last executing test programs:

1m11.706527344s ago: executing program 0 (id=1):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x23, &(0x7f0000000880)=0x10003, 0x4)
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xf, 0x1, @thr={0x0, 0x0}})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1", 0x7, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xfffffef5)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000040000000d00000004000084ec2a00000200000000000000050000000300000005000000080000001000000003000000f7ffffff0000000002000000feffffff000000000000000300000000040000000200000001000000030000000000000b0100000006fca700050000060400000001000000080000000d000000e94a000002000000080000000b00000000020000030000002533165b0a4c389495d4c5fe0d000000000000090000000000614b00"], &(0x7f0000000100)=""/40, 0xbc, 0x28, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e00cf00c030ffffffffffff8200000008060200", @ANYBLOB="0d001d000000000073c3d4339669da705601000005b41a3f55bbb860a3017dff0000004839aae1eac5b9cbf30f1119ba8b7c49b091349f0ba5d30d70e7594e542ba0dab7257a14", @ANYRESDEC, @ANYRES32=r5, @ANYRES32=0x1, @ANYRESHEX=0x0], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x66c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':!./-^$)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "6e89b03c53b87bd9dec9816d1dc304eb0b36dba2830c42c1f17c3e1186a62c20a08fca6e171204a2b2d8061017b4aaf94e2591d3b42f638664e9fdf2aca0e58473c8ad20a52feb3739b37b50d78a2f876d51b66c0b2757d32c05269aa5885ed16828a4369e5a6b3cdef3ab93a93f0532077939d9763fa87a"}]}, @ETHTOOL_A_WOL_SOPASS={0x38, 0x3, "fbc936576c3768a96cc810d6f2efb4402d93eb549169027311ef1161cc7dc7e38f6102014e22d4d13bd9ead159c888e098e960b1"}, @ETHTOOL_A_WOL_SOPASS={0x5c, 0x3, "c147723eb14a0004ae3d0b915cfdcc9275bfdba4b4673c66c370cbfbf90e88a77efd2d9f76130b55f0378538bf876c4d843d85aacb632668c990fef887c89173aeefab4f98d3115f03abe6bc5bd1d3dd2248a087380773f3"}, @ETHTOOL_A_WOL_MODES={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb1, 0x5, "8bba565899bfd134aa69975cf3b7d2f7fb1b3edef986fc923f9e1b6e7f93d31a1e39b34279c6d7882cb3816408e19dcbd3c6609024cad6dfabfd55b4662104ba249ca20c8c1bdeb28af8b6b2acc61cba18266e596b880b6dca003ed8789b6b150d1513fbd1135f71c280d1a781503092977933ec9c574aaa47aaf8da7b7c4022c886e96b4b7589554de3a2d771a4b85d5a065139b45b1262b1ca5661a07d139c9366aa4b50f0fbbb62ae514389"}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "9458a0976516bfd58fea49a7e94fd68af6f4dfec6760271110121cb67c320ed6b9d64153d283af94d8fea0c2f241eca60c0da76c1b03bf775d93277b1124344b67c6f4cbe01c5505d63b9b55e46af98182a3708c1396dd04e44a1d37d1cba26cbb8494deb76e5082d1df45ec218d2b0b9debbf4ee5b40c099e791cf851cf40a355dd8eb2e2bf016e7b8ff13e69675ed9d8ffad7a123263782f9330a372d8e8a08d18c2f68036963a77a329052d40"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "a17b2cc1c00d4af6a53225f1e4580c6b4e233f375fb86065046b4f77962f142ef790f952b670d89d2bf660743a760376ca5203e26422a2dd0048000b3692409429a646d26cdc53ca2ad431a256cc02dee1"}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_MODES={0x278, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*}^&'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3800}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}(##!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffc000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5813}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&*.[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x55d}]}]}, @ETHTOOL_A_BITSET_MASK={0xd9, 0x5, "f97c66193496e561dd385b55446a57b0b0cdede4d62a7f4e280fe472a1b10a722df51a85afe0b7d735f5d4cc79828e85483252da1df9f8c95f57bc740610631ce07f4b39d049bc9496d2ebaee2326c1f04b7d6f51f0816e8933231f029be33b2be686e73b488ad032909a9f50f26712cf551434e7ec577363f50ec76bf5cc7027012350c8a1039fb9351694043381d754b4d89931c296fed32f2f65001926feb7ef867736959bc0a98bab86321f194a9a2137cb854b8fb905a7aaffa1e078bf6c2032c1d9a347c51f4a6b3a5cf3012f0b690935ed0"}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "7048add8c4a766d4573bd101fd0319f17ac70c23b8f144077661fc2422553f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0xc, 0x3, "4406eb1fb0482076"}]}, 0x66c}, 0x1, 0x0, 0x0, 0x8010}, 0x2400c801)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))

