  641.476017][T14086] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  641.500294][ T5931] usb 9-1: USB disconnect, device number 33
[  641.807890][ T5958] usbhid 8-1:1.0: can't add hid device: -71
[  641.813908][ T5958] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  641.845106][ T5958] usb 8-1: USB disconnect, device number 70
[  641.965446][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2136'.
[  641.979689][T14090] macvlan2: entered promiscuous mode
[  641.985351][T14090] macvlan2: entered allmulticast mode
[  641.990730][T14090] syz_tun: entered allmulticast mode
[  642.181301][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2139'.
[  642.441698][T14106] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2142'.
[  642.451979][T12171] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[  642.589924][T14111] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2144'.
[  642.603041][T14111] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2144'.
[  642.614694][T12171] usb 8-1: Using ep0 maxpacket: 32
[  642.623692][T12171] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  642.632080][T12171] usb 8-1: config 0 has no interface number 0
[  642.638901][T12171] usb 8-1: config 0 interface 184 has no altsetting 0
[  642.653775][T12171] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  642.665980][T12171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.674130][T12171] usb 8-1: Product: syz
[  642.681601][T12171] usb 8-1: Manufacturer: syz
[  642.691675][T12171] usb 8-1: SerialNumber: syz
[  642.711145][T12171] usb 8-1: config 0 descriptor??
[  642.725350][T12172] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  642.744216][T12171] smsc75xx v1.0.0
[  643.333513][T12172] usb 6-1: Using ep0 maxpacket: 32
[  643.645926][T12171] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  643.666399][T12172] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  643.679961][T12171] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  643.689958][T12172] usb 6-1: config 0 interface 0 has no altsetting 0
[  643.696865][T12171] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  643.707130][T12172] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  643.716785][T12171] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32
[  643.720886][T14118] netlink: 'syz.0.2146': attribute type 40 has an invalid length.
[  643.725392][T12172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.728160][T12172] usb 6-1: config 0 descriptor??
[  643.784168][T14118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2146'.
[  644.365464][T12172] corsair-psu 0003:1B1C:1C09.001D: unknown main item tag 0x0
[  644.372917][T12172] corsair-psu 0003:1B1C:1C09.001D: unknown main item tag 0x0
[  644.384442][T12172] corsair-psu 0003:1B1C:1C09.001D: item fetching failed at offset 2/5
[  644.398354][T12172] corsair-psu 0003:1B1C:1C09.001D: probe with driver corsair-psu failed with error -22
[  644.439151][ T5958] usb 8-1: USB disconnect, device number 71
[  644.666157][T12172] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  644.668019][ T5931] usb 6-1: USB disconnect, device number 96
[  644.975325][T12172] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  645.000909][T12172] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129
[  645.124872][T12172] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  645.148669][T12172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.157056][T12172] usb 9-1: Product: syz
[  645.163621][T12172] usb 9-1: Manufacturer: syz
[  645.173848][T12172] usb 9-1: SerialNumber: syz
[  645.295803][T12172] usb 9-1: config 0 descriptor??
[  645.874813][T12172] mos7840 9-1:0.0: required endpoints missing
[  645.967663][T12171] usb 9-1: USB disconnect, device number 34
[  646.183365][T14166] team0: entered promiscuous mode
[  646.199787][T14164] team0: left promiscuous mode
[  647.171832][T14190] netlink: 'syz.7.2166': attribute type 4 has an invalid length.
[  647.390520][T14191] netlink: 'syz.7.2166': attribute type 4 has an invalid length.
[  648.184967][T12171] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  648.386241][T12171] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  648.409647][T12171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.441044][T12171] usb 6-1: config 0 descriptor??
[  648.447496][ T5931] usb 8-1: new low-speed USB device number 72 using dummy_hcd
[  648.514288][T14219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2176'.
[  648.557189][T14219] fuse: Unknown parameter 'gr�up_id'
[  648.616694][ T5931] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  648.642574][ T5931] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  648.666491][ T5931] usb 8-1: config 0 interface 0 has no altsetting 0
[  648.673164][ T5931] usb 8-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  648.709973][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.721902][ T5931] usb 8-1: config 0 descriptor??
[  648.724764][T12164] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  648.742191][T14207] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  649.064259][T14228] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  649.637238][T12164] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  649.661746][T12164] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129
[  649.700495][T12164] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  649.705394][ T5931] holtek_mouse 0003:04D9:A067.001E: item fetching failed at offset 7/8
[  649.721762][ T5931] holtek_mouse 0003:04D9:A067.001E: hid parse failed: -22
[  649.729034][ T5931] holtek_mouse 0003:04D9:A067.001E: probe with driver holtek_mouse failed with error -22
[  649.741727][T12171] usb 6-1: Cannot set autoneg
[  649.765793][T12171] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  649.769800][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2181'.
[  649.778402][T12164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.808378][T12164] usb 9-1: Product: syz
[  649.812802][T12164] usb 9-1: Manufacturer: syz
[  649.822278][T12164] usb 9-1: SerialNumber: syz
[  649.829106][T12171] usb 6-1: USB disconnect, device number 97
[  649.853821][T12164] usb 9-1: config 0 descriptor??
[  649.907785][T12172] usb 8-1: USB disconnect, device number 72
[  650.369386][T14243] new mount options do not match the existing superblock, will be ignored
[  651.091798][T12164] mos7840 9-1:0.0: required endpoints missing
[  651.128330][T14245] tc_dump_action: action bad kind
[  651.141707][T14245] netlink: 'syz.6.2185': attribute type 10 has an invalid length.
[  651.150102][T14245] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2185'.
[  651.161315][T14245] dummy0: entered promiscuous mode
[  651.185592][T14245] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  651.494048][T12164] usb 9-1: USB disconnect, device number 35
[  651.971705][T14259] netlink: 'syz.8.2190': attribute type 3 has an invalid length.
[  651.979763][T14259] netlink: 'syz.8.2190': attribute type 3 has an invalid length.
[  652.025913][T14259] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2190'.
[  653.990864][T14278] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2196'.
[  654.000353][T14278] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2196'.
[  654.169691][T14284] syz_tun: entered allmulticast mode
[  654.203185][T14284] syz_tun: left allmulticast mode
[  654.395076][T12172] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  654.622231][T12172] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  654.817205][T12172] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129
[  655.047442][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'.
[  655.063637][T12172] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  655.094807][T12172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.102882][T12172] usb 7-1: Product: syz
[  655.153098][T12172] usb 7-1: Manufacturer: syz
[  655.172296][T12172] usb 7-1: SerialNumber: syz
[  655.187533][T12172] usb 7-1: config 0 descriptor??
