last executing test programs:

13m48.041780977s ago: executing program 1 (id=29):
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r0 = epoll_create(0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x80000000, 0x2, 0x1})
r2 = epoll_create(0x20)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000300))
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0)

13m46.379862785s ago: executing program 1 (id=32):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0x1, 0x81, 0x9, 0x7, 0x24, 0x7ff}}], 0x58}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000004e3000006000000030000042c0500000200000004000000050a00000700000604000000fdffffff010000000100000036c7000000000000060000060400000015000000ff07000005000000011fe45100"], &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r5 = dup(0xffffffffffffffff)
ioctl$UI_DEV_CREATE(r5, 0x5501)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x36c, 0x2)

13m44.099537345s ago: executing program 1 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x4000006, 0x8000, 0x8001}, 0x1c)
unshare(0x2c020400)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)

13m43.3802083s ago: executing program 1 (id=39):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0)

13m41.618928217s ago: executing program 1 (id=42):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x2)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid(0x0, r2, 0x0, 0x40000000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}}], 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)
recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x16)

13m39.458350149s ago: executing program 1 (id=46):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
rename(0x0, &(0x7f0000001080)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {<r0=>0x0}, {}, 0x4, 0xfffffffffffffffd})
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
sendmmsg$inet(r2, 0x0, 0x0, 0x400c8c4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000005140500000000000000000008003d000000000008000300001f9d0008003d00000000000800030000000000080001000000080008b40c58d100000008003d00040000"], 0x48}}, 0x0)

13m24.23679656s ago: executing program 32 (id=46):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
rename(0x0, &(0x7f0000001080)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {<r0=>0x0}, {}, 0x4, 0xfffffffffffffffd})
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
sendmmsg$inet(r2, 0x0, 0x0, 0x400c8c4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000005140500000000000000000008003d000000000008000300001f9d0008003d00000000000800030000000000080001000000080008b40c58d100000008003d00040000"], 0x48}}, 0x0)

4m22.859757892s ago: executing program 0 (id=1224):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lseek(r3, 0x851, 0x0)

4m19.586233937s ago: executing program 0 (id=1232):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r0}, 0x10)
mq_notify(0xffffffffffffffff, 0x0)

4m18.769210761s ago: executing program 0 (id=1233):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9000300"], 0xe)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r8=>0x0})
socket(0x200000000000011, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x38}, 0x4, 0x700000000000000}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)

4m17.314461545s ago: executing program 0 (id=1239):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000240)="f20ea8accdb7d9e23df464", 0xb, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x0)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
read$FUSE(r7, 0x0, 0x3c)
close_range(r5, 0xffffffffffffffff, 0x0)

4m14.98744991s ago: executing program 0 (id=1244):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10)
ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x500)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0)

4m13.846606035s ago: executing program 0 (id=1246):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mknod$loop(0x0, 0x2002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000007c0))
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8441)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
dup(r3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpgid(0xffffffffffffffff)

4m1.34430557s ago: executing program 2 (id=1269):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lseek(r3, 0x851, 0x0)

4m0.236459348s ago: executing program 2 (id=1271):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
io_setup(0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmctl$IPC_RMID(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0x1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8)

3m58.936955058s ago: executing program 2 (id=1273):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080)

3m58.654943561s ago: executing program 33 (id=1246):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mknod$loop(0x0, 0x2002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000007c0))
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8441)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
dup(r3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpgid(0xffffffffffffffff)

3m57.924988154s ago: executing program 2 (id=1275):
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58d04"])

3m57.634338246s ago: executing program 2 (id=1276):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x4008001)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0xa)

3m57.178642794s ago: executing program 2 (id=1278):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mknod$loop(0x0, 0x2002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000007c0))
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8441)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
dup(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getpgid(0xffffffffffffffff)

3m42.120692861s ago: executing program 34 (id=1278):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mknod$loop(0x0, 0x2002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000007c0))
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8441)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
dup(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getpgid(0xffffffffffffffff)

2m45.729579294s ago: executing program 5 (id=1403):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2m44.44949072s ago: executing program 5 (id=1405):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m41.848574377s ago: executing program 5 (id=1412):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c}, 0x1c}}, 0x800)
inotify_init1(0x0)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2)

2m39.309779853s ago: executing program 5 (id=1415):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
write$binfmt_misc(r4, &(0x7f0000000280), 0xff9d)
sendfile(r3, r4, &(0x7f0000000100), 0x2)
fcntl$addseals(r4, 0x409, 0x8)

2m35.920230353s ago: executing program 5 (id=1423):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)

2m35.762056497s ago: executing program 5 (id=1424):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
getpgrp(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000070000000c0000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
pipe2(&(0x7f00000000c0), 0x0)

2m20.49346173s ago: executing program 35 (id=1424):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
getpgrp(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000070000000c0000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
pipe2(&(0x7f00000000c0), 0x0)

44.530009669s ago: executing program 8 (id=1665):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0x1, 0x81, 0x9, 0x7, 0x24, 0x7ff}}], 0x58}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r5 = dup(0xffffffffffffffff)
ioctl$UI_DEV_CREATE(r5, 0x5501)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x36c, 0x2)

41.587104727s ago: executing program 8 (id=1669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000080)

38.539537427s ago: executing program 8 (id=1674):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000303", 0x7}], 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f0000001a80)='./file0/../file0/file0\x00')
renameat2(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

35.393535683s ago: executing program 8 (id=1678):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lseek(r4, 0x851, 0x0)

33.509203706s ago: executing program 8 (id=1684):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000080)

31.517947393s ago: executing program 8 (id=1686):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000000)=@ethtool_gstrings={0x42}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
unshare(0x8040480)
epoll_create(0x2)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x20, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)="9a9ad4e2d29d2555fca60a69e355ea8ca41d0de13467f2ccc61f484a5f894b56decae99d5bc0f2c0b675ad4423191f6ab6a0a6c1c0575fd052eb4110eec5eb346a99e0b22173405733deffeb0d777f59581cf2ae682c173d769d504555e0c6689e04846b5b98c1a632a436c38a2b244f471eb9fc55bb7e2af5fbe0c8b8421eec20288da5155ec2ac36462b5c9421ed0d2f8c428ecc4e310b429288e111da09fcadaea200828196ba7ec56504559d212c703d9ad8351f9fee9b119549fe1a23150f004db9d83d1499b8d6cd899c1ca6a2b8d198604029cc3f5b8faacb48fab51a3b8b646e7448aec55d72b38faf875978bfe3018d446910", 0xf7}, {&(0x7f0000004200)="329c65c379b341e93fba679cba93f6ef64d2f742015197549956078174b70a582209b2519b150300000072de91f8f13390c65f39c50e33d196d199139b517a9f28c090815671d3e7f4e18290036d3ef7217ad167a0cb3ca0b353df20b8008036f27f618531024c88d031c18c4ab4395d2e940a643b932867a559a7801d79759e2f64bc6c61b1b8a76dcfead2af6f7b2a109203985c9e706ac63b35af10a1a050cf84ed3567195cd9a15e294ee91c42befb136def640eba375c87142b381989274d188a74182ae17db8b942bc2aa98ec57689fd477c32802f587fd0abeffa1bf7eb5199abc2ddff0b3ffe8ac58850e64f55da5bd5f7772b02ecf2a34ed3a6de126e213cf69406ae84eea5c728823d7b1ec4b9e6b08e32c72f1c7f2d7be600a2c7a95812a979981828186e57f041c1554693a3e7335e6379ab2bfa8cab00ac2843b68aa3cad9e16a4d23caa7abf265352ef9988ad1cb3c77e055cd6495eee1a64aeb954c5c5f3b65118286f10575b4a68ba0d6d54c11d6205a690498b35811d481a88d1d56bb195e1104011a9941d4ef22e2537ddbd618515e682e264aa3025bbd3bff58efcdc638501ce8ae75074380a03bdcfc6d8ec0364f87098b418b60ba920351f4335803123fa3b820d5d26bbebfead844aec360489b7a0e75c0e720a46f8e2ecb1b349d5b0dd56edd9358264147547f7387b8f269419a0b4cbbd1cae36e3067b565d1a525cd036e743a08526b4316c4be5e220444485c24c566161e4e1167c2d30ac59e3215e9f5bd42149fd76f504675b84c3269b088589823309d51ff11dc9d9d4e9aefdd19a0423b705d1fdcd36512fc4399c46bda6734b7a449ce67cb5e5b03840c26b69abd691f29e4d10b1de2d74eaef690fe68890866bc800cc99453287061ce55b9addce22aab4945644707c7e364eeeaf4e39d14b6ebbc7318e373d4d44caaff4540ebbe29b7e2fa7c370d67f8ba0a66eba4fc086676887a72209d612d70db4807804995d6f5c4bde9260db62fc6806ab8994a393e4f4709ee24a644a65f7b07b66a64e12430624ab50291c728baa40721480b1eed34f97710cc41b5dba115cb0aa0c35936d81388de829d561a738cdd82551799ac539179b95ca138d7880481fc029fe1f00fa4e3c49b65094f3d46ce8b94b9a0ad3c3096c3c1eaf138964b3ea9af121e207416eda7d96db19414799ddbd0bdee16e14f6f8dfd105ba603f11db311a18fb6f420689221b10fea364c3c4236c8385020ccab7a642f8c51e6c61fa86dbf7a4a2812c6a06c7c8687d3db7981b33a87e3d6d48dfbefebd1a1c4ce3b0dbe8a49061b20eb6db06e44a011c48b5512a581ad0a5e2ce511846ac6341f1be97295017e1b1c131b49f5e972039035b20c19fceee8ca4666774463714924926eb9b4e47a123e6aec41a1821bbeb1da70e490ae84278b1f86b55a8195eef3f42409f6802531b499b2ecc9af439bd86453142c05e59693a58c3076d1ae1d86cb803a76ec6b1811516491a14ffc37d19ffc0b7760c810b41472f367813dec9853a3f9724df9d47d78ea433571aa2aff8dd8b4fcceefeb57851e0f8ed282393a47a04944f7f7684c938651bb6e7eab473a7ad7d708a6d54331cf55f4bbd48869622538f30a4deff73bfcc1d9e8d8845077a80105e3aae77911d87d0919d421c2b99321f575f841f5b0616102e7143a893a1575f341ed50ea88b6cc0b72c9ad377b26127cc4aa91dc694ac7e9d218bdc41e83727afbbeff28e5a86e71664b41594ae38eef44a8382e2e8ece6acf3786564e5f1676cfc6bef61b5ba3ba6566210756931c533b9f55de9920125df7adab27ba4f4ef71f1fe4dfe59caa02fbaa547ccc99e6a6982f883f65cb73b43cb32100750bd647af783e870960ec9c902a5b6a1604bb8f3ce1f4b99cae176081f24b8e442cf81013bff60a2d9c0e32a603743608bb65a8460f17bd9db8e3f14b89e206f0278a92f7822d443c19b9c7184bb808cc355e44f81b56f4f7dfd8a1477e86bbfde7b2117e23c2f926ba1f2657c1d521eb462e9e2e4ebe9e89510f0c5647b183ad71bda8eb06583c4cb605aa360db87da968dbf5a916ea7ab1ef4bcde5763d56ce79543ab8dedc6d8b42edc423d0c6c85125f5f83927bbdafd1e15d21a7cc52a1e793fe0ec979a42d7ff55d486f023f307bca4b78793511409c0dd50c4c3930619dafde2875abb3e512f22917813c1c670af39c1fbb05496ebff9998ebc5f1baf310fd57efbcc1f7f819afeec67a1d0e41178df1066153ae6c9a0e70c31c4ae11f7085507d2fd618c3932f3d91368cfd7a0edb3cabeb24491f59a1f3c839a900667f8d14c6cddb97f813a54f095dda4697917786c9c822294fb47981d7cc5f2bfc33b79c31906ffaee692dd275c5f671fe32595d3c7eb09aad22890f12af46f3307919b1d869965fe8cd490774a3da37d469e03b533240d21423bfab7f7a3e88d29e23b07e127810b2a5fa99bdddb23a18a7622cbf0856846e912697ac9de29e455b3fca1afce04ffbf3930e14102d268b2061541a75d1b0b7ca4143257078d9bf122f6d64be0e7826868587e2a12dddce02ad159f4c783eb1cb2ae090a0f96935e215850254fa3825da4341d019f47f273238c6b624d53704c6837f264dd06b6d588d5cb7c5586e0a105474d7e424a0743bc4c0f0d30e7038d6f026ea3c5e464dc905fb5b8fca09e6c95c9c9e1cb6759a4c2525444f0c40636cc8e1032b5d50516dd927fe08502b893c500aac3337762fb7c2f37e254a0ba905c9aec5c0533b9ef7426c1d3289de36bc55301386e54faf96225fc0ef263417cbbf949056a9cb5f5efcd7be80777deccdead7f738830abe31e31ccbd50770ef8b4641174498b021cab9e15081017c3f8eb87e5881bfcde574f96d18d89a6aa00bffea55c593db9848c94d5a73b21d66bc747850dded22419a08d8844e39bf6772546afe20f7fb57223d65f47cba04819e904eb156694a8f2ada4fadbd2ef7563aad5dbe964312f96712245d5166ad36599b0a6f4940d728120f14ef09d9612fe76019386aeb3d7b721e4b1bab125f9f5a67683aac03cef6878a00abb026b6087f6248618fd6a98597a315e206460459135a8f5b20399f68de5fe08852b7bdc698ac1426f61456e6b4084023553e0e9ed8425ae551bece497a33ee73417ca838d8b01d6abc864cce3cabe92c9b871e47bd1bc8f26b9c415cd7e4c6a0e0aac732664ec2a457637f3e75cd15ad3acff5d91d5dbb060db696e27a28f65f001caf9fc89dca2d9f74ef46fe25d1d7af388238e912748e30fd674578841d7f9b46c6402668f4f28f66c0c1654a87eafd5feb65610b1247b15a0fa3b94ffc6e4a002895a7363ceb93f5afa6cef4f44b8e0d2aebea48c16eecbdcf335bbb2d9a2e011e78789cc07ae82300ea578074d3fe8100e8b46f43ba6548ba402887be9894e9c32bca3bf709331638b00b0d8d54a5e84b914bc13362550ffedcbd5e5a3ab83d4acbdd9281dc2c8ca7f8f53b17a5e0c0c1cd1b0c84f94b978992ab74f91331c576e48fff2d9743970c974e758f7e224b637195744e3a20322098f361ef3838dbea8a109e1ef44fbbeeaf36fee3cef00c33038370fbf5dbcd923700694c3bf84578faa3cc227c5a48548e25e74569e8de536cf4f8b05113ee2386695de6c0fde3504ef77ea3ca38fb5cc64150429df71932942bfd5f2c769a24f1a482165cf16d4e76aca22256e0617cda5d9a9f7e70c740b74e258fbeab60da239f3c0dcde6f8ad36ead49e8601c75617fca816a04c4c68dbedf0ed9e680b659af32f04c30cbee9723d1f6e64b2619fdd7d8e7b3a52986b62bb18ed4d727ea5628b5bbb4b839d3e863ea980caa6680965efe23baca06673a467e702ca1c04b5b9070a2b207e42efa92e3444eee48813fbb1f690a4259064d14bf739d99b128d93224f213fa5d854e3d4ddd6de11cab7b83c0943f57f3d35fde59ffa3f2eef24cc0f16873585add2cbaf9797f10a32b44640408ca17906e4513dfdb1733a2892cfc1143e87a590162b1c12626cd85fbd6032528a82481c2b0d6ac0700e677a5833ab07f02248be4b98e3eda2b68ff6d89abfba2f502ce6476cd468a9300c7744f70353fa9f9a2066085419532e329ba7d8497113bc05693197495e63cf84690dce9b1928b2e6138d8e43e1e37c0529cccbe57a1a0222f8234a7e4f671fbfc204592c7afcc53b7b2e1398f80480432124735780a74958ad8928cfff176c87759b64211c7ceaadbfdeec412862ebee1def0c3a7bde29a27f2ba41871efaa369fc83c826f8f248ee9bb2f0c43016cf0d3c399a1afa4c727f06aa0a4073f2ced10a675169743fc33ca091390667b26ccd5e7190826bb67f6477bedd83390e28993c45fbb3954bd67efeb73506b95f50b46c0e144519361d30902aca06b4c839ff9f8b0c2228bc35d32a63bac88b4c0ca55298e328ed6e02e7bc1ce09dee27d84212dd8030bf52796a5e1ea38f6e4047961056ade497ce27eee8c5b01056a661d562111363032119f56b72815ec299bcae02f4e1fdeb71fcb19a7b88ca30e59172a1b714dfbd70b6f716ecfeda1a648813c9d61f4ccf86d8c7b327d3927b6afe11d45c3af644d8d4105e374fd6e861934de8d970d38bdc936169accdc2ec6cbf753b8e23c3e3eebe78bf268c487d6a20bd67d46cafea9e2bdfa4b7747f99173ea95364ef45cfa27646677a84925d2e594f6769558d243e462a76e70fb9331982b818fee2433473aaae6f0a9221c22756b9c8e75564bde794eccc0376b8945300799dae2306690383a27ecd78977495e4d57b235ba06170a0093308cdaa6c8e3afee2239a4b9c45b8e01477166a1d0ecaf38686e198fad6e2e7af71ee8e96a1e2d0b30c77f1dd122739519a96d647143c6dab65464c0b27a2dca6421e986fa90152314da560f00ffde17b28ba52e5a9d4fefc4da2b7c4b04f2b7dd423797d1b2bfc633a0b5ee6c938df38487968c56e84a88f58f35c32053f6729c2dd2603d0a8241ad29b036eaa4dcc3a5deaebfabccf4c41e9d5d564161e30bd670b72ca79564102fa9c1c7c3e55dec0de46f4b7ad4950e088dce9ba552d4ee8e47a861925a5b2f5b97b2d4bcf1a34193af985d7f1fb51a8eca6a035deab9d58a091b12c7591534d811e5e5706d630afbcd7a6cf63504ca337c92d42db729a4c791dfc9a3376ef4ccc9ccfd024bd40aa7c1f355cc94b996082a5f6021bba309ef1fa5f6835980749723a86d4d145e1aee478a7dde7665edec7518127ea42b7641ba15bae7113cbe8b7876ef8310add40610aa9d46c5e63fb147692cf02f7aa0e6bc6988abdebf7dc8c7e620a4e1aad4a115391c9b4a14c43112e931d1ea81194e868c01f3733f6c992bbf67d4c0a9ae9bb219fcfc08ebb290cc076856b6be847b3182bc19c2f60f356c993562b0d252dbc3125d7429d101722476b93450619069460b25fb5bf1dad2b8f21c29e758b8628cb52f7ac738e8c768cf709df2083e0d6fde5f2876736dfdcb08a9ee4576ab3e4f91f1b4d32f927aa30f8fc72e67ae8142c70be0e0ca3b1928d88cfc921da14d11b6b1af382de489259b10e164f2437aa25424eef81549852c5ea79acba193b2123cc76ceff50eeaed6f86e79be01f5159d1cfaee61040d01ddba84ab8cb174dcb315e183568eff4457e8efa84a3dd60e0b67281f5b3087855012e877e30c1114c5d3a755b1627ece157938fd35ca1f289ffa43bc956448cb02fba5345809bc3bceafe45b94ef6c0fdcaf467357aa1a9b0d9ef23d696e37cf1776634d5733d054eacaeb9ba737b6da6014a2d068582b8ea3248547dec08c549129c9f1c28ac39514964124164bcd30319ad7ad02104e2ac53efc284b528025ab634cd62269ed64c4e7f28ab45b62c4a3032000000000000000000", 0x1062}, {&(0x7f0000001480)="018b0dd08438148d122b008de6db076734ce700f215fdc5a68b2baea61e9e53a5568af95135ae31033ef05a22713e24dc244e51700d3620e46e4e76a077b126f205af5e535ecf33afd08e511789fba157ab6ad1dbc2f8a2b1c3a920b5a214a0ad1504c1cf67b388619e35f3c3c6ad374251a7493f18e41df75efd3c9e7c37eded080ace8f572480b0a68897bf7ff570285a585f31300d444a312a413ef2fbc9253a12c9dcd2403218123cd20cfd3e0f34aa5dbedccc6c704b3b143bc62f20960745d93a82c94d596872934b8c14381d9cf8e4a9f533683063a8bbb33d8b522e92a", 0xe1}, {&(0x7f0000001940)="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", 0x169}, {&(0x7f0000001680)="ceeeca6b95efee9b7e15aaa45fde430dc36bb35a53d124e5cb1209edf478247b1c8311e8928050ee8abe3b321d7fafd08904b99cbb1b353f880d3ea4ba4cb6c42ae18760964d0d672b96098d8737900777716d1feec5e7f4256c3772d4eda3748d7cca3249269a4a68a4e6018ab31f66d142d25bd964116124851c93c3726bbf846985d14747ac2a4d6a9f4f56a247802443737bff9b50525e279f7be014befb27263d7f8d204829", 0xa8}, {&(0x7f0000000180)}], 0x6, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresgid(0x0, 0x0, 0xee00)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0)