1m10.474116997s ago: executing program 0 (id=6):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'xfrm0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0003000000000102030005030405ffff"}}}]}, 0x48}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
mount(0x0, 0x0, &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r5 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12014e01020000102505a1a4404d0102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff1b080006241a00001309058103000400fd000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x7, 0x8, 0x9, 0x2, 0x401, 0xf801, 0x7f, 0x1, 0xff, 0x51}}, 0x0, 0x0, 0x0, 0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000300)=0x81)
preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/212, 0xd4}], 0x1, 0xc, 0x4)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100080", @ANYRES16=r0, @ANYBLOB="010800040000ffdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x25c, 0x36, 0x2, 0x70bd2c, 0x25dfdbfc, {0x10}, [@generic="b21270b5218fe4241872d1e01616ab288a158c5b184e89a46b529b3da4175c92765dfeff3d2839bd7df1728c3bf9f62243e99a7b5af5fcd9ee33cf8b7e145ac4ced5d8cc1dabb120814c2e60d0771b53d3405538dc7e5574e118b925d4bcb2", @generic="c8e3613b9cfa50518dc2b49782c780548988f0f66260a6116b75ab74fd35c32c26ef349ed8cded8667d15ea8e8b317dbd20b8ecda538e98f4f9ed720092ade3bd5a5cd261352e62d0a93d479686666627d4914695ec7a3426d789186aaed1de8cc4cee7cfeb8eff51342f1bf173cf11ac6fe572d1e480fb8874ba66da76379438bb21e", @generic="c3ce91a2e69c7100788f0880c6409502325c8a6f648bb4f9c7bafb5c69f2d16ca96a507c5d830784bbef52ba9b6ff8189e33366a4668001a9f771bb84e5589344db10bd80c4e6c0aeca4328c3c9dc5b6a8892e3c6b1d5ba9cded5c4e83fb3ffd4637122c9fc0602622237d06aa12fbee3e6c0dca8eddb7e2774ba7d43ad884af0ead30b0da7fc9676da1", @typed={0xcf, 0x151, 0x0, 0x0, @binary="64ea65fc849085e3e97e9bd44677d1315836fdfe6f8f3eb04b7005fd37fadfcf2fa55d6385cfb1602ef5e699818dca829f13ca54006e118a25a8e2c70075396641ba376c10d20812a291e6b5a67ba907fc94e8e9b720c3aa9ebce11e1390a8af7481686b2a823d9db91aa0b8c52f205679fb0571eead27706a6ca455427ed7744e15955a15552a47e5dbb8efa3ca31c7c2c18734fca91cf4ada1c6764598f00d1fd947ab027ca3131b678ce98aaa93c81d49f254830417dcf14deabbe63a6f4d137f395b96ea79bfdf4253"}, @typed={0x4, 0x2c}, @nested={0x8, 0xe1, 0x0, 0x1, [@nested={0x4, 0x93}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m5.21979244s ago: executing program 0 (id=18):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, 0x0, 0x0)

1m3.493102567s ago: executing program 0 (id=25):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x800, 0x0, 0x2, 0x1, 0x1, 0x2}, 0x20)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000380)={0x0, 0x6, 0x2014})
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040), 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)