[  655.372821][T14319] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2209'.
[  655.402131][T14319] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2209'.
[  655.436984][T12172] mos7840 7-1:0.0: required endpoints missing
[  655.487833][T14325] netlink: 2052 bytes leftover after parsing attributes in process `syz.8.2210'.
[  655.526921][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2210'.
[  655.638038][T12172] usb 7-1: USB disconnect, device number 71
[  655.887115][T14340] netlink: 468 bytes leftover after parsing attributes in process `syz.7.2216'.
[  655.896435][T14340] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2216'.
[  657.194882][ T5931] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[  658.029419][T14341] delete_channel: no stack
[  658.034890][ T5931] usb 8-1: Using ep0 maxpacket: 16
[  658.045882][ T5931] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  658.073496][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.104823][ T5931] usb 8-1: Product: syz
[  658.109025][ T5931] usb 8-1: Manufacturer: syz
[  658.137322][ T5931] usb 8-1: SerialNumber: syz
[  658.160278][ T5931] usb 8-1: config 0 descriptor??
[  658.172195][ T5931] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  658.185128][T12172] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  658.287338][T14371] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2223'.
[  658.373974][T12172] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  658.387291][ T5931] gp8psk: usb in 128 operation failed.
[  658.414791][T12172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.415423][ T5931] gp8psk: usb in 137 operation failed.
[  658.445706][T12172] usb 7-1: config 0 descriptor??
[  658.458718][T12172] cp210x 7-1:0.0: cp210x converter detected
[  658.464856][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  658.472619][ T5931] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  658.501402][ T5931] usb 8-1: media controller created
[  658.615394][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  658.706578][ T5931] gp8psk_fe: Frontend revision 1 attached
[  658.723221][ T5931] usb 8-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)...
[  658.746901][ T5931] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  659.104514][T14390] netlink: 'syz.8.2228': attribute type 3 has an invalid length.
[  659.113350][T14390] netlink: 'syz.8.2228': attribute type 3 has an invalid length.
[  659.135715][T14390] __nla_validate_parse: 2 callbacks suppressed
[  659.144929][T14390] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2228'.
[  659.334740][T12164] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  659.825956][T14400] netlink: 2056 bytes leftover after parsing attributes in process `syz.5.2231'.
[  660.346382][T12172] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71
[  660.353937][T12172] cp210x 7-1:0.0: querying part number failed
[  660.374000][T12172] usb 7-1: cp210x converter now attached to ttyUSB0
[  660.478075][ T5931] gp8psk: usb in 138 operation failed.
[  660.499929][ T5931] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  660.539868][T12172] usb 7-1: USB disconnect, device number 72
[  660.541447][ T5931] gp8psk: found Genpix USB device pID = 201 (hex)
[  660.555501][T12172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  660.600451][ T5931] usb 8-1: USB disconnect, device number 73
[  660.610539][T12172] cp210x 7-1:0.0: device disconnected
[  661.655900][ T5931] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  662.070751][T14433] netlink: 'syz.0.2243': attribute type 3 has an invalid length.
[  662.078672][T14433] netlink: 'syz.0.2243': attribute type 3 has an invalid length.
[  662.091018][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'.
[  662.668318][T14439] netlink: 4696 bytes leftover after parsing attributes in process `syz.8.2244'.
[  662.718493][T14439] netlink: 4696 bytes leftover after parsing attributes in process `syz.8.2244'.
[  662.785335][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2244'.
[  663.325143][ T5931] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  664.884777][ T5931] usb 9-1: device descriptor read/64, error -71
[  667.561887][T14470] netlink: 'syz.0.2254': attribute type 2 has an invalid length.
[  667.580785][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2256'.
[  667.810515][T14488] x_tables: duplicate underflow at hook 2
[  667.823418][T14489] x_tables: duplicate underflow at hook 2
[  667.920688][T14495] 9pnet_fd: Insufficient options for proto=fd
[  667.964153][T14500] input: syz0 as /devices/virtual/input/input58
[  668.057765][ T5931] usb 8-1: new low-speed USB device number 74 using dummy_hcd
[  668.194738][ T5931] usb 8-1: device descriptor read/64, error -71
[  668.209925][T12164] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[  668.368310][T12164] usb 9-1: unable to get BOS descriptor or descriptor too short
[  668.382919][T12164] usb 9-1: not running at top speed; connect to a high speed hub
[  668.393758][T12164] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  668.434354][T12164] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  668.445020][ T5931] usb 8-1: new low-speed USB device number 75 using dummy_hcd
[  668.468990][T12164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.482143][T12164] usb 9-1: Product: syz
[  668.494413][T12164] usb 9-1: Manufacturer: syz
[  668.499297][T12164] usb 9-1: SerialNumber: syz
[  668.727700][ T5931] usb 8-1: device descriptor read/64, error -71
[  668.845329][ T5931] usb usb8-port1: attempt power cycle
[  668.859859][T14499] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  669.098009][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.107270][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.194800][ T5840] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  669.202824][ T5931] usb 8-1: new low-speed USB device number 76 using dummy_hcd
[  669.225327][ T5931] usb 8-1: device descriptor read/8, error -71
[  669.354731][ T5840] usb 6-1: Using ep0 maxpacket: 16
[  669.362067][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  669.372674][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  669.383880][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  669.399972][ T5840] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  669.410094][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.428708][ T5840] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  669.437967][ T5840] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  669.446273][ T5840] usb 6-1: Manufacturer: syz
[  669.453822][ T5840] usb 6-1: config 0 descriptor??
[  669.474704][ T5931] usb 8-1: new low-speed USB device number 77 using dummy_hcd
[  669.495550][ T5931] usb 8-1: device descriptor read/8, error -71
[  669.549353][T12164] cdc_ncm 9-1:1.0: SET_CRC_MODE failed
[  669.576769][T12164] cdc_ncm 9-1:1.0: bind() failure
[  669.591348][T12164] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  669.598336][T12164] cdc_ncm 9-1:1.1: bind() failure
[  669.606763][ T5931] usb usb8-port1: unable to enumerate USB device
[  669.612958][T12164] usb 9-1: USB disconnect, device number 38
[  669.714855][ T5840] rc_core: IR keymap rc-hauppauge not found
[  669.720977][ T5840] Registered IR keymap rc-empty
[  669.726387][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.746456][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.776129][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  669.789872][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59
[  669.804359][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.811604][ T5958] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  669.845025][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.864884][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.895046][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.914795][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.934953][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.955906][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.985344][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  669.996411][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.008189][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.015912][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.027610][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  670.041740][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  670.051937][ T5840] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.060223][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.087858][ T5958] usb 7-1: config 0 descriptor??