16.245970702s ago: executing program 36 (id=1686):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000000)=@ethtool_gstrings={0x42}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
unshare(0x8040480)
epoll_create(0x2)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x20, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)="9a9ad4e2d29d2555fca60a69e355ea8ca41d0de13467f2ccc61f484a5f894b56decae99d5bc0f2c0b675ad4423191f6ab6a0a6c1c0575fd052eb4110eec5eb346a99e0b22173405733deffeb0d777f59581cf2ae682c173d769d504555e0c6689e04846b5b98c1a632a436c38a2b244f471eb9fc55bb7e2af5fbe0c8b8421eec20288da5155ec2ac36462b5c9421ed0d2f8c428ecc4e310b429288e111da09fcadaea200828196ba7ec56504559d212c703d9ad8351f9fee9b119549fe1a23150f004db9d83d1499b8d6cd899c1ca6a2b8d198604029cc3f5b8faacb48fab51a3b8b646e7448aec55d72b38faf875978bfe3018d446910", 0xf7}, {&(0x7f0000004200)="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", 0x1062}, {&(0x7f0000001480)="018b0dd08438148d122b008de6db076734ce700f215fdc5a68b2baea61e9e53a5568af95135ae31033ef05a22713e24dc244e51700d3620e46e4e76a077b126f205af5e535ecf33afd08e511789fba157ab6ad1dbc2f8a2b1c3a920b5a214a0ad1504c1cf67b388619e35f3c3c6ad374251a7493f18e41df75efd3c9e7c37eded080ace8f572480b0a68897bf7ff570285a585f31300d444a312a413ef2fbc9253a12c9dcd2403218123cd20cfd3e0f34aa5dbedccc6c704b3b143bc62f20960745d93a82c94d596872934b8c14381d9cf8e4a9f533683063a8bbb33d8b522e92a", 0xe1}, {&(0x7f0000001940)="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", 0x169}, {&(0x7f0000001680)="ceeeca6b95efee9b7e15aaa45fde430dc36bb35a53d124e5cb1209edf478247b1c8311e8928050ee8abe3b321d7fafd08904b99cbb1b353f880d3ea4ba4cb6c42ae18760964d0d672b96098d8737900777716d1feec5e7f4256c3772d4eda3748d7cca3249269a4a68a4e6018ab31f66d142d25bd964116124851c93c3726bbf846985d14747ac2a4d6a9f4f56a247802443737bff9b50525e279f7be014befb27263d7f8d204829", 0xa8}, {&(0x7f0000000180)}], 0x6, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresgid(0x0, 0x0, 0xee00)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0)

15.025450137s ago: executing program 3 (id=1715):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000680)={0x8a, 0x7, r8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x749bc})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf7d, &(0x7f0000000700)="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", 0x4})

12.87874412s ago: executing program 3 (id=1718):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x202, 0x0)
write$binfmt_misc(r4, &(0x7f00000000c0), 0x4c)
r5 = dup(r0)
sendmsg$OSF_MSG_ADD(r5, 0x0, 0x8000)

12.606937921s ago: executing program 6 (id=1719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000680)={0x8a, 0x7, r7, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x749bc})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0xf80, &(0x7f0000000700)="85653f453420ca7d5107cac3b1c61de0a1009492a7c67d538843c3f5ba1f143fc6f1cd155f7653e1393744f396a94d8d0becf9445701326980185d6f5cc0c2ee263914da7695c86440305aa84ad2ff0c61d29e1218e6659aedbc1cea7416b5b4a991455d2534207f281a52670d763fdb36af099158c93f565c3ec3a6eddd7ee3974954d0d20fa5635c69037286a94ddd6f1a231625bcc29bdb05b5e8fef40e9a6a30de284e26f47210a18f5b1063528c16d560d916a6c811c1bae078daa7534d43906981300cd79bddf1b6c4bb873604d671da76de5d729fcd8bd703e97bde4721558c2a43dc7d5b6208acdcd8f82f3bba8753d4136b76471bd0d8d31a9f1596a15e0e18e14005249610e97f6bf581db1a50871d65742514336bc9e1fcee7dd958da853a56757f38a1009a8f81886992d594388aa4815b168d966b71b50f87b4a6ef57b5c8b1e0ce840c244d052ddf45923a7843883431b9bc43785c0e07a24459fe47642a251f6181f8c679e6bd568213f1df3cdd59dd9bd3c6131865f11570fe242d6551dc3201eaa3705cf9096561fce1273b3b767f0ea0657acf84783f609186b63533973d5b495b5bf5e66364d035214286f56748e275d2b4df9def6e844e69ba0958a9762a9c7e278811b2cda2c1abf4530cb5c3283a8bb8024bc3ed59524c6d5283bba208769540eb9f433d7a759ca5bab28ede3f39742350b9900e94c19407394b600510d553163392189c3cd831cb014260b48ed47e15fe8f89dc4e13933bf66f00d3570158130f73d641db28ddaa3dbd06fc777bc059ab7138cb7e72120e0c45135d4bff8d68dd33cebc410f116fc8bec4317e59ed5fdf7be27b64aad180ac6453b283c187072a232be84445ed91ef2ba779a7a445ee8199fafc1c74e0073fb3313a16d317b9aac2b37e215cf76984668446b2194712cd1cbcf78c9a10bc9dd104dbc03ffb0dc4a28484a0332f98cf1b99322b176546cf0c9b180e627a7e67bb16e671fdc739c255ddcba53457fb12d39700d2695f2414668f9665ec167bc763b2191f913efe3eab99a05c737662930f46567d0e2b7d3fdfaedda8ab53c4f4e0a700efe0c8cf34b30b1c2569216d1ddf1471c7cab5ccf0dae565dfcc42b2fb0d19fb92808b42d086c68eb3c0ed0a1954e19fa1e3d85bfd8a521d6230b407ed193a625f7f289c31a3a1738505c5e62177bb5b791bd861827d48655ea01d2a5009c4e8c78e426ccad4fcbe96b532eee5208967e6ee8a680319a005411ecb28e764aadf1aa83fd46f09028cd2b0ac6babc10f48c8ad3e886fb949672410b3ac31364753cabe3e9518fafc0189c7135445d202bd9703b8571ccc44c9de9f7b94c3f43afab423dddf2c8c621e2b0042b75cc198b1b93710e09fb36b4dc9c962bc4def0598eb76d9bb1e1dccf092461351b63de3c1ba850c0d82b6ebf932e32aab962b4da19fd9692164a3447f13c9eddaba5c298a76c195a86d2421906a8f242bc5c7553f0d45f23edda3a888278bc195bfb1d142361d398d8e94731fe0ff2d408ed5f6e9163623c3fb41c8cd92fed66fba7cf8799bd3a37855c1b13634190cfe32817dcc31cd320bf39a1a843d8f6c1f6cb1bd53bd45a341fc54b14bd129f1295de6f4e1693e0299dcd95a7c2d1fc909e5ee61215bdb01ea46a7d580ffe4bfb9b0bf1f5a4756151cbc3e768b77357f7b6bf568c5acb81d1d10fb7661ac5b47c0b89885857e1f0ae27a47b5890fcb316abf6a6de29ff9115f7826897f920c07816b8dfcae84d1f1baa252328caac033e723d136b8b23288a7d8db15598ba302b122ba18a300b593d1af073b8c2d627bf9c6305d79b9041f392d00bb53e18e485495d0429a873efb57fd4aefc6c5c18a37ff5cc728a86d6a06a56c390d743d0688f972cbf0d4741b77392735d0935662c150d42b74f841b463a3a91e7078e6c3cb4f627de75964a3d72b61ded7a056872ade46f34497e69922e5d900fa518042682c86ac4fd3488874c7c3e2650bbe330b7d3f8696c44199ff232ff7bcace227b6221f50c0a08378338ee81b5a86c4cbe1316c1a98761fb7979a04a3d42b9560d0852fde3054ee25e8f20db90c16de4a2de142006b7309870dfb1b4cf6a7daf418cf694a888adfce81687ab35b303f77b3437ad6c45cc35a6074ecba569d5e6d641e6b240177f0c8a1a1d4dc9f209ef748832578b0a6b80caf9ef4d0192ca8f73eee012a119c97e34bc6901ee7532345a5162d81fcd1981e9b0b6997b890277ed72604f5b29e82288924715dcb53888fbcc6dc338576e1819e2e252167b3bd01f9ec9e75cb4d62631906e728313a65c07d2778ecf3a9ee0c10fb4cf24966c4824cf23385008a892577c58d62278512160119fdc9e26d0dd617083be3c36439ffc1e074299ccde8049540ecfc89bb8351e2331b99ec9444fbcdf4401e507492c3fd63ae394b65a82aab32b589e16498b4cd8242839b75f730213ca4588a360807a813d62369a975a264e756977a1670e3d906308aa5648cca15293dfbb240eff8277262d41d1a71e0179eeb77318c1cdad85a8631d0b9950ed89c183589fa675eb0e008aaf7cfb19b87f6537ddfe55d13b6a95be4ca0baef65b724f0fb1f35ba4b13312dc06cec253c1ee3df64279c30fa2a85dbca8e52729016439cbe86e5639b177de80333a09b230a569b14fca2fb6c8294a172ecf6c9b9019c23b09c083ba564e6a137432a5460a5aea13b70bf0fb81a9ba5c2d6df490cbe4fe9ad6658b9b0f74e5ee9e5788840f3e3d0b7619c7fb4f960ce821de814ba73e5f5c75707e4ea144b003f250371b272fd317bfa7fbbda24456f2d032feca108532afda61a600e1532e9256e4fe6cf7e41f0964496a1485e7996ce8ab4375c694de12445d3d2706f957f12b29dcbf58fd449881770bd12a948cfa4b3dd2097b1b42bfa3c7eced5f0838b685bfde7d00e656244c6744953ff2e1741e0057be97a2434a25b9d976e220f4e46fa9da305fd626ab3ff16b0ee82b09d738c92923c8ada89493a0e6282d0ecd5e3498adc8cad641d8eb86669ebcd7f08f27ec47b850257582def7c16ea4ca545bb4c5b3b8612138a98f2d0528d083d067e40d51405174f2a3a4df89c822859f6cfaaf967eb43d41caee5ef44861eca76a647fd826b33460a5be331bc0e7ee0cd73683419b518f679197da31fc751a31a4ace15d481774211c7d832948b0d5c9577d5a5876909ee75a34ed78a819de1d11ff64ba157432c7e26d9e492cf5f9103639d0afd8b6b29168cdc7af1f5a219243856f25aab4981c940d143b0935d8cdd860f3687e3b30a424233b7bb96fa18bd42c7def00baa43fe15a556feca816164b1d94a2bca6ed3abe60969db27d12ab9948fb73ef599cd2d8eb2fea93814a0027f2aaa940c2b325da21b07abe82b43f9d17c9a78665e30ccad353e5167fc582e85fd888cfafa4a355673c0a771700ae1e6763bc0f2bb130ea9dead2b75ce360d635a760122e8e6a351c68ee2c707f42475222d998e2ed0829394597a6c0406cdba56e3209cc1ce6af6fedeae4e932053ba7a31ed2b413ca70511a95874be02da6d6512768a20187d9276e7faaf26a31f7c471ea235a8e39bebfc089871cffcdbb6887e8c954b23d3efc349999c202e23114bb1b5717150e06d84c1651630b248594bd8b4cd987b0db3b09d2dd4e8bcb9e0b5ebe79036ddf7f86ca3b5c0d9e34e2b82be9e7e4d9ada32bc56af4d34282fff7610a685084007e1c9dbda3abd403d7c324bbcced9d355350f70114270d454c65c4b3245c0473c8a10e9dd9c7bb6bc55df646a76dbc07593217e825096139a1e8b6971f72f2eec80f41b2ec980be41ec841931be6515c70db08f9bae265ba99a05fcb29c0d723fdd502901c3a3dde76e000eaa46e24c6f3b09fe4547db0d094c7ed26832e429fc5a6305b8fae3e8eba015b5b80f3edbd5a9e5743650b1b4712b3289179dc95a52bb8b136a23091d62ca75af09e609c59271cb408ea74c369323b41ae9cfeb557fc7218f48187ceda18b555566de67ea6a5e109498b6b95afd166f105a2c0fba32e5f655182b318e248f863d54e17ebc8146dfe72553b2bb0334673405e1aacbc1b4174f15fede379bccfa63ac01ae2edce46cbbc18c43e188946e9ce6f650a3242688b0036edf5e6a53fcd43ee55012997041dc80d7b529097424cf6014cac9d62aea104913b20ad57358b723d0dacb14e5eacf32fff43a52d1a3c31ecb8b82a47a0c69b7a05e38dac434aa08ddce5b144ae4fc113d07adbf540878750877aef994796b66419ff992f6c4fbdd527d1970701b1a873905d5cf51dbd6a873123d85a45700e9f496bf27dba143bc00846cac194a7dda72273d9294e80f2d28c68c5936db45ac92be19f0fa06d4a7bb8e564c6ea5dfcdeb38d0981bbd3280b81b1eff7c07690946b993b86238e59a8a448d4cb9cdf1044ece50fa7bae2862fdd50a988d5f6868f5409e619bb2f3d951058ebb850da0db361cf158d78ebfe51d529e8c51a5c1c2023e9c3ac46d235a8f615e66e4b3a694ec1b993f104fe46465c3581af614079d5acaf3449c22b34dadbfa50c9271896d8d4be1fa4b840f4c3c20d2bcdeb1c4f9f04031a6951d5081e8aed0c7a3ea1dac2884a2ff271f66ffc924fae53524c2988cf3b3f38eb872ff40d8ed321b130bbc0c653a081e6036f2fc8169aa748b39e407f757c2537b0d850d88d94b4623e2af105030592dc853dfb972b44a0c424c318e500eab92a392461f7525c76335109d879fb7566fcc7f179bd57aa0bf745ecab1c41470bdd17541bf93e0c8d4e03db9cb0b3aceeafb507353d49748c7cd38141d6c311b701aa80e7cb3778c63cdee1fa53be3b225a6acb3b4a68545dd0455c95823be8cae3cf58e5d07ccfcacf64e888b5d3bb2a9d4c74f6a39a4345d39dbd1c67a4028b55d94d5e322449eeaed495b5005de37abc038a4e879716913d187884bc4d7bee4bf2000fa6afdb7298a83414de1d8c615220446e29bd2f74063fd7c7b76ff06fbfb4e5c4fdbbe6b3701a59a4da60d38185e1887ca0aaf182c3b5c2f7e073aad60d59417cdc7964f9533ce39e8325a29661689d900903d5347afeb92fd492b048dd7d121ae14970f3ef85389393c0f62a41b18aabdbe6eca40ce9b623d7122be1b6b99c184b555eabbd9fb97d09793764c8479e853fd19951fd5da22508a2306603ea75107c080a08335a7aa4b4afed6037f47d0c4f91cae57b97a70cdbf2cddc8fa5e58421af2e3ebacd240f228cbda39e0cdbda97bf748f4060f85421f05adeb9f7f4183f7866e025e4e1a902764bbc6ddb092aaedbad1fe53464eabee7769eaaf9999aa67350666c4bccda54d1dbf4da4944d6398e75f6ceb5c858fea2c9d33388c93a830f2b7baf6f8e99814b60f46d06fb42f97e6b48f3eaf006540fa996adb9bc6376f073199b598e96b500176316021c048a07475015a3dbe8a19e8ef46b6a86277e157e14d654c0427a0484223f4c79a56a909dc23f190e08cfd2f9e1b270a6973aaf089dd4c7aa7c76789411e526e9652fe5fca65f5bdf38f2859f6e15a1987713d385fb90284ea7290d350deb40e60d3bc1a8cf2df7", 0x4})