1m0.604324792s ago: executing program 32 (id=25):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x800, 0x0, 0x2, 0x1, 0x1, 0x2}, 0x20)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000380)={0x0, 0x6, 0x2014})
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040), 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)

16.128209822s ago: executing program 3 (id=132):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
io_setup(0x20, &(0x7f0000001140)) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) (async)
ustat(0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000280)=0x5, 0x4) (async)
r3 = dup(r2)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000000)={0x51, 0x593, 0x7, {0x22d9, 0x2}, {0xfff0, 0x51}, @cond=[{0xffff, 0x0, 0x3, 0x6, 0x9, 0x7ff}, {0x81, 0x1, 0x5, 0x9, 0x7, 0x80}]}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
shutdown(r0, 0x1)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=ANY=[@ANYBLOB="00fbea0204649eb118422adffef9057ad9ba2d42359d05cbef3101cd92d7b9d5cf464143da94e2d79b09324c2a7d5e8935549df1f9b0f8ab25543f3a4a388d162eff9010d8d594f01e15160f1e658bda96682691e7d22dfbf0a1e85f2308e57dc867ba25ac059e13f348ce8dc4199910cfb87dd6f3d27dd9303060e4047304d32590afcab3305846029540cf0da4ff132df7d0e83d41fef6f78ebde65c2798d36058e36f98232f97452759288ee48f6ae761b82466c996a7a3b9c4ec5a78b2978b07bd21add40da649e7fa4e2907f2cdf39513b1fce7b2246774d7f49baf2e30eb45ace7bdb5e03e4008"], 0xea, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x54, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]})

12.500171988s ago: executing program 3 (id=136):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x42000665)
syz_clone3(&(0x7f0000000600)={0x20000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {<r3=>r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r3}, 0xfffffffffffffffe, 0x0, 0x4})
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

11.595897421s ago: executing program 3 (id=139):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004d00)=@delchain={0x178, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x148, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x124, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070ebd08ccbf"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x5, 0x6, "ebe6c48aa9"}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x100006, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x24000080)
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, 0x0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xde)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
r10 = gettid()
syz_open_procfs$namespace(r10, &(0x7f0000000380)='ns/time\x00')
r11 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fe19ae2fe0", 0x5, r1)
r12 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000540)="c2900762a36ba3f39940cfba76f9e78859ea9a8e1421f3577549533aba62a8766fde62e8f2285180ad8caeb1ebd8c75c903c385ebea0aef43326a68587fbab47982544d4bde9e71e1523c188f6ddec9c2e5b3dd5fd1cf413401b3c6f8aefa5227d7bafbb9dd80dce8cfe30ead897c36d9663d0fc63d22077a4cd5f22984b6e8a7a968c54eded62de05b25f4650ca0196ac93a6037711c390b45b4536dda22c21bc389aa389050d594a2cd589f8976deb7aaff4b62c49", 0xb6, 0xfffffffffffffff8)
r13 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000006c0)="4d9e83f0150386a80335090cc0a54dd73bf3f7642bfdd8604e6312800c06c95c2585205b7e05868e05cd057f086d3ce60001fd5b7c83e3be57e3126c5a7f8df19822e4", 0x43, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000780)={r11, r12, r13}, &(0x7f0000000880)=""/11, 0xb, &(0x7f0000000900)={&(0x7f00000008c0)={'sha256-avx\x00'}, &(0x7f0000000a00)="2022535a6d5719b845145361e20726b7b78154e3d2622c1b75ccca65f18b98b7fb096d859a34505aada05cfff3e137cb450473779f2d9f8ef69fbed79758f8a8e0dfd858109464ec99684dc4a6494960f0d5059bed471e5239af172dc90b06d9340ffdb5d7795925b977be8b421823f8b12f207d897b4a3ed7158b18409131b5f5", 0x81})
r14 = socket(0x10, 0x803, 0x0)
sendto(r14, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

11.343645709s ago: executing program 1 (id=140):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
inotify_init1(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x298, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x40000}], 0x1}}], 0x1, 0x40000121, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000640)={0x1, {{0xa, 0x1, 0x0, @private2}}, {{0xa, 0x2, 0x2000001, @mcast1}}}, 0x108)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x80, 0x4})