[  670.097180][ T5840] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  670.108387][ T5840] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  670.216512][T14528] _�Z`Ԁ@: entered promiscuous mode
[  670.423375][T14537] kvm: user requested TSC rate below hardware speed
[  670.674925][T12164] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  670.835192][T12164] usb 9-1: Using ep0 maxpacket: 16
[  670.867580][T12164] usb 9-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config
[  670.882012][T12164] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  670.902639][T12164] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  670.914570][T12164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.930068][T12164] usb 9-1: Product: syz
[  670.939245][T12164] usb 9-1: Manufacturer: syz
[  670.944360][T12164] usb 9-1: SerialNumber: syz
[  671.171838][T12164] usb 9-1: 0:2 : does not exist
[  671.194041][T12164] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[  671.223021][T12164] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[  671.245168][ T5840] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[  671.262156][T12164] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[  671.292453][T12164] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5)
[  671.348016][T12164] usb 9-1: USB disconnect, device number 39
[  671.411186][ T7468] udevd[7468]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.451325][ T5840] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  671.473218][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.502233][ T5840] usb 8-1: config 0 descriptor??
[  671.520228][ T5840] cp210x 8-1:0.0: cp210x converter detected
[  671.969171][ T5931] usb 6-1: USB disconnect, device number 99
[  672.760543][ T5958] usbhid 7-1:0.0: can't add hid device: -71
[  672.781677][ T5958] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  672.827791][ T5958] usb 7-1: USB disconnect, device number 73
[  673.338339][T14562] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  673.642048][T14562] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  673.667786][T14562] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.685441][T14562] usb 9-1: Product: syz
[  673.689678][T14562] usb 9-1: Manufacturer: syz
[  673.694314][T14562] usb 9-1: SerialNumber: syz
[  673.710120][T14562] usb 9-1: config 0 descriptor??
[  673.722424][T14562] gspca_main: sq905c-2.14.0 probing 2770:9052
[  674.047816][ T5840] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  674.056742][ T5840] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71
[  674.064681][ T5840] cp210x 8-1:0.0: GPIO initialisation failed: -71
[  674.773789][ T5840] usb 8-1: cp210x converter now attached to ttyUSB0
[  674.839516][ T5840] usb 8-1: USB disconnect, device number 78
[  674.898818][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  674.927001][ T5840] cp210x 8-1:0.0: device disconnected
[  674.941254][T14573] openvswitch: netlink: Message has 4 unknown bytes.
[  674.982589][T14562] usb 9-1: USB disconnect, device number 40
[  675.131025][T14575] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  675.630590][T14607] No source specified
[  675.995212][T14562] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[  676.311496][T14621] binder: BINDER_SET_CONTEXT_MGR already set
[  676.351523][T14621] binder: 14619:14621 ioctl 4018620d 2000000000c0 returned -16
[  676.361504][T14621] binder: BINDER_SET_CONTEXT_MGR already set
[  676.368112][T14621] binder: 14619:14621 ioctl 4018620d 2000000002c0 returned -16
[  676.474662][T14562] usb 7-1: Using ep0 maxpacket: 16
[  676.485208][T14562] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.514865][T14562] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.546072][T14562] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  677.614752][T14562] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  677.634062][T14562] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.681646][T14562] usb 7-1: config 0 descriptor??
[  679.020652][T14656] wg1 speed is unknown, defaulting to 1000
[  679.060873][T14562] usbhid 7-1:0.0: can't add hid device: -71
[  679.082010][T14562] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  679.122145][T14562] usb 7-1: USB disconnect, device number 74
[  680.380991][T14670] netlink: 'syz.8.2316': attribute type 3 has an invalid length.
[  680.389323][T14670] netlink: 'syz.8.2316': attribute type 3 has an invalid length.
[  680.414053][T14670] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2316'.
[  682.006820][T14694] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2321'.
[  682.084076][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'.
[  682.174179][T14698] fuse: Unknown parameter 'gq�up_id'
[  682.644752][T14717] netlink: 'syz.5.2328': attribute type 3 has an invalid length.
[  682.652744][T14717] netlink: 'syz.5.2328': attribute type 3 has an invalid length.
[  682.934710][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2328'.
[  683.497506][T14733] bridge0: entered allmulticast mode
[  683.787316][   T30] audit: type=1326 audit(1755961601.192:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  683.824743][   T30] audit: type=1326 audit(1755961601.192:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  683.854942][   T30] audit: type=1326 audit(1755961601.192:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  683.884783][   T30] audit: type=1326 audit(1755961601.192:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  683.910202][   T30] audit: type=1326 audit(1755961601.192:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  683.947436][   T30] audit: type=1326 audit(1755961601.342:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  684.000307][   T30] audit: type=1326 audit(1755961601.402:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a3785ba7 code=0x7ffc0000
[  684.152979][   T30] audit: type=1326 audit(1755961601.402:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9a372ade9 code=0x7ffc0000
[  684.218654][   T30] audit: type=1326 audit(1755961601.432:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff9a378ebe9 code=0x7ffc0000
[  684.241273][   T30] audit: type=1326 audit(1755961601.432:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14745 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a3785ba7 code=0x7ffc0000
[  684.314412][T14754] program syz.8.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  685.701083][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2346'.
[  685.725340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.731832][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  686.641787][T14778] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  686.660285][T14778] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  686.689235][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2349'.
[  686.713803][T14778] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2349'.
[  687.786669][T14798] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  687.891486][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2357'.
[  687.994797][T14562] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  688.155129][T14562] usb 6-1: Using ep0 maxpacket: 16
[  688.167272][T14562] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.318394][T14562] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  688.373835][T14562] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  688.388555][T14562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.425617][T14562] usb 6-1: Product: syz
[  688.440927][T14562] usb 6-1: Manufacturer: syz
[  688.459437][T14562] usb 6-1: SerialNumber: syz
[  689.994103][T14562] usb 6-1: cannot find UAC_HEADER
[  690.013794][T14562] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  690.024654][T14562] usb 6-1: USB disconnect, device number 100
[  747.158100][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  747.164438][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  767.410278][T14835] macsec5: entered allmulticast mode
[  767.488873][T14838] netlink: 'syz.8.2361': attribute type 3 has an invalid length.
[  767.500979][T14838] netlink: 'syz.8.2361': attribute type 3 has an invalid length.
[  767.517478][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2361'.
[  767.567012][T14843] vxcan0: tx drop: invalid da for name 0x00000000000000f5
[  767.960194][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2372'.
[  767.962516][T14849] Invalid ELF header magic: != ELF
[  768.010424][T14849] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  768.143000][T14562] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  768.213892][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2372'.