11.556781484s ago: executing program 7 (id=1720):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x2800, 0x101, 0x28}, 0x18)
clock_gettime(0x0, &(0x7f00000000c0)={<r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000180)={0xf190, 0x28, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
io_setup(0x8, &(0x7f00000006c0)=<r8=>0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r8, 0x1, &(0x7f0000000bc0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}])
io_pgetevents(r8, 0x0, 0x5, 0x0, 0x0, 0x0)
utimensat(r5, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)={{}, {r6, r7/1000+10000}}, 0xa3043a470476eef7)

11.556298142s ago: executing program 3 (id=1721):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0xa, 0x34324152, 0x0, 0x0, [{0x10000}, {}, {0x3}], 0x0, 0xfd}})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$radio(0x0, 0x3, 0x2)
socket$inet(0x2, 0x1, 0xeb10)
syz_io_uring_setup(0x3279, 0x0, 0x0, &(0x7f0000000540))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)
lseek(r2, 0x1003ff, 0x4)

11.536775044s ago: executing program 4 (id=1722):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

10.095657706s ago: executing program 7 (id=1723):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r5, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000300060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x110)

9.555414699s ago: executing program 4 (id=1724):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000050000080000008441d000a50007000000000000dc8c19230ce33474853edcc52f1ff01c17b605fb8f408d58b037e71297c615dffb25c4b1eb7550c4cc6522a0f6f9f4b413b9dd8ec7ec53052066f3a50cffdaffe65a9863415ee61382bb7844fb3fac07d9a21188737a38b0df4cf23c736c5245ae69dbe78d8a94e6c3532ba583e2bf8240ad5e80e1b4581dc9753d66f0cfa4029793001cbf6b4485c9350cdfe3166187551737"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)

8.341772465s ago: executing program 7 (id=1725):
io_uring_setup(0x2a0c, &(0x7f00000002c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(0x0, 0x2192c2, 0x9c)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x40000, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/162)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, 0x0, 0x0)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

8.01029897s ago: executing program 3 (id=1726):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0x0, 0x0, 0x4})

6.952733442s ago: executing program 7 (id=1727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

6.910910163s ago: executing program 3 (id=1728):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000050000080000008441d000a50007000000000000dc8c19230ce33474853edcc52f1ff01c17b605fb8f408d58b037e71297c615dffb25c4b1eb7550c4cc6522a0f6f9f4b413b9dd8ec7ec53052066f3a50cffdaffe65a9863415ee61382bb7844fb3fac07d9a21188737a38b0df4cf23c736c5245ae69dbe78d8a94e6c3532ba583e2bf8240ad5e80e1b4581dc9753d66f0cfa4029793001cbf6b4485c9350cdfe3166187551737"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)

6.737033026s ago: executing program 6 (id=1729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6.390794259s ago: executing program 6 (id=1730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x62, 0x5, 0x460, 0x190, 0x190, 0xffffffff, 0x190, 0xe8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'ipvlan0\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@unspec=@connlimit={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x2, {0x5, @multicast2, @loopback, @gre_key}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'bridge_slave_0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @multicast1=0xe0002600, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x7000, {0x0, @private, @local, @gre_key, @icmp_id}}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0)
r2 = dup(r0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000100000000000000b1bcbd1708e4a46d7636b9d6a4b277ac61aba79ed6d04b2ccf9a53da39e2d0470b0000000000004d2e4de63757b9177aded5000000b856fd88176c934cbee88c5b446e450f4d354482757307eb263cd89e0c39921c263441244d8b6382a6c4e2558a4d9eb0accc09adebda370ab3ececd1331400906cdd08889152b17aba52fe97379a49f5b6fbb8bca95f"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x4, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x2, 0x80805, 0x0)
write$binfmt_script(r8, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r8], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r9], 0x4}}, 0x0)
sendfile(r11, r10, 0x0, 0x100000002)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x40010, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x4)

6.227743799s ago: executing program 4 (id=1731):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000280)={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000240)='\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.10543649s ago: executing program 6 (id=1732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xb0}}, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r3, 0x0, 0x0)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "4fe0512f969b45ba2e570fdcdbf4c1c9c3f1fad68d9e678e8fe7ce05fe8d4733", "2f3887b4d14ecc9de7f1a633c3ee293bcb0b61d033037ca50a7bedc0e2e9866f", "757fc10ec422ac90a680d6187294dcfd6cab1a26e304d2fd3bd4376de7d2e64c", "ed979c0c9abbbc2a7a959486724aa81ab2c1cf3cecd77c90dc5dfac9f02b89c1", "6e767efce0af73a7163ee1094dcc0d9f57077632793ff70863b983fb10813066", "fccc09a4ccbb2e9351eed7c2"}})
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='v7\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)=@multiplanar_mmap={0x5, 0x8, 0x4, 0x100000, 0x6, {0x77359400}, {0x1, 0x0, 0x8, 0x5, 0xc0, 0x8}, 0x5, 0x1, {0x0}, 0xb})

5.839119638s ago: executing program 7 (id=1733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000680)={0x8a, 0x7, r7, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x749bc})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4})

4.118272469s ago: executing program 4 (id=1734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1500030001000080"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioprio_get$uid(0x3, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000006c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09fa008dd4992861030000000000800000000000000000000000000000000000002a652b326f2c8700", "90be8b1c5503e3d718ca00", [0x1, 0x2]}})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000040)={0x0, [[0x0, 0x300, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{}, {}, {}, {}, {0x0, 0x80000}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x3}]})
creat(0x0, 0x0)
timer_create(0x3, &(0x7f0000000680)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))

3.315511819s ago: executing program 7 (id=1735):
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_io_uring_setup(0x24fa, &(0x7f0000000340)={0x0, 0xf3e6, 0x80}, 0x0, &(0x7f0000000140))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0)

1.835288217s ago: executing program 6 (id=1736):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0x1, 0x81, 0x9, 0x7, 0x24, 0x7ff}}], 0x58}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000004e3000006000000030000042c0500000200000004000000050a00000700000604000000fdffffff010000000100000036c7000000000000060000060400000015000000ff07000005000000011fe45100"], &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00'}, 0x45c)
r5 = dup(0xffffffffffffffff)
ioctl$UI_DEV_CREATE(r5, 0x5501)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x36c, 0x2)

1.799204422s ago: executing program 4 (id=1737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x0)

1.759119095s ago: executing program 3 (id=1738):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x4, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000002c0)='GPL\x00', 0x5, 0xcc, &(0x7f0000000440)=""/204, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x9, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r1, 0xffffffffffffffff, r1, r1, r1], 0x0, 0x10, 0x1190, @void, @value}, 0x94)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000303", 0x7}], 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r7, &(0x7f0000000040)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r7, &(0x7f0000001a80)='./file0/../file0/file0\x00')
renameat2(r7, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

285.542743ms ago: executing program 6 (id=1739):
io_uring_setup(0x2a0c, &(0x7f00000002c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(0x0, 0x2192c2, 0x9c)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/162)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

0s ago: executing program 4 (id=1740):
io_uring_setup(0x2a0c, &(0x7f00000002c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
open$dir(0x0, 0x2192c2, 0x9c)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/162)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

kernel console output (not intermixed with test programs):