10.068988278s ago: executing program 1 (id=143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

8.776977045s ago: executing program 1 (id=148):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004d00)=@delchain={0x160, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x130, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x73a3}, @TCA_FLOW_EMATCHES={0x10c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070ebd08cc"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x5, 0x6, "ebe6c48aa9"}}}, @TCF_EM_META={0x14, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7e}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = accept(r1, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x8, 0x0, 0xffffff7f}, @initr0, @exit, @printk={@li, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0x1, 0x3fff})
setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @private=0xa010102}, 0x8)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

8.7249599s ago: executing program 4 (id=150):
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{0x0}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000540)={{0x4000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x6000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xf000, 0x80a0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xeeef0000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x2000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0x80a0000, 0xdddd0000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x1, 0x1}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0x7, 0x8800, 0x0, [0x0, 0x1000000000000, 0x9]})

7.63468559s ago: executing program 4 (id=151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00?'], 0xb8}, 0x1, 0xfffff000}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
close(0xffffffffffffffff)
close(r1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340), 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x14f)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001"], 0xfe44, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0, <r5=>0x0})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=<r6=>0x0)
syz_clone3(&(0x7f0000000580)={0x28000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0x3f}, &(0x7f0000000380)=""/155, 0x9b, &(0x7f0000000440)=""/91, &(0x7f0000000540)=[r5, r6], 0x2, {r4}}, 0x58)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

7.608968257s ago: executing program 2 (id=152):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4e)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f00000001c0)=<r7=>0x0)
io_getevents(r7, 0x4, 0x0, &(0x7f0000000300)=[{}, {}], 0x0)
io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa}, 0x94)

7.465142685s ago: executing program 1 (id=153):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x13, 0x2, @thr={0x0, 0x0}})
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, 0x0, 0x0, 0x10)
shutdown(r5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x50, 0x0, @fd=r6, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r9}})
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x1, &(0x7f0000000000), 0x4)
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_NOTIFY_DELETE(r11, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)

6.666437283s ago: executing program 4 (id=154):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x60}, 0x1, 0x7}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x402180, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000001eb, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
userfaultfd(0x80000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='mm_compaction_end\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r6, 0x903, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x10}}, {0x6}}]}, 0x44}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x13)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b63707573657420c30bb300000000000000a3688c6b13eca2f6aa6f1036123779aa82855963f036ee23ebfcc33bdf0e1f12bf6d084d1b0130f9532cc0cb554a74c566cb3e76eb25471a024c1932a115959c9b2d801a26dc9b3add805c0c8ec834b14519"], 0x8)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))

5.699437825s ago: executing program 3 (id=155):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911047000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/176)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x27, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
listen(r6, 0x0)
syz_open_dev$video(0x0, 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x274100)
r7 = socket(0xa, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x2e, &(0x7f00000012c0)=""/197, &(0x7f0000000080)=0xc5)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000)
ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})

5.638356142s ago: executing program 1 (id=156):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x0, 0x3, 0x49, 0x2}}]}}]}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r4)
close(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x137)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x400a011)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.369134061s ago: executing program 2 (id=157):
socket(0x80000000000000a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d87abd907c30d35b06624609331d2dbf297bc34b1394bee845a816f80aaa14426fd444b651e7443b0483836203"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
mount$pvfs2(0x0, 0x0, 0x0, 0x8184c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x11, 0x4, @thr={&(0x7f0000000300)="a590b53470cb410594d0051278101f4dbced2dc9c276886210afea9bae6abc9eb32196d799f867ede06d4dfec1abd030f1e069ab49df91988fcbbfeb107e007d14075b2bf4c68883d5e88a846d5dafdf695bcece73", &(0x7f00000003c0)="8a34735f60792000080d8ffc3bc0ec43eb109dc5c3d45cf092502681afb5f75818f0bae167f67bea175920437303983001808fd674313207ad5346eae1d75e62e5eb59f0a4db10fcf0cb428cfbad7f66e7655f9bdbff81171c107e88ee7a126b"}}, &(0x7f0000000280))
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"})
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3040200594949d8eedab81ff62af7621aa6969840de264f0825832861e52dd6fac9d082ec29d124877545209d29d7470397a9b711c5f65999a58b8acc1f995502b000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf2503000000140006007465616d30000000000000000000000008000500ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x1)