[  768.254198][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  768.254217][   T30] audit: type=1800 audit(1755961685.632:793): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2372" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0
[  768.402539][T14562] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  768.415418][T14562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.451976][T14562] usb 6-1: Product: syz
[  768.469022][T14562] usb 6-1: Manufacturer: syz
[  768.474523][T14864] netlink: 'syz.7.2374': attribute type 10 has an invalid length.
[  768.490053][T14562] usb 6-1: SerialNumber: syz
[  768.510371][T14864] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2374'.
[  768.520375][T14562] usb 6-1: config 0 descriptor??
[  768.558022][T14866] netlink: 'syz.6.2375': attribute type 10 has an invalid length.
[  768.558446][T14562] gspca_main: touptek-2.14.0 probing 0547:6801
[  768.618524][T14866] : (slave netdevsim0): Enslaving as an active interface with an up link
[  768.783834][T14846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.826607][T14846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.859556][T14562] usb 6-1: USB disconnect, device number 101
[  769.254519][T14877] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  770.325695][T14890] FAULT_INJECTION: forcing a failure.
[  770.325695][T14890] name failslab, interval 1, probability 0, space 0, times 0
[  770.355147][T14890] CPU: 1 UID: 0 PID: 14890 Comm: syz.6.2384 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  770.355173][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  770.355186][T14890] Call Trace:
[  770.355194][T14890]  <TASK>
[  770.355203][T14890]  dump_stack_lvl+0x189/0x250
[  770.355229][T14890]  ? __pfx____ratelimit+0x10/0x10
[  770.355249][T14890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  770.355272][T14890]  ? __pfx__printk+0x10/0x10
[  770.355300][T14890]  ? __pfx___might_resched+0x10/0x10
[  770.355321][T14890]  ? fs_reclaim_acquire+0x7d/0x100
[  770.355350][T14890]  should_fail_ex+0x414/0x560
[  770.355376][T14890]  should_failslab+0xa8/0x100
[  770.355403][T14890]  __kmalloc_noprof+0xcb/0x4f0
[  770.355422][T14890]  ? __d_alloc+0x31/0x6f0
[  770.355444][T14890]  ? __d_alloc+0xb7/0x6f0
[  770.355474][T14890]  __d_alloc+0xb7/0x6f0
[  770.355506][T14890]  d_alloc+0x4b/0x190
[  770.355529][T14890]  ? lookup_one_qstr_excl_raw+0xb4/0x280
[  770.355557][T14890]  lookup_one_qstr_excl_raw+0xc8/0x280
[  770.355587][T14890]  do_renameat2+0x470/0xc50
[  770.355637][T14890]  ? __pfx_do_renameat2+0x10/0x10
[  770.355671][T14890]  ? strncpy_from_user+0x150/0x290
[  770.355706][T14890]  ? getname_flags+0x1e5/0x540
[  770.355732][T14890]  __x64_sys_rename+0x82/0x90
[  770.355754][T14890]  do_syscall_64+0xfa/0x3b0
[  770.355775][T14890]  ? lockdep_hardirqs_on+0x9c/0x150
[  770.355796][T14890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.355815][T14890]  ? clear_bhb_loop+0x60/0xb0
[  770.355841][T14890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.355860][T14890] RIP: 0033:0x7fce7f58ebe9
[  770.355878][T14890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  770.355896][T14890] RSP: 002b:00007fce8041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  770.355916][T14890] RAX: ffffffffffffffda RBX: 00007fce7f7b5fa0 RCX: 00007fce7f58ebe9
[  770.355932][T14890] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000000
[  770.355946][T14890] RBP: 00007fce8041f090 R08: 0000000000000000 R09: 0000000000000000
[  770.355959][T14890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  770.355972][T14890] R13: 00007fce7f7b6038 R14: 00007fce7f7b5fa0 R15: 00007fff071ec878
[  770.356008][T14890]  </TASK>
[  770.973904][T14898] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  771.389894][T14905] input: syz1 as /devices/virtual/input/input60
[  771.650319][T14917] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  771.677280][T14915] Smack: duplicate mount options
[  771.692688][T14917] cramfs: wrong magic
[  771.937665][T14925] syz_tun: entered allmulticast mode
[  771.956201][T14924] syz_tun: left allmulticast mode
[  772.720971][T14945] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  772.729431][T14945] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock
[  772.747454][T14945] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  772.758024][T14945] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock
[  772.814360][T14956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2403'.
[  772.916045][T12164] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  772.968711][T14956] xt_CT: No such helper "snmp"
[  772.998989][T14962] IPVS: Unknown mcast interface: 
[  773.097325][T12164] usb 6-1: Using ep0 maxpacket: 16
[  773.113532][T12164] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  773.119156][T14956] gretap1: entered promiscuous mode
[  773.122151][T12164] usb 6-1: config 1 has no interface number 0
[  773.135623][T12164] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  773.146030][T12164] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  773.156461][T12164] usb 6-1: config 1 interface 105 has no altsetting 0
[  773.166916][T12164] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  773.176305][T12164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.184877][T12164] usb 6-1: Product: syz
[  773.189267][T12164] usb 6-1: Manufacturer: syz
[  773.194058][T12164] usb 6-1: SerialNumber: syz
[  773.204884][T14947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  773.212222][T14947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  773.415660][T14969] netlink: 'syz.6.2405': attribute type 3 has an invalid length.
[  773.423639][T14969] netlink: 'syz.6.2405': attribute type 3 has an invalid length.
[  773.555711][T14969] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2405'.
[  773.900331][T14947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  773.921680][T14947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  773.995356][T14976] can: request_module (can-proto-0) failed.
[  774.471562][T12164] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  774.545659][T12164] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  774.951264][T12164] aqc111 6-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:44:19:ce:81:83
[  775.166214][T12164] usb 6-1: USB disconnect, device number 102
[  775.173346][T12164] aqc111 6-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  775.345297][T15004] libceph: resolve '4.' (ret=-3): failed
[  775.368929][T12164] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  775.385128][T12164] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  775.426539][T12164] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  775.594698][T12172] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  775.757288][T12172] usb 9-1: Using ep0 maxpacket: 16
[  775.775063][T12172] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  775.792019][T12172] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  775.825389][T12172] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  775.848703][T12172] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  775.869018][T12172] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  775.880261][T12172] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  775.890829][T12172] usb 9-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  775.910004][T12172] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  775.919489][T12172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.927767][T12172] usb 9-1: Product: syz
[  775.933742][T12172] usb 9-1: Manufacturer: syz
[  775.938596][T12172] usb 9-1: SerialNumber: syz
[  775.948204][T12172] usb 9-1: config 0 descriptor??