1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  234.118650][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  234.130341][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.150235][ T7437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  234.160889][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  234.273119][ T5884] usb 1-1: USB disconnect, device number 4
[  234.429088][ T7185] udevd[7185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.633749][ T7494] atomic_op ffff88802a5e7998 conn xmit_atomic 0000000000000000
[  237.537273][ T7511] netlink: 'syz.4.352': attribute type 39 has an invalid length.
[  237.545919][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'.
[  237.949256][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.958015][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.077562][ T7522] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.353'.
[  239.108867][ T7522] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  240.260119][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  240.839052][ T5915] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  240.858077][ T5915] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  240.894009][ T5915] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  240.924128][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.947645][ T7526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  240.964650][ T5915] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  241.863554][ T7567] atomic_op ffff88802ec10198 conn xmit_atomic 0000000000000000
[  244.794843][ T5914] usb 3-1: USB disconnect, device number 6
[  252.129468][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'.
[  256.805661][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.817017][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.841125][ T7686] vivid-004: =================  START STATUS  =================
[  256.850281][ T7686] vivid-004: Radio HW Seek Mode: Bounded
[  256.856399][ T7686] vivid-004: Radio Programmable HW Seek: false
[  256.862773][ T7686] vivid-004: RDS Rx I/O Mode: Block I/O
[  256.868451][ T7686] vivid-004: Generate RBDS Instead of RDS: false
[  256.874932][ T7686] vivid-004: RDS Reception: true
[  256.880089][ T7686] vivid-004: RDS Program Type: 0 inactive
[  256.886023][ T7686] vivid-004: RDS PS Name:  inactive
[  256.891354][ T7686] vivid-004: RDS Radio Text:  inactive
[  256.897104][ T7686] vivid-004: RDS Traffic Announcement: false inactive
[  256.904812][ T7686] vivid-004: RDS Traffic Program: false inactive
[  256.913250][ T7686] vivid-004: RDS Music: false inactive
[  256.919219][ T7686] vivid-004: ==================  END STATUS  ==================
[  258.901432][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'.
[  259.771395][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'.
[  264.419641][ T7773] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.423' sets config #236
[  270.590093][ T5915] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  271.152981][ T7816] support for the xor transformation has been removed.
[  271.336402][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  271.430986][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  271.785210][ T5915] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  271.794315][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.826242][ T5915] usb 6-1: config 0 descriptor??
[  272.047759][ T7824] program syz.4.436 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  273.098270][ T5915] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  273.110941][ T5915] usb 6-1: USB disconnect, device number 7
[  273.119122][ T5915] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected
[  277.587290][ T7860] (syz.4.443,7860,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êƉÇ" or missing value
[  277.600377][ T7860] (syz.4.443,7860,0):ocfs2_fill_super:1178 ERROR: status = -22
[  278.216526][ T5915] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  278.792690][ T7869] support for the xor transformation has been removed.
[  278.805576][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  279.203107][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.214408][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.224411][ T5915] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  279.233697][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.272018][ T5915] usb 6-1: config 0 descriptor??
[  279.919792][ T5915] usbhid 6-1:0.0: can't add hid device: -71
[  279.929131][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  280.140863][ T5915] usb 6-1: USB disconnect, device number 8
[  285.192036][ T7918] support for the xor transformation has been removed.
[  286.091033][ T7926] ubi0: attaching mtd0
[  286.104567][ T7926] ubi0: scanning is finished
[  286.109572][ T7926] ubi0: empty MTD device detected
[  287.230260][ T7926] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  287.596677][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  289.665154][ T5914] usb 6-1: Using ep0 maxpacket: 16
[  290.869661][ T5914] usb 6-1: device descriptor read/all, error -71
[  290.972864][ T7953] ubi0: attaching mtd0
[  290.980473][ T7953] ubi0: scanning is finished
[  291.313422][ T7953] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  291.415193][ T7953] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  291.562532][ T7953] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  291.565307][ T7966] support for the xor transformation has been removed.
[  291.600958][ T7953] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  291.631234][ T7953] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  291.641814][ T7953] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  291.651332][ T7953] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 194988320
[  291.667670][ T7953] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  292.355886][ T7957] ubi0: detaching mtd0
[  293.167524][ T7957] ubi0: mtd0 is detached
[  295.674240][ T7991] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  297.764038][ T8015] support for the xor transformation has been removed.
[  298.233108][ T8018] fuse: Bad value for 'group_id'
[  298.238306][ T8018] fuse: Bad value for 'group_id'
[  300.148053][ T8029] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  300.596793][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[  300.620756][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.637425][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.667529][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.687405][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.540791][ T8052] fuse: Bad value for 'group_id'
[  302.577513][ T8052] fuse: Bad value for 'group_id'
[  303.111475][ T8060] support for the xor transformation has been removed.
[  303.861138][ T8066] syz.0.502: attempt to access beyond end of device
[  303.861138][ T8066] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0
[  303.873982][ T8066] VFS: unable to read V7 FS superblock on device nbd0.
[  303.881897][ T8066] VFS: could not find a valid V7 on nbd0.
[  304.871345][  T970] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  305.025579][  T970] usb 5-1: device descriptor read/64, error -71
[  306.101288][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  306.109083][  T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  306.328386][  T970] usb 5-1: device descriptor read/64, error -71
[  306.361706][    T8] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45
[  306.382553][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.408302][    T8] usb 6-1: Product: syz
[  306.424391][    T8] usb 6-1: Manufacturer: syz
[  306.445699][  T970] usb usb5-port1: attempt power cycle
[  306.459726][    T8] usb 6-1: SerialNumber: syz
[  306.491504][    T8] usb 6-1: config 0 descriptor??
[  306.543565][    T8] usb 6-1: Found UVC 0.00 device syz (8086:0b03)
[  306.559882][    T8] usb 6-1: No valid video chain found.
[  306.689277][ T8104] support for the xor transformation has been removed.
[  306.828540][  T970] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  307.238821][ T5915] usb 6-1: USB disconnect, device number 11
[  307.472830][  T970] usb 5-1: device descriptor read/8, error -71
[  307.590756][ T8108] fuse: Bad value for 'group_id'
[  307.626658][ T8108] fuse: Bad value for 'group_id'
[  307.915235][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  307.947416][ T8115] syz.4.518: attempt to access beyond end of device
[  307.947416][ T8115] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0
[  307.960235][ T8115] VFS: unable to read V7 FS superblock on device nbd4.
[  307.967303][ T8115] VFS: could not find a valid V7 on nbd4.
[  308.088931][    T9] usb 3-1: Using ep0 maxpacket: 32
[  308.128986][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  308.168741][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  308.347123][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  308.395119][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.406969][    T9] usb 3-1: Product: syz
[  308.411199][    T9] usb 3-1: Manufacturer: syz
[  308.416039][    T9] usb 3-1: SerialNumber: syz
[  309.895966][    T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  310.088605][  T970] usb 3-1: USB disconnect, device number 7
[  310.108894][  T970] usblp0: removed
[  311.524253][ T5939] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  311.554996][ T8151] support for the xor transformation has been removed.
[  313.083162][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  313.090994][ T5939] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  313.101972][ T5939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  313.111368][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.457761][ T5882] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  313.812960][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'.
[  313.823452][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.833713][ T5882] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  313.843256][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.879415][ T5882] ums-cypress 6-1:1.0: USB Mass Storage device detected
[  313.975249][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.989780][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.998939][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.266726][ T5882] usb 6-1: USB disconnect, device number 12
[  315.234608][ T5915] usb 1-1: USB disconnect, device number 5
[  315.658305][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  316.025553][ T5939] usb 3-1: Using ep0 maxpacket: 32
[  316.035204][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  316.045009][ T5939] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  316.722554][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  316.731912][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.776299][ T5939] usb 3-1: Product: syz
[  317.029489][ T5939] usb 3-1: Manufacturer: syz
[  317.034324][ T5939] usb 3-1: SerialNumber: syz
[  317.995263][ T8199] support for the xor transformation has been removed.
[  318.130796][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  318.377703][ T5939] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  318.686562][    T9] usb 3-1: USB disconnect, device number 8
[  318.735977][    T9] usblp0: removed
[  320.106565][ T8214] atomic_op ffff88806189a198 conn xmit_atomic 0000000000000000
[  322.068040][ T8247] support for the xor transformation has been removed.
[  324.577369][ T8288] unsupported nlmsg_type 40
[  324.621387][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'.
[  325.489553][ T8284] atomic_op ffff88807c174998 conn xmit_atomic 0000000000000000
[  326.384090][ T8299] support for the xor transformation has been removed.
[  327.008792][ T8305] netlink: 76 bytes leftover after parsing attributes in process `syz.2.570'.
[  328.797821][ T8313] orangefs_mount: mount request failed with -4
[  332.078113][ T8350] support for the xor transformation has been removed.
[  336.166156][ T8375] orangefs_mount: mount request failed with -4
[  337.201688][ T8397] syz.5.590: attempt to access beyond end of device
[  337.201688][ T8397] nbd5: rw=0, sector=1, nr_sectors = 1 limit=0
[  337.264826][ T8399] netlink: 76 bytes leftover after parsing attributes in process `syz.4.594'.
[  337.500437][ T8393] atomic_op ffff88802875f198 conn xmit_atomic 0000000000000000
[  338.000351][ T8397] VFS: unable to read V7 FS superblock on device nbd5.
[  338.008173][ T8397] VFS: could not find a valid V7 on nbd5.
[  346.089078][ T8470] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  349.837939][ T8525] netlink: 'syz.2.622': attribute type 15 has an invalid length.
[  352.719715][ T8558] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  354.205197][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  356.164459][    T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45
[  356.164499][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.164522][    T9] usb 6-1: Product: syz
[  356.164540][    T9] usb 6-1: Manufacturer: syz
[  356.164558][    T9] usb 6-1: SerialNumber: syz
[  356.394825][    T9] usb 6-1: config 0 descriptor??
[  356.505817][    T9] usb 6-1: can't set config #0, error -71
[  356.520293][    T9] usb 6-1: USB disconnect, device number 13
[  366.655053][ T8648] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  367.205633][ T8650] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  369.102212][ T8659] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  371.554392][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  373.265943][    T9] usb 5-1: Using ep0 maxpacket: 32
[  373.301578][    T9] usb 5-1: device descriptor read/all, error -71
[  377.047700][ T8719] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  379.001706][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  382.528961][ T8770] fuse: Unknown parameter 'group_i00000000000000000000'
[  383.659832][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.010098][ T8791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.510049][ T8791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.531978][ T8791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.826723][ T8791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.867575][ T8791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  384.876468][ T8791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.889492][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.902133][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.916346][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.928565][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.936483][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  384.943887][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  385.114888][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.332990][ T8801] netlink: 76 bytes leftover after parsing attributes in process `syz.3.691'.
[  386.780605][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.172155][ T8791] Bluetooth: hci0: command tx timeout
[  387.429803][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.749262][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'.
[  389.252092][ T8820] orangefs_mount: mount request failed with -4
[  389.275374][ T8791] Bluetooth: hci0: command tx timeout
[  389.794005][ T8833] atomic_op ffff88802d226198 conn xmit_atomic 0000000000000000
[  390.548611][ T8786] chnl_net:caif_netlink_parms(): no params data found
[  390.937149][ T8847] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  391.496075][ T8791] Bluetooth: hci0: command tx timeout
[  393.315274][ T8857] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  393.456884][   T11] bridge_slave_1: left allmulticast mode
[  393.465802][   T11] bridge_slave_1: left promiscuous mode
[  393.480149][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.686077][ T8791] Bluetooth: hci0: command tx timeout
[  393.863232][   T11] bridge_slave_0: left allmulticast mode
[  393.872912][   T11] bridge_slave_0: left promiscuous mode
[  393.898072][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.216363][ T8864] netlink: 76 bytes leftover after parsing attributes in process `syz.5.703'.
[  395.094377][ T8865] process 'syz.4.704' launched './file0' with NULL argv: empty string added
[  397.851866][ T8895] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  398.837559][   T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  399.159387][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.356028][   T46] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  399.367696][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.883322][ T8914] orangefs_mount: mount request failed with -4
[  399.933453][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.968176][   T11] bond0 (unregistering): Released all slaves
[  400.030603][   T46] ums-cypress 5-1:1.0: USB Mass Storage device detected
[  400.057753][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'.
[  400.293896][   T46] usb 5-1: USB disconnect, device number 13
[  400.317547][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.324862][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.332405][ T5939] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  400.344210][ T8786] bridge_slave_0: entered allmulticast mode
[  400.363189][ T8786] bridge_slave_0: entered promiscuous mode
[  400.380088][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.420479][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.470878][ T8786] bridge_slave_1: entered allmulticast mode
[  400.491225][ T8786] bridge_slave_1: entered promiscuous mode
[  400.497518][ T5939] usb 4-1: Using ep0 maxpacket: 16
[  400.517982][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.538827][ T5939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  400.598986][ T5939] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  400.652914][ T8928] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  400.731818][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.867865][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.973513][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.997177][ T5939] usb 4-1: config 0 descriptor??
[  401.271566][ T8786] team0: Port device team_slave_0 added
[  401.380151][   T11] hsr_slave_0: left promiscuous mode
[  401.441125][   T11] hsr_slave_1: left promiscuous mode
[  401.448813][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.474599][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.502563][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.528538][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.600653][   T11] veth1_macvtap: left promiscuous mode
[  401.620764][   T11] veth0_macvtap: left promiscuous mode
[  401.638368][   T11] veth1_vlan: left promiscuous mode
[  401.655272][   T11] veth0_vlan: left promiscuous mode
[  401.705426][   T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  401.865117][   T46] usb 1-1: Using ep0 maxpacket: 8
[  401.884412][   T46] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  401.901819][   T46] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  401.943141][   T46] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  401.980357][   T46] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  402.000866][   T46] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  402.015874][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.041957][   T46] usbtmc 1-1:16.0: bulk endpoints not found
[  402.536891][   T11] team0 (unregistering): Port device team_slave_1 removed
[  402.744198][   T11] team0 (unregistering): Port device team_slave_0 removed
[  403.600165][ T5882] usb 4-1: USB disconnect, device number 3
[  404.261470][   T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  404.339903][ T5914] libceph: connect (1)[c::]:6789 error -101
[  404.379613][ T5914] libceph: mon0 (1)[c::]:6789 connect error
[  404.455351][   T46] usb 5-1: Using ep0 maxpacket: 32
[  404.538338][   T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  404.744184][ T8965] ceph: No mds server is up or the cluster is laggy
[  404.844763][    T9] usb 1-1: USB disconnect, device number 6
[  404.914126][   T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  404.932826][   T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  404.942300][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.950404][   T46] usb 5-1: Product: syz
[  404.954899][   T46] usb 5-1: Manufacturer: syz
[  404.959857][   T46] usb 5-1: SerialNumber: syz
[  405.250923][   T46] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  405.367557][  T970] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  405.505475][  T970] usb 4-1: device descriptor read/64, error -71
[  405.662262][ T8786] team0: Port device team_slave_1 added
[  405.780827][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.717'.
[  405.836861][  T970] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  405.895530][ T8953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.932646][ T8953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.959804][ T8953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.978580][ T8953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.994929][    T9] usb 5-1: USB disconnect, device number 14
[  406.003910][    T9] usblp0: removed
[  406.057885][  T970] usb 4-1: device descriptor read/64, error -71
[  406.170878][  T970] usb usb4-port1: attempt power cycle
[  406.288327][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.297317][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.328190][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.341442][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.353834][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.400743][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.426025][  T970] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  407.470464][  T970] usb 4-1: device descriptor read/8, error -71
[  407.521590][ T8786] hsr_slave_0: entered promiscuous mode
[  407.538308][ T8786] hsr_slave_1: entered promiscuous mode
[  409.171793][ T9003] Bluetooth: MGMT ver 1.23
[  409.672067][  T970] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  410.098105][  T970] usb 4-1: device not accepting address 7, error -71
[  410.109625][  T970] usb usb4-port1: unable to enumerate USB device
[  410.877503][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  411.125283][ T5914] usb 1-1: Using ep0 maxpacket: 16
[  411.177463][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.187705][ T5914] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  411.196867][ T5914] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  411.205195][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  411.205994][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.232528][ T5914] usb 1-1: config 0 descriptor??