5.368673144s ago: executing program 3 (id=158):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}])
sendmmsg$alg(r2, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1b", 0x1}], 0x1, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001}], 0x1, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
set_mempolicy(0x8000, &(0x7f00000000c0)=0x11, 0x7271)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)

5.368369744s ago: executing program 4 (id=159):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0xe8, {0xe8, 0x5, "b4a3a29fb8d711db48570985763020e45c511b3852940c643c00659d6b9c8c3d22094dc0a06d8a3ea29734bdc3e3c6a42a8b824e24595c2ad8b362253cbf8f587589c87b26e80d8f70dae070ea8831121ec776eb86779e7548551eba76a28b1028a2db89d6c69e86c1d53c3d3406304c716ab829d208711d61ea51865c2778c6a78c263fecacb83b0ed10904488b06169102196a27221e351e418818d2228114680d65d4697370065626ca93a4e550dcbd33a065316a2a0d36d8729d037117fe00edff6bc6cdc06f3e7b188bdfb1ae9d4d2f86b21cf697a35a71d4dea61f08a56d351b6f6a9b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x7, @string={0x7, 0x3, "5068d53089"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x8, 'Hrw-'}, @main=@item_4={0x3, 0x0, 0xc, "cb52cafc"}, @local=@item_4={0x3, 0x2, 0x5, "7cfd9657"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0x4, "bc840fff"}, @main=@item_012={0x2, 0x0, 0xc, "fefa"}, @local=@item_012={0x1, 0x2, 0x8, "bc"}, @local=@item_012={0x1, 0x2, 0x7, 'R'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0xc5, 0x1, {0x22, 0xb37}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x7, 0xa, "49b9f6a7edc7ff52576a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6b}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xcf}, &(0x7f00000003c0)={0x20, 0x1, 0x4, "47f3102c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400)
ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0)

4.405478244s ago: executing program 5 (id=160):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x2, 0x2, 0x4, 0x5}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="a19b2e4f09a8b0c74071564ca94d0ee6e78c52aa8214f1f76de2b8330a9e761b3fb24817c681dfdafd5ff75d3b7c495c53e468eb40d7f65d36bad28940b9e95b5c45d46610631af3ac7fcc7bfbde4bc6cb15696a5ff6db589c1803ff545ce3823404d6823e07d9b8baa40a295aa4c8856d9ea0c3fd4b8cc9f40a3d", 0x7b)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x885, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x13, 0x9, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000001700)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
shutdown(r0, 0x1)

4.229168319s ago: executing program 2 (id=161):
r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000025c0)}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000540)={{0x4000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x6000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xf000, 0x80a0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xeeef0000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x2000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0x80a0000, 0xdddd0000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x1, 0x1}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0x7, 0x8800, 0x0, [0x0, 0x1000000000000, 0x9]})

4.206168795s ago: executing program 5 (id=162):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x88801, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb090f, {0x10000, 0x6fd8e84b}, 0x3, 0xed}})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x95a, 'syz1\x00', 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = gettid()
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

3.300926579s ago: executing program 5 (id=163):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, [0x100000000, 0xefbc, 0x8, 0xa, 0x4, 0x1, 0x200002, 0x8, 0xab9, 0x10000, 0x8001, 0x4, 0x3, 0x1ff]}, &(0x7f0000000080)=0x32c2ee5326629fd4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x7fff}, &(0x7f0000000180)=0x8)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0x2064, 0x1})
mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0, 0x8021852, r3, 0x1000f0000)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0)
getdents64(r7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="c021", 0x2}], 0x1, 0x1, 0x2)