[  775.963173][T15005] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  775.974197][T12172] iuu_phoenix 9-1:0.0: iuu_phoenix converter detected
[  775.986598][T12172] usb 9-1: iuu_phoenix converter now attached to ttyUSB0
[  776.132745][T15024] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.140175][T15024] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.184045][T12164] usb 9-1: USB disconnect, device number 41
[  776.199597][T12164] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  776.233457][T12164] iuu_phoenix 9-1:0.0: device disconnected
[  776.295213][T15024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  776.402847][T15024] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.417542][T15024] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.429160][T15024] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.442508][T15024] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.524876][T15024] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  776.534355][T15024] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  776.544247][T15024] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  776.553199][T15024] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  776.609037][T12173] wg1 speed is unknown, defaulting to 1000
[  776.624396][T12173] syz0: Port: 1 Link DOWN
[  776.869175][T15036] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  777.057629][T15049] ubi: mtd0 is already attached to ubi31
[  777.082427][T15045] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2423'.
[  777.124056][T15036] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  777.137454][T15036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.149715][T15051] netlink: 'syz.0.2425': attribute type 3 has an invalid length.
[  777.157653][T15051] netlink: 'syz.0.2425': attribute type 3 has an invalid length.
[  777.169245][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2425'.
[  777.187632][T15036] usb 6-1: config 0 descriptor??
[  777.240853][T15036] cp210x 6-1:0.0: cp210x converter detected
[  777.419217][T15036] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121
[  777.447584][T15036] cp210x 6-1:0.0: querying part number failed
[  777.468303][T15036] usb 6-1: cp210x converter now attached to ttyUSB0
[  779.285013][T15036] usb 8-1: new full-speed USB device number 79 using dummy_hcd
[  779.525362][T15088] netlink: 'syz.6.2436': attribute type 3 has an invalid length.
[  779.525954][T15036] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  779.543818][T15088] netlink: 'syz.6.2436': attribute type 3 has an invalid length.
[  779.615523][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2436'.
[  779.784935][T15036] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  779.832656][T15036] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  779.863447][T15036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  779.871856][T15036] usb 8-1: SerialNumber: syz
[  779.896032][T15036] usb 8-1: 0:2 : does not exist
[  780.051883][T15036] usb 6-1: USB disconnect, device number 103
[  780.087872][T15036] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  780.106533][T15036] cp210x 6-1:0.0: device disconnected
[  780.208559][T15095] syz.7.2434: attempt to access beyond end of device
[  780.208559][T15095] loop7: rw=6144, sector=128, nr_sectors = 8 limit=0
[  780.222568][T15095] gfs2: error -5 reading superblock
[  780.679145][T12152] usb 8-1: USB disconnect, device number 79
[  781.042178][T15100] futex_wake_op: syz.5.2439 tries to shift op by -1; fix this program
[  781.381052][T15091] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2437'.
[  782.856110][T15124] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  782.886767][T15132] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  782.897432][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2446'.
[  782.897567][T15127] IPVS: stopping backup sync thread 15132 ...
[  784.035983][T15142] xt_TPROXY: Can be used only with -p tcp or -p udp
[  785.609390][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'.
[  785.626410][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'.
[  785.738000][T15174] xt_CT: You must specify a L4 protocol and not use inversions on it
[  785.877824][T15176] bond0: left allmulticast mode
[  786.102772][   T30] audit: type=1800 audit(1755961703.502:794): pid=15180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2463" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  786.122562][    C0] vkms_vblank_simulate: vblank timer overrun
[  786.357795][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'.
[  786.393692][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'.
[  787.024760][T12152] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[  787.197692][T12152] usb 7-1: Using ep0 maxpacket: 16
[  787.208184][T12152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  787.237636][T12152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024
[  787.263554][T12152] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  787.293337][T12152] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  787.312116][T12152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.323057][T15206] netlink: 'syz.5.2471': attribute type 13 has an invalid length.
[  787.344748][T12152] usb 7-1: config 0 descriptor??
[  787.351414][T15206] gretap0: refused to change device tx_queue_len
[  787.369474][T15206] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  787.370958][T15199] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  787.885923][T12152] usbhid 7-1:0.0: can't add hid device: -71
[  787.909221][T12152] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  787.946933][T12152] usb 7-1: USB disconnect, device number 75
[  787.988700][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2475'.
[  788.008085][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2475'.
[  788.318802][T15226] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2474'.
[  788.340289][T15226] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2474'.
[  789.048768][T15241] netlink: 'syz.0.2480': attribute type 3 has an invalid length.
[  789.056585][T15241] netlink: 'syz.0.2480': attribute type 3 has an invalid length.
[  789.068391][T15241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'.
[  790.836617][T15276] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2487'.
[  791.138919][T12157] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  791.325536][T12157] usb 6-1: Using ep0 maxpacket: 16
[  791.339240][T12157] usb 6-1: config 4 has an invalid interface number: 15 but max is 0
[  791.404711][T12157] usb 6-1: config 4 has no interface number 0
[  791.410890][T12157] usb 6-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  791.430694][T15283] netlink: 'syz.7.2493': attribute type 10 has an invalid length.
[  791.474844][T12157] usb 6-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  791.488235][T15283] syz_tun: entered promiscuous mode
[  791.499513][T15283] ptrace attach of "./syz-executor exec"[6983] was attempted by ""[15283]
[  791.509622][T12157] usb 6-1: config 4 interface 15 has no altsetting 0
[  791.527992][T12157] usb 6-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44
[  791.543224][T12157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.569561][T12157] usb 6-1: Product: syz
[  791.573787][T12157] usb 6-1: Manufacturer: syz
[  791.584650][T12157] usb 6-1: SerialNumber: syz
[  791.603557][T15274] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  791.611778][T15274] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  791.729114][T15293] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2495'.
[  791.845805][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.855171][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  791.866149][T12157] ax88179_178a 6-1:4.15: probe with driver ax88179_178a failed with error -71
[  791.895083][T12157] usb 6-1: USB disconnect, device number 104
[  792.607550][T15304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  792.665005][T15304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  792.887729][T12157] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  793.229722][T15319] Bluetooth: MGMT ver 1.23
[  795.441935][T15348] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.2509'.
[  795.747993][T15352] futex_wake_op: syz.7.2511 tries to shift op by 36; fix this program
[  795.959668][T15036] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  796.031001][T15359] netlink: 'syz.6.2515': attribute type 3 has an invalid length.
[  796.039166][T15359] netlink: 'syz.6.2515': attribute type 3 has an invalid length.
[  796.165107][T15036] usb 9-1: Using ep0 maxpacket: 32
[  796.219358][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2515'.