[  411.366545][    T8] usb 4-1: Using ep0 maxpacket: 8
[  411.383610][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  411.395607][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  411.425469][    T8] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  411.445274][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  411.468902][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  411.489491][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.523227][    T8] usbtmc 4-1:16.0: bulk endpoints not found
[  411.638374][ T8786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  411.660895][ T8786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  411.689012][ T8786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  411.709096][ T8786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  411.890877][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.945623][ T8786] 8021q: adding VLAN 0 to HW filter on device team0
[  411.978156][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.985375][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.011780][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.019035][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.165095][    T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  412.331124][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  412.363774][    T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  412.385604][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  413.087105][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.152548][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.185411][ T9041] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  413.198612][    T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  413.208342][    T9] usb 1-1: USB disconnect, device number 7
[  413.350726][ T8786] veth0_vlan: entered promiscuous mode
[  414.229610][ T8786] veth1_vlan: entered promiscuous mode
[  414.411994][    T9] usb 4-1: USB disconnect, device number 8
[  414.435437][ T9075] atomic_op ffff888011ce1998 conn xmit_atomic 0000000000000000
[  415.452048][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[  415.843497][ T8786] veth0_macvtap: entered promiscuous mode
[  415.926844][ T8786] veth1_macvtap: entered promiscuous mode
[  416.052341][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.191203][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.203266][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.330335][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.331272][ T5939] usb 6-1: USB disconnect, device number 14
[  417.595228][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.801222][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.819028][ T8786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.837474][ T8786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.855062][ T8786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.874165][ T8786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.290077][ T9118] orangefs_mount: mount request failed with -4
[  419.545639][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  420.274065][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'.
[  422.222066][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.335041][ T5142] Bluetooth: hci0: command 0x0405 tx timeout
[  422.572290][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.583901][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.594104][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.986580][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  423.875066][    T9] usb 4-1: Using ep0 maxpacket: 8
[  423.882117][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  423.892878][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  423.962242][    T9] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  424.096567][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.109849][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  424.122170][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.418535][  T970] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  424.443851][    T9] usbtmc 4-1:16.0: bulk endpoints not found
[  425.805923][ T9180] orangefs_mount: mount request failed with -4
[  426.169607][  T970] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  426.180823][  T970] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  426.190837][  T970] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  426.199986][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.353590][ T9193] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  426.765416][ T9176] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  426.891765][ T5939] usb 4-1: USB disconnect, device number 9
[  427.020817][  T970] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  427.059420][  T970] usb 6-1: USB disconnect, device number 15
[  428.676238][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'.
[  428.703396][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.735449][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.827478][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.864090][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.775356][ T9231] netlink: 'syz.3.764': attribute type 15 has an invalid length.
[  430.149452][ T5142] Bluetooth: min 3 > max 0
[  432.215477][ T5142] Bluetooth: hci0: command 0x0405 tx timeout
[  433.699814][ T5939] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  434.688688][ T5142] Bluetooth: min 3 > max 0
[  434.766634][ T5939] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  434.778381][ T5939] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  434.788459][ T5939] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  434.798908][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.949254][ T9262] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  435.364246][ T5939] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  436.115218][ T5939] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  436.465262][ T5939] usb 5-1: Using ep0 maxpacket: 16
[  436.483511][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.503839][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  436.531319][ T5939] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  436.542415][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.556693][ T5939] usb 5-1: config 0 descriptor??
[  436.577025][ T5939] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  436.695284][ T5142] Bluetooth: hci0: command 0x0405 tx timeout
[  437.493527][  T970] usb 4-1: USB disconnect, device number 10
[  440.360190][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  442.574022][ T5914] usb 5-1: USB disconnect, device number 15
[  443.824482][ T9361] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  445.170618][ T5939] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  446.058435][ T5939] usb 4-1: Using ep0 maxpacket: 8
[  447.363675][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -71
[  447.592168][ T5939] usb 4-1: can't read configurations, error -71
[  449.065389][ T9404] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  451.765095][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  452.155158][    T8] usb 1-1: Using ep0 maxpacket: 32
[  452.162220][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  452.173418][    T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  452.365964][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  452.403324][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.431561][    T8] usb 1-1: Product: syz
[  452.666887][    T8] usb 1-1: Manufacturer: syz
[  452.671635][    T8] usb 1-1: SerialNumber: syz
[  454.925269][    T8] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  454.937186][  T970] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  454.970870][    T8] usb 1-1: USB disconnect, device number 8
[  455.226973][    T8] usblp0: removed
[  455.545192][  T970] usb 6-1: Using ep0 maxpacket: 16
[  455.553362][  T970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.566112][  T970] usb 6-1: config 0 has no interfaces?
[  455.849401][  T970] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  455.918326][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.030930][  T970] usb 6-1: Product: syz
[  456.565185][  T970] usb 6-1: Manufacturer: syz
[  456.569921][  T970] usb 6-1: SerialNumber: syz
[  458.251583][  T970] usb 6-1: config 0 descriptor??
[  459.005052][  T970] usb 6-1: can't set config #0, error -71
[  459.233147][  T970] usb 6-1: USB disconnect, device number 16
[  459.286032][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  465.719934][ T5882] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  466.285615][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  467.320876][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.281217][ T5882] usb 3-1: config 0 has no interfaces?
[  470.367378][ T5882] usb 3-1: string descriptor 0 read error: -71
[  470.377783][ T5882] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  470.387083][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.251108][ T8791] Bluetooth: hci0: command 0x0405 tx timeout
[  471.327412][ T5882] usb 3-1: config 0 descriptor??
[  471.383172][ T5882] usb 3-1: can't set config #0, error -71
[  471.390328][ T5882] usb 3-1: USB disconnect, device number 9
[  473.506255][ T9546] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  475.974508][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'.
[  476.005262][ T5939] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  476.832796][ T9574] netlink: 'syz.3.848': attribute type 15 has an invalid length.
[  477.229484][ T5939] usb 5-1: Using ep0 maxpacket: 16
[  477.245924][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.257545][ T5939] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  477.299114][ T5939] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  477.421133][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.429254][ T5939] usb 5-1: Product: syz
[  477.433446][ T5939] usb 5-1: Manufacturer: syz
[  477.438161][ T5939] usb 5-1: SerialNumber: syz
[  478.403683][ T5939] usb 5-1: config 0 descriptor??
[  479.158825][ T5939] usb 5-1: can't set config #0, error -71
[  479.166117][ T5939] usb 5-1: USB disconnect, device number 16
[  482.597572][ T9600] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  484.835553][ T9616] netlink: 'syz.5.858': attribute type 15 has an invalid length.
[  484.852977][ T8791] Bluetooth: hci0: command 0x0405 tx timeout
[  485.834681][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[  488.397089][   T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  489.465019][   T46] usb 3-1: Using ep0 maxpacket: 16
[  490.526911][   T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.546954][   T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  491.094060][   T46] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  491.103825][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.115719][   T46] usb 3-1: Product: syz
[  491.120266][   T46] usb 3-1: Manufacturer: syz
[  491.180889][   T46] usb 3-1: SerialNumber: syz
[  491.416470][   T46] usb 3-1: config 0 descriptor??
[  491.422395][   T46] usb 3-1: can't set config #0, error -71
[  491.430095][   T46] usb 3-1: USB disconnect, device number 10
[  495.026134][ T9695] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  495.032110][ T9695] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  497.933303][ T5142] Bluetooth: hci0: command 0x0405 tx timeout
[  498.906216][ T9715] fuse: Bad value for 'rootmode'
[  499.726483][   T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  500.558684][   T46] usb 5-1: Using ep0 maxpacket: 16
[  500.575714][   T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.595050][   T46] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  500.617328][   T46] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  500.632023][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.595129][   T46] usb 5-1: Product: syz
[  501.599408][   T46] usb 5-1: Manufacturer: syz
[  501.604076][   T46] usb 5-1: SerialNumber: syz
[  501.613233][   T46] usb 5-1: config 0 descriptor??
[  501.786085][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  502.615872][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  502.845748][    T8] usb 5-1: USB disconnect, device number 17
[  503.265106][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  503.370723][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  503.687240][ T5886] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  503.907663][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.887946][ T5886] usb 3-1: config 0 descriptor??
[  504.902030][ T5886] usb 3-1: can't set config #0, error -71
[  504.909685][ T5886] usb 3-1: USB disconnect, device number 11
[  509.645128][ T5939] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  510.694608][ T5939] usb 1-1: device descriptor read/64, error -71
[  511.825139][ T5939] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  513.195710][ T5939] usb 1-1: device descriptor read/64, error -71
[  513.309105][ T5939] usb usb1-port1: attempt power cycle
[  513.600318][ T9801] orangefs_mount: mount request failed with -4
[  513.790027][ T9807] atomic_op ffff888030a83998 conn xmit_atomic 0000000000000000
[  514.853430][ T9816] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  516.251179][ T5939] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  516.956998][ T5939] usb 1-1: device descriptor read/8, error -71
[  517.986144][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'.
[  518.344774][ T9827] orangefs_mount: mount request failed with -4
[  522.282494][ T9865] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  522.876392][   T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.759480][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  526.260683][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  526.285072][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  526.367098][ T9896] orangefs_mount: mount request failed with -4
[  526.636453][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  526.644166][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  526.659852][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  526.806712][ T8791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  526.829080][ T9902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  526.838171][ T9902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  526.856373][ T9902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  526.869288][ T9902] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  526.884758][ T9902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  527.329550][   T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.522304][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'.
[  527.580309][   T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.597767][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'.
[  527.661946][   T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.683948][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'.
[  527.695129][ T5886] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  528.052527][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  528.069110][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  528.079077][ T5886] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  528.085100][ T9886] chnl_net:caif_netlink_parms(): no params data found
[  528.091651][ T5886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  528.105163][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.113288][ T5886] usb 1-1: Product: syz
[  528.117784][ T5886] usb 1-1: Manufacturer: syz
[  528.122500][ T5886] usb 1-1: SerialNumber: syz
[  529.043103][ T9902] Bluetooth: hci2: command tx timeout
[  529.069829][ T5886] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  529.092819][   T64] bridge_slave_1: left allmulticast mode
[  529.104027][   T64] bridge_slave_1: left promiscuous mode
[  529.110437][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.120192][   T64] bridge_slave_0: left allmulticast mode
[  529.126169][   T64] bridge_slave_0: left promiscuous mode
[  529.226684][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.940731][ T5884] usb 1-1: USB disconnect, device number 14
[  530.043390][ T5884] usblp0: removed
[  531.098417][ T9902] Bluetooth: hci2: command tx timeout
[  531.145117][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.160066][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.172794][   T64] bond0 (unregistering): Released all slaves
[  531.302197][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.463834][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.486499][ T9886] bridge_slave_0: entered allmulticast mode
[  532.244134][ T9886] bridge_slave_0: entered promiscuous mode
[  532.345083][ T9952] orangefs_mount: mount request failed with -4
[  532.866315][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.873768][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.059432][ T9886] bridge_slave_1: entered allmulticast mode
[  533.071635][ T9886] bridge_slave_1: entered promiscuous mode
[  533.175156][ T8791] Bluetooth: hci2: command tx timeout
[  533.277226][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'.
[  534.213297][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.944'.
[  534.352572][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'.
[  534.429855][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.469121][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  534.617500][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.803335][   T64] hsr_slave_0: left promiscuous mode
[  534.846144][   T64] hsr_slave_1: left promiscuous mode
[  534.899749][   T64] veth1_macvtap: left promiscuous mode
[  534.920331][   T64] veth0_macvtap: left promiscuous mode
[  534.932631][   T64] veth1_vlan: left promiscuous mode
[  534.943251][   T64] veth0_vlan: left promiscuous mode
[  534.975066][ T5886] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  535.135593][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  535.149998][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.178735][ T5886] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  535.200178][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.224875][ T5886] usb 1-1: config 0 descriptor??
[  535.255176][ T9902] Bluetooth: hci2: command tx timeout
[  535.273984][ T5886] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  536.883364][T10003] orangefs_mount: mount request failed with -4
[  537.335721][ T9902] Bluetooth: hci2: command 0x0405 tx timeout
[  537.556418][   T64] team0 (unregistering): Port device team_slave_1 removed
[  538.097377][ T9941] usb 1-1: USB disconnect, device number 15
[  538.245248][   T64] team0 (unregistering): Port device team_slave_0 removed
[  539.909576][ T9886] team0: Port device team_slave_0 added
[  541.203850][ T9886] team0: Port device team_slave_1 added
[  541.564447][T10033] orangefs_mount: mount request failed with -4
[  541.972573][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.017238][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.114395][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.128892][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.136320][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.163329][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.498895][T10041] orangefs_mount: mount request failed with -4
[  542.935270][T10048] orangefs_mount: mount request failed with -4
[  543.411686][ T9886] hsr_slave_0: entered promiscuous mode
[  543.428894][ T9886] hsr_slave_1: entered promiscuous mode
[  543.699129][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  543.780058][ T9886] Cannot create hsr debugfs directory
[  543.888468][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  544.138564][T10061] orangefs_mount: mount request failed with -4
[  547.849219][ T9886] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  547.870861][ T9886] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  547.889368][ T9886] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  548.995564][ T9886] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  550.268154][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.285954][ T9886] 8021q: adding VLAN 0 to HW filter on device team0
[  550.319154][ T9886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  550.329636][ T9886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  550.369732][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.376928][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.386095][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.393231][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.091825][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.586186][ T9886] veth0_vlan: entered promiscuous mode
[  554.628549][ T9886] veth1_vlan: entered promiscuous mode
[  554.703598][ T9886] veth0_macvtap: entered promiscuous mode
[  554.714419][ T9886] veth1_macvtap: entered promiscuous mode
[  554.730286][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.741094][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.752485][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.764258][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.775209][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.787880][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.798492][ T9886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.807724][ T9886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.816632][ T9886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.825496][ T9886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.395351][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.414683][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.920668][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.962211][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.145585][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[  558.217658][T10220] bond1: entered promiscuous mode
[  558.237827][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'.
[  558.335465][T10240] atomic_op ffff8880270c7998 conn xmit_atomic 0000000000000000
[  558.541492][T10237] bond1 (unregistering): Released all slaves
[  559.095074][ T9902] Bluetooth: hci2: command 0x0405 tx timeout
[  561.876182][T10253] orangefs_mount: mount request failed with -4
[  563.315274][T10278] orangefs_mount: mount request failed with -4
[  563.546067][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  565.413007][T10300] atomic_op ffff888020b90198 conn xmit_atomic 0000000000000000
[  567.359791][T10323] ceph: No mds server is up or the cluster is laggy
[  568.046496][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'.
[  569.135732][T10344] orangefs_mount: mount request failed with -4