3.161212966s ago: executing program 2 (id=164):
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0)
openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x4010, 0xffffffffffffffff, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000000005000000f59407a0125d9bca29ed421ca373a0c0f1c95f4b660bf55aa5916dd9ac95478dbb0ae2a64fe7a85090203472eb242b0120bf4f878a4d611db7ef7c80fc593391de47faab5ff2c2fabb6e4f1f2b0bbae2a612c4e7524b69d3ea493fbfd916b93ebf0e98f5f3ba01800000669c46f380691ada2e49fd64837179c518d545df2f3c6ca46d57223bf89aaa63af670b1be7a72e8010d5f4e50ab0a41a67"])
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.491517006s ago: executing program 4 (id=165):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0)

1.433418686s ago: executing program 5 (id=166):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x13, 0x2, @thr={0x0, 0x0}})
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10)
shutdown(0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x50, 0x0, @fd=r5, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r8}})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x1, &(0x7f0000000000), 0x4)
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_NOTIFY_DELETE(r10, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)

1.382017081s ago: executing program 2 (id=167):
syz_io_uring_setup(0xeec, &(0x7f00000000c0)={0x0, 0x9236, 0x20, 0x80200, 0xffffffff}, 0x0, 0x0)
r0 = getpgid(0xffffffffffffffff)
timer_create(0x5, &(0x7f0000000300)={0x0, 0x8, 0x1, @tid=r0}, &(0x7f0000000340))
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r1, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = dup2(r4, r5)
sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0)
sendto$inet(r4, &(0x7f0000001600)='\t', 0x1, 0x11, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "d80f59276094db31"}, 0x28)
sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r3, 0x0, 0xfdef)
sendto$inet6(r3, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x0)
socket(0x10, 0x3, 0x0)

1.129092835s ago: executing program 4 (id=168):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi4\x00', 0x100400, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000001140)={0x0, 0x20, 0x10, 0x3, 0xffffffff, 0x3ff, 0x2, 0x1ff, 0x100, 0xa, 0x10, 0xffffffff, &(0x7f00000010c0)=[0x1], 0x1, 0x0})
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000600)=0x7, 0x5, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)

1.105840624s ago: executing program 3 (id=169):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x3, 0x40}}, './file0\x00'})
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x4000)
r3 = syz_clone(0x40022080, &(0x7f0000000200)="e6bd0dd54122864779f07bea546f19b63d66683bd79130d99db2fc2f4fa16c91d6ec207c02b48c49720537f9f61af4b9ca0867d1604cc797be72e6bd3474f94e65ed16eea34935acabdd6b4357354320b23e8449c6acfd394de08fd161e33cf6f43754ffa2e60269540cf8291bacfc2455d720df4cd81892590639200f050eed2c3443a7cbc8dfd5787126e2ce4258e4f676b3ae265576deb604a0b8d18313635fe72cebe5f74f9c", 0xa8, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="84dc0edbb5d53c0fc59299b7214913f2b2527bfeb56ef05bad55e14952952e8fa2885b7be610ff534e79d0fe5b440a5a47cef459cda2e0e807cbb598203b4598ea2afc9ad45a16e620c82d2fee5c19b2a0a5609de9c18fbbb5f9d45b7b0922d87ce2d009cf57c0e295130778c192ea6104956d4b4e79063afac50df86f37c0161f2019c81fa0a4c1c17a3669bd939e0b765391a93e0158c42c22c3bce1ee5ad01ccb8836b6402f2022cf8c99078aba5180170ab7e3014b8ad71217268944ac176d")
capset(&(0x7f0000000440)={0x20071026, r3}, &(0x7f0000000480)={0x4, 0x1, 0x9, 0xe0, 0x9, 0x9fcb})
capset(&(0x7f00000004c0)={0x19980330, r3}, &(0x7f0000000500)={0x2, 0xfffffff8, 0x80000001, 0x5, 0x4, 0x7fffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24008001)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x44)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000007c0), 0x4)
r6 = userfaultfd(0x800)
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000800)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3})
r7 = dup(r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa0c2, 0x7f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c0d5fd8af84861cf07f1bb443094aa4a"}, @NL80211_ATTR_SSID={0x20, 0x34, @random="9b0f1c1248972f344897cb095f3005da8a345fcc16c38b30ed6222e7"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000881}, 0x40801)
r9 = open(&(0x7f00000009c0)='./file0\x00', 0x404400, 0x71)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x1a1000, 0x0)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3d}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000c00)=0x1)
sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048010}, 0x890)
socket$inet6(0xa, 0x80000, 0x1ff)
getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000d40)={'ah\x00'}, &(0x7f0000000d80)=0x1e)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e00), r5)
sendmsg$NLBL_MGMT_C_LISTALL(r12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r13, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008000)