[  796.299273][T15036] usb 9-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  796.481687][T15036] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.537144][T15036] usb 9-1: Product: syz
[  796.541370][T15036] usb 9-1: Manufacturer: syz
[  796.564614][T15036] usb 9-1: SerialNumber: syz
[  796.590649][T15036] usb 9-1: config 0 descriptor??
[  796.608767][T15036] gspca_main: sunplus-2.14.0 probing 046d:0960
[  796.848524][T15367] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001
[  796.893776][T15036] gspca_sunplus: reg_w_riv err -71
[  796.921787][T15036] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  796.945441][T15036] usb 9-1: USB disconnect, device number 42
[  798.984215][T10884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  799.003186][T10884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  799.018768][T10884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  799.243688][T10884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  799.252663][T10884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  799.458201][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  799.486436][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  799.530131][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  799.636506][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  799.676268][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  799.791628][T15403] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.2527'.
[  799.978759][T15386] wg1 speed is unknown, defaulting to 1000
[  800.051966][T15407] netlink: 'syz.5.2528': attribute type 10 has an invalid length.
[  800.091514][T15407] veth0_vlan: left allmulticast mode
[  800.097283][T15407] veth0_vlan: left promiscuous mode
[  800.107110][T15407] veth0_vlan: entered promiscuous mode
[  800.115339][T15407] team0: Device veth0_vlan failed to register rx_handler
[  801.175188][T12152] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  801.354681][T12152] usb 9-1: Using ep0 maxpacket: 16
[  801.362245][T12152] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  801.394774][T12152] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  801.418294][T12152] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  801.427543][T12152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.435886][T12152] usb 9-1: Product: syz
[  801.440134][T12152] usb 9-1: Manufacturer: syz
[  801.450521][T12152] usb 9-1: SerialNumber: syz
[  801.554933][ T5931] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[  801.620109][ T8439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.648369][T15386] chnl_net:caif_netlink_parms(): no params data found
[  801.699322][   T30] audit: type=1326 audit(1755961719.102:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15424 comm="syz.5.2534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9a378ebe9 code=0x0
[  801.715069][ T5931] usb 8-1: Using ep0 maxpacket: 32
[  801.736216][T12152] usb 9-1: 0:2 : does not exist
[  801.782108][ T5931] usb 8-1: unable to get BOS descriptor or descriptor too short
[  801.797336][ T8439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.798855][T12152] usb 9-1: USB disconnect, device number 43
[  801.818810][ T5931] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  801.837369][ T5931] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  801.847292][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.856093][ T5931] usb 8-1: Product: syz
[  801.860374][ T5931] usb 8-1: Manufacturer: syz
[  801.875448][T10884] Bluetooth: hci6: command tx timeout
[  801.883533][ T5931] usb 8-1: SerialNumber: syz
[  801.982091][ T8439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.003798][T15435] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2535'.
[  802.024117][T15435] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  802.040276][T15435] openvswitch: netlink: Message has 1 unknown bytes.
[  802.123940][ T8439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.156193][T15422] wireguard: wg0: Could not create IPv4 socket
[  802.159688][T15431] netlink: 'syz.6.2535': attribute type 10 has an invalid length.
[  802.163597][ T5931] usb 8-1: Limiting number of CPorts to U8_MAX
[  802.182268][ T5931] usb 8-1: Not enough endpoints found in device, aborting!
[  802.211066][T15386] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.218710][T15386] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.226042][T15386] bridge_slave_0: entered allmulticast mode
[  802.238406][T15386] bridge_slave_0: entered promiscuous mode
[  802.250071][T15386] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.270103][T15386] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.277604][T15386] bridge_slave_1: entered allmulticast mode
[  802.302982][T15386] bridge_slave_1: entered promiscuous mode
[  802.307147][T15032] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  802.391236][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.391968][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.423633][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.456910][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.476937][T12157] usb 8-1: USB disconnect, device number 80
[  802.484840][T15032] usb 6-1: Using ep0 maxpacket: 32
[  802.492262][T15032] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  802.517333][T15032] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  802.536274][T15032] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  802.549701][T15032] usb 6-1: Product: syz
[  802.554129][T15032] usb 6-1: Manufacturer: syz
[  802.560591][T15032] usb 6-1: SerialNumber: syz
[  802.668546][T15032] usb 6-1: config 0 descriptor??
[  802.729747][T15449] netlink: 'syz.6.2538': attribute type 3 has an invalid length.
[  802.730785][T15437] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  802.738739][T15449] netlink: 'syz.6.2538': attribute type 3 has an invalid length.
[  802.863683][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2538'.
[  803.135161][T15032] usb 6-1: USB disconnect, device number 106
[  803.409032][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2540'.
[  803.673917][T15465] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.2541'.
[  803.732051][T15468] tmpfs: Unknown parameter '���eq�{��ɞT*����{L!���sǶ�n!P�F8>5�W٦�RW����PV�������j���%˜W8���
'
[  803.964732][T10884] Bluetooth: hci6: command tx timeout
[  804.130962][ T8439] team0: Port device geneve0 removed
[  804.517516][ T8439] bond0 (unregistering): Released all slaves
[  804.672409][ T8439] bond1 (unregistering): Released all slaves
[  804.829802][ T8439] bond2 (unregistering): (slave batadv1): Releasing active interface
[  804.840114][ T8439] bond2 (unregistering): Released all slaves
[  804.998953][ T8439] bond3 (unregistering): (slave veth3): Releasing active interface
[  805.007072][ T8439] vlan2: entered promiscuous mode
[  805.014382][ T8439] bond3 (unregistering): (slave vlan2): Releasing active interface
[  805.023972][ T8439] bond3 (unregistering): Released all slaves
[  805.037524][ T8439] bond4 (unregistering): Released all slaves
[  805.058296][T15386] team0: Port device team_slave_0 added
[  805.064818][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2540'.
[  805.081563][T15455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2540'.
[  805.090821][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2540'.
[  805.137145][T15386] team0: Port device team_slave_1 added
[  805.309237][T15386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  805.383330][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.756959][T15386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.941590][T15486] netlink: 'syz.6.2545': attribute type 10 has an invalid length.
[  805.943580][T15386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  806.034856][T10884] Bluetooth: hci6: command tx timeout
[  806.179393][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  806.227337][T15386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  806.296125][T15486] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  806.316802][T15486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  806.336028][T15493] loop8: detected capacity change from 0 to 8
[  806.372821][T15493] Dev loop8: unable to read RDB block 8
[  806.379602][T15493]  loop8: unable to read partition table
[  806.387718][T15493] loop8: partition table beyond EOD, truncated
[  806.394315][T15493] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  806.404443][T15386] hsr_slave_0: entered promiscuous mode
[  806.420639][T15386] hsr_slave_1: entered promiscuous mode
[  806.431492][T15386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  806.441652][T15386] Cannot create hsr debugfs directory
[  806.711731][T15512] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.2556'.