[  570.275261][T10351] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  570.313020][T10351] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  571.476236][T10361] atomic_op ffff888079b45198 conn xmit_atomic 0000000000000000
[  572.071106][T10368] fuse: Unknown parameter 'user_id00000000000000000000'
[  572.394399][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'.
[  572.421071][T10370] bond1: entered promiscuous mode
[  572.432560][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'.
[  572.460014][T10370] bond1 (unregistering): Released all slaves
[  575.191753][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'.
[  575.827699][T10397] bond1: entered promiscuous mode
[  575.851227][T10405] veth3: entered promiscuous mode
[  575.858560][T10405] bond1: (slave veth3): Enslaving as an active interface with an up link
[  575.947595][T10383] orangefs_mount: mount request failed with -4
[  577.337857][ T5886] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  578.439294][ T5886] usb 5-1: Using ep0 maxpacket: 16
[  579.249433][ T5886] usb 5-1: device descriptor read/all, error -71
[  582.806382][T10465] atomic_op ffff888061ade198 conn xmit_atomic 0000000000000000
[  585.349634][T10475] fuse: Unknown parameter 'user_id00000000000000000000'
[  586.265068][   T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  586.425298][   T46] usb 3-1: Using ep0 maxpacket: 16
[  586.441705][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.466840][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.489998][   T46] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  586.512189][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.537497][   T46] usb 3-1: config 0 descriptor??
[  587.122553][   T46] usbhid 3-1:0.0: can't add hid device: -71
[  587.128776][   T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  587.148297][   T46] usb 3-1: USB disconnect, device number 12
[  592.212544][T10530] fuse: Bad value for 'fd'
[  596.590505][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'.
[  597.335083][   T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  597.532813][T10557] Unsupported ieee802154 address type: 0
[  597.774747][   T46] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  597.783171][   T46] usb 1-1: config 0 has no interface number 0
[  597.789437][   T46] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  597.820341][   T46] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  597.958902][   T46] usb 1-1: config 0 interface 255 has no altsetting 0
[  597.997445][   T46] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  598.019775][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.045177][   T46] usb 1-1: config 0 descriptor??
[  598.605342][   T46] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  600.132515][ T5939] usb 1-1: USB disconnect, device number 16
[  602.674022][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'.
[  605.257168][T10641] fuse: Bad value for 'fd'
[  606.601367][T10647] orangefs_mount: mount request failed with -4
[  606.766967][ T5882] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  607.154994][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  607.163820][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  607.174351][ T5882] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  607.194635][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  607.215334][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.256360][ T5882] usb 4-1: Product: syz
[  607.260688][ T5882] usb 4-1: Manufacturer: syz
[  608.785908][ T5882] usb 4-1: SerialNumber: syz
[  609.688688][ T5882] usb 4-1: can't set config #1, error -71
[  609.878618][ T5882] usb 4-1: USB disconnect, device number 13
[  610.233688][T10676] No buffer was provided with the request
[  611.155957][T10683] fuse: Unknown parameter '0x0000000000000004'
[  614.670468][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  614.678261][ T5914] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  614.846027][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  614.881246][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  614.897851][ T5886] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  614.914973][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  614.983878][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  614.993722][ T5914] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  615.016151][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  615.045437][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.079757][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  615.096221][ T5886] usb 4-1: Product: syz
[  615.100543][ T5886] usb 4-1: Manufacturer: syz
[  615.111565][ T5886] usb 4-1: SerialNumber: syz
[  615.123051][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.256764][ T5914] usb 3-1: Product: syz
[  615.260989][ T5914] usb 3-1: Manufacturer: syz
[  615.266026][ T5914] usb 3-1: SerialNumber: syz
[  615.549820][ T5886] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  615.571617][ T5914] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  615.639903][ T5914] usb 3-1: USB disconnect, device number 13
[  615.663593][ T5914] usblp1: removed
[  615.788980][ T5884] usb 4-1: USB disconnect, device number 14
[  615.797674][ T5884] usblp0: removed
[  619.857968][T10739] process '/newroot/188/file0' started with executable stack
[  623.010596][T10782] ceph: No mds server is up or the cluster is laggy
[  623.171171][T10788] No buffer was provided with the request
[  623.485027][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  624.366658][ T5886] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  624.377204][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.413831][ T5886] ums-cypress 3-1:1.0: USB Mass Storage device detected
[  624.693441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  625.218504][ T5886] usb 3-1: USB disconnect, device number 14
[  625.831749][T10812] atomic_op ffff88807f92b998 conn xmit_atomic 0000000000000000
[  627.048524][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1138'.
[  627.305376][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'.
[  627.338939][ T5914] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  627.470862][T10829] syz.2.1139: attempt to access beyond end of device
[  627.470862][T10829] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0
[  627.520404][T10829] VFS: unable to read V7 FS superblock on device nbd2.
[  627.531854][ T5914] usb 4-1: config 0 has no interfaces?
[  627.537715][ T5914] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  627.574996][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.594645][T10829] VFS: could not find a valid V7 on nbd2.
[  627.618026][ T5914] usb 4-1: config 0 descriptor??
[  627.846775][ T5884] usb 4-1: USB disconnect, device number 15
[  630.542673][T10855] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  632.376621][T10873] No buffer was provided with the request
[  634.620928][T10885] orangefs_mount: mount request failed with -4
[  634.958096][T10887] support for the xor transformation has been removed.
[  636.550687][T10909] ceph: No mds server is up or the cluster is laggy
[  638.731680][T10931] support for the xor transformation has been removed.
[  640.042409][T10939] orangefs_mount: mount request failed with -4
[  644.371136][T10972] support for the xor transformation has been removed.
[  645.440369][T10995] orangefs_mount: mount request failed with -4
[  645.604319][T10998] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  647.221658][ T5884] libceph: connect (1)[c::]:6789 error -101
[  647.230261][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  647.704080][ T5884] libceph: connect (1)[c::]:6789 error -101
[  648.162480][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  648.252978][T11013] ceph: No mds server is up or the cluster is laggy
[  648.691232][    T9] libceph: connect (1)[c::]:6789 error -101
[  648.697964][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  652.795157][ T5939] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  654.113366][ T5939] usb 5-1: config 0 has no interfaces?
[  654.119270][ T5939] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  654.222176][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.235749][T11079] futex_wake_op: syz.3.1202 tries to shift op by -1; fix this program
[  654.258341][ T5939] usb 5-1: config 0 descriptor??
[  655.554067][T11071] vlan2: entered promiscuous mode
[  655.565386][T11071] bond0: entered promiscuous mode
[  655.570581][T11071] bond_slave_0: entered promiscuous mode
[  655.599394][T11071] bond_slave_1: entered promiscuous mode
[  655.627862][T11071] bond0: left promiscuous mode
[  655.691823][T11071] bond_slave_0: left promiscuous mode
[  655.712814][T11071] bond_slave_1: left promiscuous mode
[  655.815195][ T5939] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  656.079939][ T5939] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  656.222945][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.366745][ T5939] usb 1-1: Product: syz
[  656.577190][ T5939] usb 1-1: Manufacturer: syz
[  656.582419][ T5939] usb 1-1: SerialNumber: syz
[  656.589903][ T5939] usb 1-1: config 0 descriptor??
[  656.600387][ T5884] usb 5-1: USB disconnect, device number 20
[  656.603967][ T5939] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  657.115607][ T5939] gspca_sunplus: reg_r err -110
[  659.232769][ T9941] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  659.296915][ T5939] usb 1-1: USB disconnect, device number 17
[  659.405022][ T5884] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  659.434411][ T9941] usb 4-1: Using ep0 maxpacket: 8
[  659.459067][ T9941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  659.470537][ T9941] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  659.525010][ T9941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.585113][ T5884] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  660.356879][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.365077][ T5884] usb 5-1: Product: syz
[  660.376781][ T5884] usb 5-1: Manufacturer: syz
[  660.381436][ T5884] usb 5-1: SerialNumber: syz
[  660.389165][ T9941] usb 4-1: config 0 descriptor??
[  660.396183][ T9941] usb 4-1: can't set config #0, error -71
[  660.405026][ T9941] usb 4-1: USB disconnect, device number 16
[  660.412102][ T5884] usb 5-1: config 0 descriptor??
[  660.487159][ T5884] usb 5-1: can't set config #0, error -71
[  660.496932][ T5884] usb 5-1: USB disconnect, device number 21
[  660.652786][T11140] futex_wake_op: syz.5.1222 tries to shift op by -1; fix this program
[  661.785157][ T9941] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  661.987079][ T9941] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  662.477958][T11160] futex_wake_op: syz.5.1227 tries to shift op by -1; fix this program
[  662.527134][ T9941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.541435][ T9941] ums-cypress 4-1:1.0: USB Mass Storage device detected
[  662.813426][ T5939] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  662.929195][ T9941] usb 4-1: USB disconnect, device number 17
[  663.096144][ T5939] usb 3-1: Using ep0 maxpacket: 32
[  663.520570][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  663.530412][ T5939] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  663.838001][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  663.849787][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.865128][ T5939] usb 3-1: Product: syz
[  663.872721][ T5939] usb 3-1: Manufacturer: syz
[  664.216386][ T5939] usb 3-1: SerialNumber: syz
[  664.783619][ T5939] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  665.029452][ T5939] usb 3-1: USB disconnect, device number 15
[  665.039427][ T5939] usblp0: removed
[  665.085349][   T46] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  665.245233][   T46] usb 5-1: Using ep0 maxpacket: 8
[  665.270420][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  665.453084][   T46] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  665.676189][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.956083][   T46] usb 5-1: config 0 descriptor??
[  667.432375][   T46] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  667.975586][   T46] usb 5-1: USB disconnect, device number 22
[  668.023414][   T46] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  668.024258][ T9941] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  668.366933][ T9941] usb 3-1: config 0 has no interfaces?
[  668.372800][ T9941] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  668.416722][ T9941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.482048][ T9941] usb 3-1: config 0 descriptor??
[  669.615122][   T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  669.666030][T11210] vlan2: entered promiscuous mode
[  669.671102][T11210] bond0: entered promiscuous mode
[  669.678165][T11210] bond_slave_0: entered promiscuous mode
[  669.683954][T11210] bond_slave_1: entered promiscuous mode
[  669.695768][T11210] bond0: left promiscuous mode
[  669.700589][T11210] bond_slave_0: left promiscuous mode
[  669.877542][T11210] bond_slave_1: left promiscuous mode
[  672.884593][ T5939] usb 3-1: USB disconnect, device number 16
[  672.903586][   T46] usb 4-1: unable to read config index 0 descriptor/start: -71
[  672.911463][   T46] usb 4-1: can't read configurations, error -71
[  679.495168][ T5882] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  680.396514][ T5882] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  680.405675][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.417760][ T5882] ums-cypress 5-1:1.0: USB Mass Storage device detected
[  680.682389][ T5882] usb 5-1: USB disconnect, device number 23
[  681.319030][T11319] futex_wake_op: syz.3.1267 tries to shift op by -1; fix this program
[  685.585122][T11343] ceph: No mds server is up or the cluster is laggy
[  685.986971][ T9941] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  686.000331][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  686.001416][ T9902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  686.034998][ T9902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  686.043991][ T9902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  686.117541][ T9902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  686.127043][ T9902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  686.134585][ T9902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  686.164322][ T8791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  686.173146][ T8791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  686.182159][ T8791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  686.337697][ T8791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  686.350323][ T8791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  686.360740][ T8791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  687.438691][T11354] chnl_net:caif_netlink_parms(): no params data found
[  688.615051][ T5882] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  689.147491][ T5882] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  689.175293][ T9902] Bluetooth: hci5: command tx timeout
[  690.082654][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.582417][T11354] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.633869][ T5882] usb 6-1: can't set config #1, error -71
[  690.648274][ T5882] usb 6-1: USB disconnect, device number 17
[  690.659452][T11354] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.683311][T11354] bridge_slave_0: entered allmulticast mode
[  690.691073][T11354] bridge_slave_0: entered promiscuous mode
[  690.720114][T11354] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.727401][T11354] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.734685][T11354] bridge_slave_1: entered allmulticast mode
[  690.741584][T11354] bridge_slave_1: entered promiscuous mode
[  690.828602][T11354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.870081][T11354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.999044][T11354] team0: Port device team_slave_0 added
[  691.012123][T11354] team0: Port device team_slave_1 added
[  691.425716][ T9902] Bluetooth: hci5: command tx timeout
[  691.856666][T11354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  691.925056][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.019059][T11354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.048608][T11354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.684613][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.715714][T11354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  692.874023][T11354] hsr_slave_0: entered promiscuous mode
[  692.880811][T11354] hsr_slave_1: entered promiscuous mode
[  693.764550][ T9902] Bluetooth: hci5: command tx timeout
[  694.396077][T11354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  694.403667][T11354] Cannot create hsr debugfs directory
[  695.724437][T11354] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  695.772633][T11354] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  695.783349][T11354] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  696.528852][T11354] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  696.597160][T11354] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.611732][T11354] 8021q: adding VLAN 0 to HW filter on device team0
[  696.635082][ T9902] Bluetooth: hci5: command tx timeout
[  696.650722][T11354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.661262][T11354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.688666][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.696130][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.706254][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.713378][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.099854][T11354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  697.873716][T11461] netlink: 'syz.4.1300': attribute type 29 has an invalid length.
[  697.881772][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  698.871588][T11354] veth0_vlan: entered promiscuous mode
[  698.909617][T11354] veth1_vlan: entered promiscuous mode
[  699.798772][T11354] veth0_macvtap: entered promiscuous mode
[  700.073569][T11354] veth1_macvtap: entered promiscuous mode
[  700.269096][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  700.280564][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  700.453636][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  700.464276][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  700.476037][T11354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.496379][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  700.515099][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  700.526015][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  700.536733][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  700.547978][T11354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.558401][T11354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.567599][T11354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.584968][T11354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.597015][T11354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.848546][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.857650][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.943643][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.955416][ T9941] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  700.976419][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.935009][ T9941] usb 6-1: Using ep0 maxpacket: 8
[  702.433533][ T8791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  702.442723][ T8791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  702.458291][ T8791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  702.466851][ T8791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  702.475047][ T8791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  702.484004][ T8791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  702.554622][ T9941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  702.572138][ T9941] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  702.584390][ T9941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.595814][ T9941] usb 6-1: config 0 descriptor??
[  702.866874][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  702.903952][ T9941] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  703.085017][ T5886] usb 7-1: Using ep0 maxpacket: 8
[  703.093358][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.096014][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  703.108913][ T9941] usb 6-1: USB disconnect, device number 18
[  703.140680][ T9941] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected
[  703.163615][ T5886] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  703.212491][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.266475][ T5886] usb 7-1: config 0 descriptor??
[  703.291441][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.147865][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.175319][ T5886] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  704.354177][T11488] chnl_net:caif_netlink_parms(): no params data found
[  704.631262][ T8791] Bluetooth: hci3: command tx timeout
[  704.778776][ T9941] usb 7-1: USB disconnect, device number 2
[  704.819359][ T9941] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected
[  705.383400][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.710554][ T8791] Bluetooth: hci3: command tx timeout
[  707.450265][T11488] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.491505][T11488] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.521337][T11488] bridge_slave_0: entered allmulticast mode
[  707.579185][T11488] bridge_slave_0: entered promiscuous mode
[  707.671203][T11488] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.685062][T11488] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.712822][T11488] bridge_slave_1: entered allmulticast mode
[  707.736476][T11488] bridge_slave_1: entered promiscuous mode
[  708.821029][ T9902] Bluetooth: hci3: command tx timeout
[  708.859135][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.443949][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.565329][   T35] bridge_slave_1: left allmulticast mode
[  710.571009][   T35] bridge_slave_1: left promiscuous mode
[  710.611181][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.632451][   T35] bridge_slave_0: left allmulticast mode
[  710.638312][   T35] bridge_slave_0: left promiscuous mode
[  710.644199][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.761385][T11564] No buffer was provided with the request
[  710.855121][ T9902] Bluetooth: hci3: command tx timeout
[  713.565549][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.605220][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.664640][   T35] bond0 (unregistering): Released all slaves
[  713.713478][   T35] bond1 (unregistering): (slave veth3): Releasing backup interface
[  713.730013][   T35] veth3: left promiscuous mode
[  713.741885][   T35] bond1 (unregistering): Released all slaves
[  714.432958][T11488] team0: Port device team_slave_0 added
[  714.491852][T11488] team0: Port device team_slave_1 added
[  714.498007][T11568] netlink: 'syz.5.1325': attribute type 3 has an invalid length.
[  714.506297][T11568] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1325'.
[  716.756011][T11610] netlink: 'syz.3.1332': attribute type 29 has an invalid length.
[  716.764030][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'.
[  718.320102][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.327302][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.426680][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.439332][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.446446][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.473614][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.242582][   T35] hsr_slave_0: left promiscuous mode
[  719.443681][   T35] hsr_slave_1: left promiscuous mode
[  719.528000][   T35] veth1_macvtap: left promiscuous mode
[  719.563170][   T35] veth0_macvtap: left promiscuous mode
[  719.575750][   T35] veth1_vlan: left promiscuous mode
[  719.584457][   T35] veth0_vlan: left promiscuous mode
[  724.224154][   T35] team0 (unregistering): Port device team_slave_1 removed
[  724.312283][   T35] team0 (unregistering): Port device team_slave_0 removed
[  724.812127][T11662] orangefs_mount: mount request failed with -4
[  725.532084][T11648] netlink: 'syz.4.1341': attribute type 29 has an invalid length.
[  725.540059][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'.
[  725.549301][T11671] netlink: 'syz.5.1346': attribute type 29 has an invalid length.
[  725.559228][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'.
[  725.615009][T11681] netlink: 'syz.6.1348': attribute type 29 has an invalid length.
[  725.622892][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'.
[  725.815224][T11578] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  726.115988][T11688] fuse: Bad value for 'fd'
[  727.130482][T11578] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  727.167334][T11578] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  727.177764][T11578] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  727.187346][T11578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.198860][T11684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  727.338599][T11488] hsr_slave_0: entered promiscuous mode
[  727.386332][T11578] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  727.476596][T11488] hsr_slave_1: entered promiscuous mode
[  727.714584][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  727.823739][T11488] Cannot create hsr debugfs directory
[  730.336322][T11578] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  731.020197][ T5882] usb 4-1: USB disconnect, device number 20
[  731.067238][T11578] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  731.195334][T11578] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  731.206798][T11578] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  731.216624][T11578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.240499][T11722] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  731.261534][T11578] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  731.313191][T11488] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  731.378027][T11488] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  731.661947][T11488] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  732.733532][T11488] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  733.689997][   T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.244751][T11743] netlink: 'syz.3.1358': attribute type 3 has an invalid length.
[  734.295832][T11743] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1358'.
[  734.516676][T11758] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  734.516676][T11758]    program syz.6.1361 not setting count and/or reply_len properly
[  735.221689][   T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.347279][    T9] usb 5-1: USB disconnect, device number 24
[  735.549776][T11766] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  735.549776][T11766]    program syz.5.1362 not setting count and/or reply_len properly
[  736.107236][   T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.355099][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  736.605343][T11742] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  737.225015][    T8] usb 7-1: Using ep0 maxpacket: 16
[  737.268465][    T8] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  737.291692][   T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.316133][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.328816][T11742] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  737.334458][    T8] usb 7-1: Product: syz
[  737.342807][    T8] usb 7-1: Manufacturer: syz
[  737.351025][    T8] usb 7-1: SerialNumber: syz
[  737.358235][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.370562][    T8] usb 7-1: config 0 descriptor??
[  737.382584][    T8] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  737.393517][    T8] usb 7-1: Detected FT-X
[  737.414215][T11742] usb 4-1: Product: syz
[  737.534221][T11488] 8021q: adding VLAN 0 to HW filter on device bond0
[  737.541269][T11742] usb 4-1: Manufacturer: syz
[  737.558474][T11742] usb 4-1: SerialNumber: syz
[  737.689151][T11742] usb 4-1: config 0 descriptor??
[  737.802110][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  737.807036][T11742] usb 4-1: interface 1 not found
[  737.945982][T11785] netlink: 'syz.5.1367': attribute type 3 has an invalid length.
[  738.057413][T11785] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1367'.
[  738.133061][T11488] 8021q: adding VLAN 0 to HW filter on device team0
[  738.169814][T11488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  738.180243][T11488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  738.270170][    T8] ftdi_sio 7-1:0.0: GPIO initialisation failed: -5
[  738.275186][T11742] usb 4-1: USB disconnect, device number 21
[  738.354751][    T8] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  738.380834][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.388076][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  738.449981][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.457233][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  738.503114][T11578] usb 7-1: USB disconnect, device number 3
[  738.559436][T11578] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  738.573797][T11578] ftdi_sio 7-1:0.0: device disconnected
[  743.927992][ T5939] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  744.570903][ T5939] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  744.582110][ T5939] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  744.592331][ T5939] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  744.601647][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.648599][T11833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  744.678292][ T5939] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  746.774295][   T61] bridge_slave_1: left allmulticast mode
[  746.782382][   T61] bridge_slave_1: left promiscuous mode
[  746.796522][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.832067][   T61] bridge_slave_0: left allmulticast mode
[  746.845982][   T61] bridge_slave_0: left promiscuous mode
[  746.851746][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.485891][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  748.376536][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.398877][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.416198][   T61] bond0 (unregistering): Released all slaves
[  748.431335][T11830] netlink: 'syz.6.1376': attribute type 29 has an invalid length.
[  748.439635][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'.
[  748.452276][T11842] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  748.458477][T11842] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  749.408686][ T5915] usb 4-1: USB disconnect, device number 22
[  749.670032][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.158237][T11842] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  750.164255][T11842] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  752.123274][T11871] netlink: 'syz.4.1386': attribute type 29 has an invalid length.
[  752.133086][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'.
[  752.555145][T11578] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  752.682210][T11488] veth0_vlan: entered promiscuous mode
[  752.725043][T11578] usb 6-1: Using ep0 maxpacket: 32
[  752.741051][T11578] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  752.795456][T11578] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  752.834283][T11578] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  752.845485][ T5939] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  752.855503][T11578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.863658][   T61] hsr_slave_0: left promiscuous mode
[  752.879914][T11578] usb 6-1: Product: syz
[  752.884344][   T61] hsr_slave_1: left promiscuous mode
[  752.895104][T11578] usb 6-1: Manufacturer: syz
[  752.899747][T11578] usb 6-1: SerialNumber: syz
[  752.906478][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  752.913938][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.021222][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.758387][ T5939] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  753.780350][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.781692][T11578] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  753.799855][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.812780][ T5939] usb 7-1: Product: syz
[  753.822813][ T5939] usb 7-1: Manufacturer: syz
[  753.849662][ T5939] usb 7-1: SerialNumber: syz
[  754.199744][ T5939] usb 7-1: config 0 descriptor??
[  754.234581][T11918] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  754.234581][T11918]    program syz.3.1394 not setting count and/or reply_len properly
[  754.248905][ T5939] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  754.381558][   T61] veth1_macvtap: left promiscuous mode
[  754.651208][   T61] veth0_macvtap: left promiscuous mode
[  754.661414][ T5939] gspca_sunplus: reg_r err -32
[  754.666695][   T61] veth1_vlan: left promiscuous mode
[  754.690097][ T9941] usb 6-1: USB disconnect, device number 19
[  754.815093][ T9941] usblp0: removed
[  755.419057][   T61] veth0_vlan: left promiscuous mode
[  755.628329][T11934] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  755.703739][ T5914] usb 7-1: USB disconnect, device number 4
[  756.073561][   T61] team0 (unregistering): Port device team_slave_1 removed
[  756.121579][   T61] team0 (unregistering): Port device team_slave_0 removed
[  756.155027][ T5914] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  756.329855][ T5914] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  756.339513][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.348185][ T5914] usb 7-1: Product: syz
[  756.352651][ T5914] usb 7-1: Manufacturer: syz
[  756.357785][ T5914] usb 7-1: SerialNumber: syz
[  756.370892][ T5914] usb 7-1: config 0 descriptor??
[  756.388003][ T5914] usb 7-1: interface 1 not found
[  756.510726][T11941] fuse: Bad value for 'fd'
[  756.656461][ T5939] usb 7-1: USB disconnect, device number 5
[  757.327381][T11488] veth1_vlan: entered promiscuous mode
[  757.576097][T11488] veth0_macvtap: entered promiscuous mode
[  757.608749][T11488] veth1_macvtap: entered promiscuous mode
[  757.853764][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  758.123368][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.331008][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  758.605028][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.618005][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  758.639057][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.650077][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.685072][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.702154][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.739105][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  758.749653][T11488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  758.758559][T11488] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  758.767309][T11488] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  758.777019][T11488] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.437845][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  759.526253][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.555590][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.610556][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.618702][    T9] usb 6-1: Using ep0 maxpacket: 8
[  759.636734][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  759.668577][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  759.683595][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.719027][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.743566][    T9] usb 6-1: config 0 descriptor??
[  760.046956][    T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  760.069826][ T5914] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  760.225023][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  760.238442][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  760.275115][ T5914] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  760.285306][    C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  760.294535][ T5884] usb 6-1: USB disconnect, device number 20
[  760.305300][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  760.307805][ T5884] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected
[  760.325458][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.357357][ T5914] usb 4-1: Product: syz
[  760.361576][ T5914] usb 4-1: Manufacturer: syz
[  760.404986][ T5914] usb 4-1: SerialNumber: syz
[  760.633608][ T5914] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  761.090143][T11994] ceph: No mds server is up or the cluster is laggy
[  761.097533][ T5886] libceph: connect (1)[c::]:6789 error -101
[  761.103580][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[  761.213698][    T9] usb 4-1: USB disconnect, device number 23
[  761.242843][    T9] usblp0: removed
[  762.159627][T12016] netlink: 'syz.7.1411': attribute type 3 has an invalid length.
[  762.167997][T12016] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1411'.
[  764.016637][T12033] fuse: Bad value for 'fd'
[  764.427156][ T5939] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  764.465675][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  764.819438][ T5939] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  764.855009][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.863225][ T5939] usb 4-1: Product: syz
[  764.881683][ T5939] usb 4-1: Manufacturer: syz
[  764.915383][ T5939] usb 4-1: SerialNumber: syz
[  764.944464][ T5939] usb 4-1: config 0 descriptor??
[  764.955118][ T5884] usb 8-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  764.964193][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.970865][ T5939] usb 4-1: interface 1 not found
[  765.013189][ T5884] ums-cypress 8-1:1.0: USB Mass Storage device detected
[  765.233425][ T5884] usb 8-1: USB disconnect, device number 2
[  765.343084][ T5939] usb 4-1: USB disconnect, device number 24
[  765.634783][T12049] netlink: 'syz.6.1418': attribute type 3 has an invalid length.
[  765.643052][T12049] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1418'.
[  767.669959][T12074] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  768.105388][T12081] netlink: 'syz.5.1424': attribute type 3 has an invalid length.
[  768.122686][T12081] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1424'.
[  768.588200][T12105] netlink: 'syz.4.1425': attribute type 29 has an invalid length.
[  768.596259][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  769.318087][T12107] futex_wake_op: syz.7.1426 tries to shift op by -1; fix this program
[  772.555033][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  772.835119][    T9] usb 8-1: Using ep0 maxpacket: 32
[  772.853735][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  772.874798][    T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  772.926834][    T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  773.024772][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.112352][    T9] usb 8-1: Product: syz
[  773.165845][    T9] usb 8-1: Manufacturer: syz
[  773.256012][    T9] usb 8-1: SerialNumber: syz
[  773.879969][    T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  774.102127][    T9] usb 8-1: USB disconnect, device number 3
[  774.155795][    T9] usblp0: removed
[  776.737491][ T5939] libceph: connect (1)[c::]:6789 error -101
[  776.743642][ T5939] libceph: mon0 (1)[c::]:6789 connect error
[  776.758596][T12178] ceph: No mds server is up or the cluster is laggy
[  777.165781][ T5886] libceph: connect (1)[c::]:6789 error -101
[  777.171868][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[  781.390821][T12259] netlink: 'syz.6.1452': attribute type 29 has an invalid length.
[  781.398780][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1452'.
[  785.156287][ T8791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  785.165365][ T8791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  785.173087][ T8791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  785.181969][ T8791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  785.190054][ T8791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  785.199160][ T8791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  785.731581][T12287] chnl_net:caif_netlink_parms(): no params data found
[  786.173199][T12312] Bluetooth: MGMT ver 1.23
[  787.255009][ T8791] Bluetooth: hci0: command tx timeout
[  787.312268][T12287] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.323386][T12287] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.171064][T12287] bridge_slave_0: entered allmulticast mode
[  788.259162][T12287] bridge_slave_0: entered promiscuous mode
[  788.293493][T12322] netlink: 'syz.7.1464': attribute type 29 has an invalid length.
[  788.301527][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1464'.
[  788.313193][T12287] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.377855][T12287] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.533607][T12287] bridge_slave_1: entered allmulticast mode
[  788.549757][T12287] bridge_slave_1: entered promiscuous mode
[  789.404953][ T8791] Bluetooth: hci0: command tx timeout
[  790.170464][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  790.229941][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  790.478072][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.665241][ T5884] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  790.694379][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.778131][T12287] team0: Port device team_slave_0 added
[  790.840568][T12287] team0: Port device team_slave_1 added
[  790.857308][ T5884] usb 8-1: Using ep0 maxpacket: 32
[  790.889532][ T5884] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  790.942806][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  790.970041][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.040229][ T5884] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  791.064972][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.093493][ T5884] usb 8-1: Product: syz
[  791.103639][ T5884] usb 8-1: Manufacturer: syz
[  791.144994][ T5884] usb 8-1: SerialNumber: syz
[  791.455001][ T8791] Bluetooth: hci0: command tx timeout
[  791.467897][ T5884] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  791.692391][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.225802][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.232860][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  792.306863][ T9941] usb 8-1: USB disconnect, device number 4
[  792.316149][ T9941] usblp0: removed
[  792.340475][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.506663][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.513768][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  792.541705][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  792.679146][T12362] capability: warning: `syz.6.1472' uses deprecated v2 capabilities in a way that may be insecure
[  793.333970][T12287] hsr_slave_0: entered promiscuous mode
[  793.358748][T12287] hsr_slave_1: entered promiscuous mode
[  793.554961][ T8791] Bluetooth: hci0: command tx timeout
[  794.183609][T12371] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  794.815444][   T11] bridge_slave_1: left allmulticast mode
[  794.840649][   T11] bridge_slave_1: left promiscuous mode
[  794.848669][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.957815][   T11] bridge_slave_0: left allmulticast mode
[  794.991765][   T11] bridge_slave_0: left promiscuous mode
[  795.011426][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.017164][T12388] fuse: Bad value for 'fd'
[  798.521677][ T5886] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  798.980216][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  798.987524][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  799.014894][ T5886] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  799.275310][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  799.284421][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.292858][ T5886] usb 4-1: Product: syz
[  799.297154][ T5886] usb 4-1: Manufacturer: syz
[  799.301783][ T5886] usb 4-1: SerialNumber: syz
[  799.381078][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  799.394473][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  799.413020][   T11] bond0 (unregistering): Released all slaves
[  799.606285][ T5886] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  799.704940][T12287] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  799.789903][ T5886] usb 4-1: USB disconnect, device number 25
[  799.813947][ T5886] usblp0: removed
[  799.879536][T12287] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  800.529486][T12418] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  800.574022][T12287] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  800.599489][T12287] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  800.872702][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1485'.
[  803.113657][   T11] hsr_slave_0: left promiscuous mode