[  806.829822][ T8439] _�Z`Ԁ@: left promiscuous mode
[  806.867851][T15514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2557'.
[  806.904757][T12157] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[  807.705248][T12157] usb 7-1: Using ep0 maxpacket: 32
[  807.752319][T12157] usb 7-1: config 0 has an invalid interface number: 145 but max is 0
[  807.770020][T12157] usb 7-1: config 0 has no interface number 0
[  807.809966][T12157] usb 7-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=20.16
[  807.850157][T12157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.888648][T12157] usb 7-1: Product: syz
[  807.892877][T12157] usb 7-1: Manufacturer: syz
[  807.921832][T12157] usb 7-1: SerialNumber: syz
[  807.933585][ T8439] 
[  807.935975][ T8439] ======================================================
[  807.942994][ T8439] WARNING: possible circular locking dependency detected
[  807.950029][ T8439] 6.16.0-syzkaller #0 Not tainted
[  807.955061][ T8439] ------------------------------------------------------
[  807.962078][ T8439] kworker/u8:21/8439 is trying to acquire lock:
[  807.968312][ T8439] ffff88807aae0e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  807.977908][ T8439] 
[  807.977908][ T8439] but task is already holding lock:
[  807.985273][ T8439] ffff888055a08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  807.995641][ T8439] 
[  807.995641][ T8439] which lock already depends on the new lock.
[  807.995641][ T8439] 
[  808.006051][ T8439] 
[  808.006051][ T8439] the existing dependency chain (in reverse order) is:
[  808.015066][ T8439] 
[  808.015066][ T8439] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  808.022803][ T8439]        lock_acquire+0x120/0x360
[  808.027824][ T8439]        __mutex_lock+0x182/0xe80
[  808.032847][ T8439]        ieee80211_open+0xed/0x1f0
[  808.037958][ T8439]        __dev_open+0x470/0x880
[  808.042803][ T8439]        netif_open+0xaa/0x170
[  808.047563][ T8439]        dev_open+0x125/0x260
[  808.052235][ T8439]        team_add_slave+0xb36/0x2840
[  808.057521][ T8439]        do_set_master+0x530/0x6d0
[  808.062637][ T8439]        do_setlink+0xcf0/0x41c0
[  808.067578][ T8439]        rtnl_newlink+0x160b/0x1c70
[  808.072768][ T8439]        rtnetlink_rcv_msg+0x7cc/0xb70
[  808.078221][ T8439]        netlink_rcv_skb+0x205/0x470
[  808.083512][ T8439]        netlink_unicast+0x75c/0x8e0
[  808.088880][ T8439]        netlink_sendmsg+0x805/0xb30
[  808.094165][ T8439]        __sock_sendmsg+0x21c/0x270
[  808.099366][ T8439]        ____sys_sendmsg+0x505/0x830
[  808.104648][ T8439]        ___sys_sendmsg+0x21f/0x2a0
[  808.109845][ T8439]        __x64_sys_sendmsg+0x19b/0x260
[  808.115304][ T8439]        do_syscall_64+0xfa/0x3b0
[  808.120360][ T8439]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.126767][ T8439] 
[  808.126767][ T8439] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  808.135200][ T8439]        validate_chain+0xb9b/0x2140
[  808.140488][ T8439]        __lock_acquire+0xab9/0xd20
[  808.145681][ T8439]        lock_acquire+0x120/0x360
[  808.150693][ T8439]        __mutex_lock+0x182/0xe80
[  808.155732][ T8439]        team_del_slave+0x32/0x1c0
[  808.160842][ T8439]        team_device_event+0x285/0xa20
[  808.166293][ T8439]        notifier_call_chain+0x1b3/0x3e0
[  808.171916][ T8439]        unregister_netdevice_many_notify+0x15d8/0x2320
[  808.178932][ T8439]        unregister_netdevice_queue+0x33c/0x380
[  808.185164][ T8439]        _cfg80211_unregister_wdev+0x165/0x590
[  808.191318][ T8439]        ieee80211_remove_interfaces+0x49a/0x6d0
[  808.197642][ T8439]        ieee80211_unregister_hw+0x5d/0x2c0
[  808.203533][ T8439]        mac80211_hwsim_del_radio+0x275/0x460
[  808.209598][ T8439]        hwsim_exit_net+0x584/0x640
[  808.214802][ T8439]        ops_undo_list+0x497/0x990
[  808.219912][ T8439]        cleanup_net+0x4c5/0x800
[  808.224849][ T8439]        process_scheduled_works+0xade/0x17b0
[  808.230908][ T8439]        worker_thread+0x8a0/0xda0
[  808.236010][ T8439]        kthread+0x70e/0x8a0
[  808.241034][ T8439]        ret_from_fork+0x3fc/0x770
[  808.246146][ T8439]        ret_from_fork_asm+0x1a/0x30
[  808.251429][ T8439] 
[  808.251429][ T8439] other info that might help us debug this:
[  808.251429][ T8439] 
[  808.261648][ T8439]  Possible unsafe locking scenario:
[  808.261648][ T8439] 
[  808.269174][ T8439]        CPU0                    CPU1
[  808.274538][ T8439]        ----                    ----
[  808.279897][ T8439]   lock(&rdev->wiphy.mtx);
[  808.284403][ T8439]                                lock(team->team_lock_key#3);
[  808.291870][ T8439]                                lock(&rdev->wiphy.mtx);
[  808.298893][ T8439]   lock(team->team_lock_key#3);
[  808.303851][ T8439] 
[  808.303851][ T8439]  *** DEADLOCK ***
[  808.303851][ T8439] 
[  808.311990][ T8439] 5 locks held by kworker/u8:21/8439:
[  808.317351][ T8439]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  808.328230][ T8439]  #1: ffffc9000fe7fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  808.338757][ T8439]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  808.348081][ T8439]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  808.358012][ T8439]  #4: ffff888055a08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  808.368800][ T8439] 
[  808.368800][ T8439] stack backtrace:
[  808.374704][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  808.374724][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  808.374736][ T8439] Workqueue: netns cleanup_net
[  808.374760][ T8439] Call Trace:
[  808.374768][ T8439]  <TASK>
[  808.374777][ T8439]  dump_stack_lvl+0x189/0x250
[  808.374797][ T8439]  ? __pfx_dump_stack_lvl+0x10/0x10
[  808.374815][ T8439]  ? __pfx__printk+0x10/0x10
[  808.374836][ T8439]  ? print_lock_name+0xde/0x100
[  808.374857][ T8439]  print_circular_bug+0x2ee/0x310
[  808.374879][ T8439]  check_noncircular+0x134/0x160
[  808.374899][ T8439]  validate_chain+0xb9b/0x2140