[  803.195620][   T11] hsr_slave_1: left promiscuous mode
[  803.772839][   T11] veth1_macvtap: left promiscuous mode
[  803.779662][   T11] veth0_macvtap: left promiscuous mode
[  803.797939][   T11] veth1_vlan: left promiscuous mode
[  803.803315][   T11] veth0_vlan: left promiscuous mode
[  805.980638][ T9941] libceph: connect (1)[c::]:6789 error -101
[  805.994346][ T9941] libceph: mon0 (1)[c::]:6789 connect error
[  806.376356][T12474] ceph: No mds server is up or the cluster is laggy
[  806.442097][ T9941] libceph: connect (1)[c::]:6789 error -101
[  806.448402][ T9941] libceph: mon0 (1)[c::]:6789 connect error
[  806.835491][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  807.022142][    T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  807.046528][    T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  807.074309][    T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  807.139776][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.180369][T12487] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  807.211502][    T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  807.370607][T12502] atomic_op ffff88807e74b998 conn xmit_atomic 0000000000000000
[  808.861951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  810.592543][  T970] usb 7-1: USB disconnect, device number 6
[  811.032245][   T11] team0 (unregistering): Port device team_slave_1 removed
[  811.713849][   T11] team0 (unregistering): Port device team_slave_0 removed
[  813.238224][T12511] netlink: 'syz.4.1504': attribute type 3 has an invalid length.
[  813.246076][T12511] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1504'.
[  813.255572][T12537] netlink: 'syz.6.1512': attribute type 3 has an invalid length.
[  813.263410][T12537] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1512'.
[  813.279538][T12287] 8021q: adding VLAN 0 to HW filter on device bond0
[  813.326751][T12287] 8021q: adding VLAN 0 to HW filter on device team0
[  813.359347][T11849] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.366518][T11849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.597620][T11849] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.604941][T11849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  814.055938][T12287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  815.278758][T12561] netlink: 'syz.3.1516': attribute type 29 has an invalid length.
[  815.286907][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'.
[  816.630461][T12569] fuse: Bad value for 'fd'
[  817.117316][T12577] netlink: 'syz.3.1520': attribute type 29 has an invalid length.
[  817.125826][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'.
[  818.120585][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  820.672163][T12287] veth0_vlan: entered promiscuous mode
[  820.730277][T12287] veth1_vlan: entered promiscuous mode
[  821.757328][T12287] veth0_macvtap: entered promiscuous mode
[  821.846771][T12287] veth1_macvtap: entered promiscuous mode
[  821.904215][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  821.943259][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.981043][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.012676][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.040177][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.068794][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.102933][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  822.134150][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.182845][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.214874][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.259923][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.320800][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.371948][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.410546][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.590719][T12287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.764961][ T9941] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  823.775192][T12287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.801783][T12287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.981883][T12287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.016654][ T9941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  824.054526][ T9941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  824.129319][ T9941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  824.148781][ T9941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.175432][T12628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  824.186434][ T9941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  825.217661][ T6489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.704999][ T6489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.427850][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.436133][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.651078][T12659] ubi0: attaching mtd0
[  826.656611][T12659] ubi0: scanning is finished
[  827.140576][T12665] support for the xor transformation has been removed.
[  827.853489][ T5886] usb 4-1: USB disconnect, device number 26
[  828.478502][T12659] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  831.549948][T12720] atomic_op ffff8880314e6198 conn xmit_atomic 0000000000000000
[  832.376259][T12723] fuse: Bad value for 'fd'
[  832.697974][T12727] atomic_op ffff88806b90f998 conn xmit_atomic 0000000000000000
[  833.319137][T12707] netlink: 'syz.4.1547': attribute type 3 has an invalid length.
[  833.327132][T12707] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1547'.
[  836.082399][T12748] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  836.088421][T12748] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  836.706633][T12771] syz.3.1559: attempt to access beyond end of device
[  836.706633][T12771] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[  836.721145][T12771] VFS: unable to read V7 FS superblock on device nbd3.
[  836.728207][T12771] VFS: could not find a valid V7 on nbd3.
[  837.275106][ T5939] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  837.444999][ T5939] usb 8-1: Using ep0 maxpacket: 8
[  837.459403][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  837.521791][ T5939] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  837.586344][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.616778][ T5915] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  837.631745][ T5939] usb 8-1: config 0 descriptor??
[  837.833507][ T5915] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  837.875335][T12789] netlink: 'syz.3.1564': attribute type 3 has an invalid length.
[  837.884396][T12789] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1564'.
[  837.924257][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.941636][ T5939] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  838.316135][ T5939] usb 8-1: USB disconnect, device number 5
[  838.437910][ T5939] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected
[  838.458848][ T5915] ums-cypress 5-1:1.0: USB Mass Storage device detected
[  838.720338][ T5915] usb 5-1: USB disconnect, device number 25
[  842.216676][T12851] fuse: Bad value for 'fd'
[  844.159486][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1585'.
[  849.364993][ T5886] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  849.555232][ T5886] usb 7-1: Using ep0 maxpacket: 16
[  849.610119][T12949] netlink: 'syz.3.1598': attribute type 3 has an invalid length.
[  849.610843][ T5886] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  849.626544][T12949] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1598'.
[  849.778185][ T5886] usb 7-1: config 0 has no interface number 0
[  849.890295][ T5886] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  850.008208][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.106398][ T5886] usb 7-1: Product: syz
[  850.133130][ T5886] usb 7-1: Manufacturer: syz
[  850.302568][ T5886] usb 7-1: SerialNumber: syz
[  852.145187][ T5886] usb 7-1: config 0 descriptor??
[  852.167833][ T5886] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  852.301348][ T5886] gspca_spca1528: reg_w err -71
[  852.326285][ T5886] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  852.345244][ T5886] usb 7-1: USB disconnect, device number 7
[  852.965106][ T5939] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  853.135320][ T5939] usb 4-1: Using ep0 maxpacket: 16
[  853.219048][ T5939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  853.410733][ T5939] usb 4-1: config 0 has no interface number 0
[  853.597219][ T5939] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  853.643731][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.692708][ T5939] usb 4-1: Product: syz
[  853.751308][ T5939] usb 4-1: Manufacturer: syz
[  853.764881][ T5939] usb 4-1: SerialNumber: syz
[  854.001562][ T5939] usb 4-1: config 0 descriptor??
[  854.010877][ T5939] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  856.032058][ T5939] gspca_spca1528: reg_r err -71
[  856.044939][ T5939] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  856.820090][ T5939] usb 4-1: USB disconnect, device number 27
[  870.299934][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  872.470643][T13168] atomic_op ffff888034a2e198 conn xmit_atomic 0000000000000000
[  873.739479][T13188] syz.8.1654: attempt to access beyond end of device
[  873.739479][T13188] nbd8: rw=0, sector=1, nr_sectors = 1 limit=0
[  873.752340][T13188] VFS: unable to read V7 FS superblock on device nbd8.
[  873.759347][T13188] VFS: could not find a valid V7 on nbd8.
[  875.502872][T13194] syz.7.1656: attempt to access beyond end of device
[  875.502872][T13194] nbd7: rw=0, sector=1, nr_sectors = 1 limit=0
[  875.516178][T13194] VFS: unable to read V7 FS superblock on device nbd7.
[  875.523058][T13194] VFS: could not find a valid V7 on nbd7.
[  876.966063][T13209] atomic_op ffff88807c0f9998 conn xmit_atomic 0000000000000000
[  880.509340][T13232] atomic_op ffff888065da9998 conn xmit_atomic 0000000000000000
[  883.340965][T13261] syz.3.1671: attempt to access beyond end of device
[  883.340965][T13261] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[  883.353850][T13261] VFS: unable to read V7 FS superblock on device nbd3.
[  883.360776][T13261] VFS: could not find a valid V7 on nbd3.
[  884.803107][T13268] fuse: Bad value for 'fd'
[  885.959663][T13279] syz.3.1675: attempt to access beyond end of device
[  885.959663][T13279] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[  885.972702][T13279] VFS: unable to read V7 FS superblock on device nbd3.
[  885.979733][T13279] VFS: could not find a valid V7 on nbd3.
[  889.787227][T13298] futex_wake_op: syz.3.1679 tries to shift op by -1; fix this program
[  892.532012][T13324] fuse: Bad value for 'fd'
[  896.049454][ T5939] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  897.336309][ T5939] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  897.345708][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.358433][ T5939] ums-cypress 4-1:1.0: USB Mass Storage device detected
[  897.611719][ T5939] usb 4-1: USB disconnect, device number 28
[  904.122098][T13412] support for the xor transformation has been removed.
[  909.403574][T13458] netlink: 'syz.7.1713': attribute type 29 has an invalid length.
[  909.412928][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1713'.
[  912.051329][ T8791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  912.065666][ T8791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  912.078066][ T8791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  912.086193][ T8791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  912.096721][ T8791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  912.104075][ T8791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  912.124438][ T9902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  912.160669][ T9902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  912.195901][ T9902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  912.206253][ T9902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  912.213923][ T9902] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  912.222459][ T9902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  914.667908][ T8791] Bluetooth: hci0: command tx timeout
[  914.669061][    T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  914.738357][T13509] netlink: 'syz.7.1723': attribute type 29 has an invalid length.
[  914.747943][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1723'.
[  914.896192][    T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  914.919141][    T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  914.970453][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  915.170393][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.193373][T13507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  915.207526][    T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  915.293961][T13521] Bluetooth: MGMT ver 1.23
[  915.971010][T13493] chnl_net:caif_netlink_parms(): no params data found
[  916.336342][ T5939] usb 5-1: USB disconnect, device number 26
[  916.632745][T13493] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.640076][    T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  916.666227][T13537] overlayfs: overlapping lowerdir path
[  916.724377][T13493] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.743362][T13493] bridge_slave_0: entered allmulticast mode
[  916.751149][T13493] bridge_slave_0: entered promiscuous mode
[  916.751200][ T8791] Bluetooth: hci0: command tx timeout
[  916.773406][T13493] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.780921][T13493] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.788276][T13493] bridge_slave_1: entered allmulticast mode
[  916.795643][T13493] bridge_slave_1: entered promiscuous mode
[  916.868457][T13493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  916.904405][T13493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  916.996406][    T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  917.024184][    T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  917.035562][    T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  917.044680][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.066646][T13531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  917.294158][    T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  918.288096][T13553] syz.6.1732: attempt to access beyond end of device
[  918.288096][T13553] nbd6: rw=0, sector=1, nr_sectors = 1 limit=0
[  918.300943][T13553] VFS: unable to read V7 FS superblock on device nbd6.
[  918.307904][T13553] VFS: could not find a valid V7 on nbd6.
[  918.774939][ T8791] Bluetooth: hci0: command tx timeout
[  919.909441][T13493] team0: Port device team_slave_0 added
[  920.815030][T13562] support for the xor transformation has been removed.
[  921.274176][ T8791] Bluetooth: hci0: command tx timeout
[  921.280645][T11742] usb 4-1: USB disconnect, device number 29
[  921.365759][T13493] team0: Port device team_slave_1 added
[  921.777996][T13573] atomic_op ffff888067339198 conn xmit_atomic 0000000000000000
[  922.758538][ T5915] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  922.831626][T13493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  922.843113][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  922.914337][T13493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.021232][ T5915] usb 8-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  923.030412][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.042710][ T5915] ums-cypress 8-1:1.0: USB Mass Storage device detected
[  923.175639][T13493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.182643][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  924.171849][T13493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  924.494190][T13582] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  924.500315][T13582] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  924.522501][T13582] 
[  924.524885][T13582] ============================================
[  924.531052][T13582] WARNING: possible recursive locking detected
[  924.537234][T13582] 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Not tainted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  924.544357][T13582] --------------------------------------------
[  924.550523][T13582] syz.3.1738/13582 is trying to acquire lock:
[  924.556694][T13582] ffff888056d1c078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550
[  924.567024][T13582] 
[  924.567024][T13582] but task is already holding lock:
[  924.574407][T13582] ffff888056d1c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  924.583692][T13582] 
[  924.583692][T13582] other info that might help us debug this:
[  924.591855][T13582]  Possible unsafe locking scenario:
[  924.591855][T13582] 
[  924.599328][T13582]        CPU0
[  924.602630][T13582]        ----
[  924.605940][T13582]   lock(&hdev->lock);
[  924.610048][T13582]   lock(&hdev->lock);
[  924.614148][T13582] 
[  924.614148][T13582]  *** DEADLOCK ***
[  924.614148][T13582] 
[  924.622304][T13582]  May be due to missing lock nesting notation
[  924.622304][T13582] 
[  924.630625][T13582] 4 locks held by syz.3.1738/13582:
[  924.635820][T13582]  #0: ffffffff8ff97da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a6/0x790
[  924.645945][T13582]  #1: ffff888056d1cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x28/0x90
[  924.655538][T13582]  #2: ffff888056d1c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  924.665219][T13582]  #3: ffff888056d1c690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x44/0x3d0
[  924.676109][T13582] 
[  924.676109][T13582] stack backtrace:
[  924.682036][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.3.1738 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  924.692808][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  924.702911][T13582] Call Trace:
[  924.706222][T13582]  <TASK>
[  924.709155][T13582]  dump_stack_lvl+0x241/0x360
[  924.713841][T13582]  ? __pfx_dump_stack_lvl+0x10/0x10
[  924.719043][T13582]  ? __pfx__printk+0x10/0x10
[  924.723674][T13582]  ? lockdep_unlock+0x16a/0x300
[  924.728538][T13582]  print_deadlock_bug+0x483/0x620
[  924.733570][T13582]  validate_chain+0x15e2/0x5920
[  924.738424][T13582]  ? desc_read+0x200/0x3f0
[  924.742848][T13582]  ? mark_lock+0x9a/0x360
[  924.747194][T13582]  ? validate_chain+0x11e/0x5920
[  924.752139][T13582]  ? __lock_acquire+0x1384/0x2050
[  924.757179][T13582]  ? __pfx_validate_chain+0x10/0x10
[  924.762405][T13582]  ? __pfx_validate_chain+0x10/0x10
[  924.767611][T13582]  ? mark_lock+0x9a/0x360
[  924.771946][T13582]  ? validate_chain+0x11e/0x5920
[  924.776915][T13582]  ? mark_lock+0x9a/0x360
[  924.781251][T13582]  __lock_acquire+0x1384/0x2050
[  924.786117][T13582]  lock_acquire+0x1ed/0x550
[  924.790628][T13582]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  924.796979][T13582]  ? __pfx_lock_acquire+0x10/0x10
[  924.802018][T13582]  ? __pfx___might_resched+0x10/0x10
[  924.807337][T13582]  __mutex_lock+0x136/0xd70
[  924.811858][T13582]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  924.818223][T13582]  ? __pfx___mutex_trylock_common+0x10/0x10
[  924.824126][T13582]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  924.830470][T13582]  ? __pfx___mutex_lock+0x10/0x10
[  924.835498][T13582]  ? rcu_is_watching+0x15/0xb0
[  924.840270][T13582]  ? __mutex_lock+0x2ef/0xd70
[  924.844952][T13582]  mgmt_remove_adv_monitor_complete+0xaf/0x550
[  924.851118][T13582]  ? __pfx___mutex_lock+0x10/0x10
[  924.856158][T13582]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  924.862934][T13582]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  924.869716][T13582]  hci_cmd_sync_dequeue+0x22b/0x3d0
[  924.874925][T13582]  cmd_complete_rsp+0x4c/0x180
[  924.879693][T13582]  mgmt_pending_foreach+0xd1/0x130
[  924.884827][T13582]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  924.890197][T13582]  __mgmt_power_off+0x183/0x430
[  924.895053][T13582]  ? __pfx___mgmt_power_off+0x10/0x10
[  924.900431][T13582]  ? __mutex_trylock_common+0x183/0x2e0
[  924.905981][T13582]  ? __pfx___might_resched+0x10/0x10
[  924.911303][T13582]  ? __pfx___mutex_trylock_common+0x10/0x10
[  924.917211][T13582]  ? rcu_is_watching+0x15/0xb0
[  924.921996][T13582]  ? trace_contention_end+0x3c/0x120
[  924.927291][T13582]  ? __mutex_lock+0x2ef/0xd70
[  924.931997][T13582]  ? __mutex_unlock_slowpath+0x21d/0x750
[  924.937754][T13582]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  924.944105][T13582]  ? hci_dev_close_sync+0x572/0x11a0
[  924.949416][T13582]  ? __pfx___mutex_lock+0x10/0x10
[  924.954453][T13582]  ? sctp_udp_v6_err+0x1c0/0x640
[  924.959411][T13582]  ? hci_discovery_set_state+0x57/0x180
[  924.964979][T13582]  hci_dev_close_sync+0x665/0x11a0
[  924.970129][T13582]  hci_dev_do_close+0x30/0x90
[  924.974815][T13582]  hci_rfkill_set_block+0x232/0x300
[  924.980031][T13582]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  924.985761][T13582]  rfkill_set_block+0x1f1/0x440
[  924.990618][T13582]  rfkill_fop_write+0x5b8/0x790
[  924.995479][T13582]  ? __import_iovec+0x536/0x820
[  925.000342][T13582]  ? __pfx_rfkill_fop_write+0x10/0x10
[  925.005728][T13582]  ? bpf_lsm_file_permission+0x9/0x10
[  925.011101][T13582]  ? security_file_permission+0x74/0x280
[  925.016758][T13582]  ? rw_verify_area+0x1c3/0x6f0
[  925.021615][T13582]  vfs_writev+0x5a9/0xba0
[  925.025951][T13582]  ? __pfx_rfkill_fop_write+0x10/0x10
[  925.031336][T13582]  ? __pfx_vfs_writev+0x10/0x10
[  925.036198][T13582]  ? fdget_pos+0x19a/0x320
[  925.040626][T13582]  do_writev+0x1b1/0x350
[  925.044872][T13582]  ? __pfx_do_writev+0x10/0x10
[  925.049640][T13582]  ? do_syscall_64+0x100/0x230
[  925.054409][T13582]  ? do_syscall_64+0xb6/0x230
[  925.059097][T13582]  do_syscall_64+0xf3/0x230
[  925.063626][T13582]  ? clear_bhb_loop+0x35/0x90
[  925.068318][T13582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.074228][T13582] RIP: 0033:0x7f394cd7e719
[  925.078646][T13582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  925.098294][T13582] RSP: 002b:00007f394c7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  925.106713][T13582] RAX: ffffffffffffffda RBX: 00007f394cf36130 RCX: 00007f394cd7e719
[  925.114689][T13582] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000009
[  925.122672][T13582] RBP: 00007f394cdf12be R08: 0000000000000000 R09: 0000000000000000
[  925.130643][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  925.138618][T13582] R13: 0000000000000000 R14: 00007f394cf36130 R15: 00007ffe24784e68
[  925.146621][T13582]  </TASK>
[  925.259312][ T5915] usb 8-1: USB disconnect, device number 6
[  926.544923][ T9902] Bluetooth: hci0: command tx timeout
[  931.737413][ T1301] ieee802154 phy0 wpan0: encryption failed: -22