[  808.374921][ T8439]  ? lockdep_hardirqs_on+0x9c/0x150
[  808.374942][ T8439]  __lock_acquire+0xab9/0xd20
[  808.374960][ T8439]  ? team_del_slave+0x32/0x1c0
[  808.374981][ T8439]  lock_acquire+0x120/0x360
[  808.375008][ T8439]  ? team_del_slave+0x32/0x1c0
[  808.375031][ T8439]  ? __mutex_trylock_common+0x153/0x260
[  808.375053][ T8439]  __mutex_lock+0x182/0xe80
[  808.375070][ T8439]  ? team_del_slave+0x32/0x1c0
[  808.375090][ T8439]  ? rcu_is_watching+0x15/0xb0
[  808.375110][ T8439]  ? team_del_slave+0x32/0x1c0
[  808.375132][ T8439]  ? __pfx___mutex_lock+0x10/0x10
[  808.375149][ T8439]  ? bond_netdev_event+0xd9/0xe80
[  808.375174][ T8439]  ? __pfx___mutex_lock+0x10/0x10
[  808.375191][ T8439]  ? __pfx_bond_netdev_event+0x10/0x10
[  808.375217][ T8439]  team_del_slave+0x32/0x1c0
[  808.375240][ T8439]  team_device_event+0x285/0xa20
[  808.375257][ T8439]  notifier_call_chain+0x1b3/0x3e0
[  808.375278][ T8439]  unregister_netdevice_many_notify+0x15d8/0x2320
[  808.375303][ T8439]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  808.375323][ T8439]  ? __lock_acquire+0xab9/0xd20
[  808.375347][ T8439]  unregister_netdevice_queue+0x33c/0x380
[  808.375365][ T8439]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  808.375385][ T8439]  _cfg80211_unregister_wdev+0x165/0x590
[  808.375410][ T8439]  ieee80211_remove_interfaces+0x49a/0x6d0
[  808.375430][ T8439]  ? __pfx_synchronize_rcu+0x10/0x10
[  808.375450][ T8439]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  808.375469][ T8439]  ? rcu_is_watching+0x15/0xb0
[  808.375494][ T8439]  ieee80211_unregister_hw+0x5d/0x2c0
[  808.375521][ T8439]  mac80211_hwsim_del_radio+0x275/0x460
[  808.375546][ T8439]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  808.375574][ T8439]  hwsim_exit_net+0x584/0x640
[  808.375595][ T8439]  ? __pfx_hwsim_exit_net+0x10/0x10
[  808.375616][ T8439]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  808.375641][ T8439]  ops_undo_list+0x497/0x990
[  808.375666][ T8439]  ? __pfx_ops_undo_list+0x10/0x10
[  808.375691][ T8439]  cleanup_net+0x4c5/0x800
[  808.375713][ T8439]  ? __pfx_cleanup_net+0x10/0x10
[  808.375735][ T8439]  ? _raw_spin_unlock_irq+0x23/0x50
[  808.375749][ T8439]  ? process_scheduled_works+0x9ef/0x17b0
[  808.375766][ T8439]  ? process_scheduled_works+0x9ef/0x17b0
[  808.375783][ T8439]  process_scheduled_works+0xade/0x17b0
[  808.375810][ T8439]  ? __pfx_process_scheduled_works+0x10/0x10
[  808.375833][ T8439]  worker_thread+0x8a0/0xda0
[  808.375860][ T8439]  kthread+0x70e/0x8a0
[  808.375882][ T8439]  ? __pfx_worker_thread+0x10/0x10
[  808.375898][ T8439]  ? __pfx_kthread+0x10/0x10
[  808.375919][ T8439]  ? _raw_spin_unlock_irq+0x23/0x50
[  808.375933][ T8439]  ? lockdep_hardirqs_on+0x9c/0x150
[  808.375949][ T8439]  ? __pfx_kthread+0x10/0x10
[  808.375969][ T8439]  ret_from_fork+0x3fc/0x770
[  808.375986][ T8439]  ? __pfx_ret_from_fork+0x10/0x10
[  808.376003][ T8439]  ? __switch_to_asm+0x39/0x70
[  808.376022][ T8439]  ? __switch_to_asm+0x33/0x70
[  808.376040][ T8439]  ? __pfx_kthread+0x10/0x10
[  808.376060][ T8439]  ret_from_fork_asm+0x1a/0x30
[  808.376093][ T8439]  </TASK>
[  808.726436][T10884] Bluetooth: hci6: command tx timeout
[  808.751281][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  808.758037][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  808.778004][T12157] usb 7-1: config 0 descriptor??
[  808.788053][T12157] mos7840 7-1:0.145: required endpoints missing
[  808.893790][ T8439] team0: Port device wlan1 removed
[  809.343737][T12152] usb 7-1: USB disconnect, device number 76
[  809.401719][   T30] audit: type=1326 audit(1755961726.742:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.5.2561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9a378ebe9 code=0x0
[  809.505681][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'.
[  809.741510][T15386] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  809.754107][T15386] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  809.776894][T15386] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  809.793543][ T8439] hsr_slave_0: left promiscuous mode
[  809.799641][ T8439] hsr_slave_1: left promiscuous mode
[  809.811984][ T8439] veth1_macvtap: left promiscuous mode
[  809.818180][ T8439] veth0_macvtap: left promiscuous mode
[  809.823794][ T8439] veth1_vlan: left promiscuous mode
[  809.829181][ T8439] veth0_vlan: left promiscuous mode
[  810.433950][T15386] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  810.483626][T15386] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.500285][T15386] 8021q: adding VLAN 0 to HW filter on device team0
[  810.510443][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.517593][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.531226][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.538392][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.745857][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.791312][T15386] veth0_vlan: entered promiscuous mode
[  810.800757][T15386] veth1_vlan: entered promiscuous mode
[  810.822324][T15386] veth0_macvtap: entered promiscuous mode
[  810.831242][T15386] veth1_macvtap: entered promiscuous mode
[  810.846824][T15386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.859395][T15386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  810.870100][T15386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  810.879136][T15386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.889258][T15386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.898197][T15386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.924239][T15386] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht'
[  810.942313][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.943692][T15386] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht'
[  810.954620][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.977700][ T8439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.986069][ T8439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50