1.08115036s ago: executing program 2 (id=170):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0xb, 0x1}, {0x4, 0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xa, 0x0, 0xfffffffe, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x8, 0x7, 0x2, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f23039205e2c021240850000030109020200010000100009040c0200c17f0c00843d44abebca0d73f09b33af6bdbb3c278768bc229d74d5259e0009f0f27a740c07908f96f77b4c9ab8fd60b5d05cfd44464d2c5281a4d443b52b39ab9e05eda2a53d8da5a7545277cdbb65f3de26d6254b965575cd497f21732cc56b0599d333690c752edce209d49032a3158b7bc9ae3077ec1ec330f39a37d06dbb755319902386ec023aa209355e3e8e58dda259fa669a4cf46779ce2c8eb8a22b788"], 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xdf, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x13, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x5c, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x6, 0x20, 0xcc}, 0x24, &(0x7f0000000200)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6b, "bd0c9f184a2b9d8c8e7412c3ff838c36"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x7, 0x6, 0x3, 0x9}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0xaf, &(0x7f0000000340)=@string={0xaf, 0x3, "9bf7c8aea0caa586209fa1585d601bd7ece49a76dac47cc7fa4d96b332e1ff17c5d993ff20d1621d8544e0e0d620edc88f392ec10dde5cb11eecdcd1e3bcd8066accf00bfb1ad0249ea54e067e000de3b80c7f2a4646c9f7219859ef1c92916432da6629a9f9308a46cdfc4be2639d50fee57c0f885c4f6e571a923b0e354db51373142fc3c42460ab64599b116293ef6778c612ba3b288e29137790ec8223636046151bfa79cf78287d8ee12a"}}, {0xd0, &(0x7f0000000400)=@string={0xd0, 0x3, "d8983f4651ed880de1fb060d2f1f42ab5cee7a286dc746fe8e0fc42dbe0eef12f2f3414ae3c335f5ab007e0f45736b5f40f97ee78871d4cc0f7d6836c1f75f8f5b7c8786f0c3e74fc206c19e887f3df89f27b3bcbd583f75ebceebfbb269293bf9d1f30278a4fffb66c61d3313c059b95a47ee30401cd89b9240aee5fe38b071620dc990e8234feca5e229e40052457f4cd311c88ba049e52e267f4eea988f5b9c66f34469daf4cfbf39a3e967e59bbdddab2594ea15106ebe7a22daa7b548ed93c0adb597d0114a99db41e29ad5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000500)=@string={0x4, 0x3, "edb7"}}, {0xbe, &(0x7f0000000540)=@string={0xbe, 0x3, "171e6e19ae4c20d2131cede3aa6894e3951b0cfbfb0af8e2b8c1596fdce7a976014013bb9f591ae0e92a0198566b67d4e469993a24e36672688eedefbe9760f05221eea0ed14e6da11d002e44d6b48a5b19048c9d9a77759ccd41473f970975379e1e92b378f8f5ea4852fa65582fd92bede89a7379e3254ee033976275add758e568845cbca872661ccc994247d8c8ce62a1ef806700b4ca4428c89dad9e033974c90bfcb449dda35dd03aae801073566ecec3870f49309c0328d02"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_ep_read(r2, 0x4, 0xe6, &(0x7f00000006c0)=""/230)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1, 0x0, 0x0, 0x86463b0909ea3a9f}, 0x40040)

338.680938ms ago: executing program 5 (id=171):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x10000000000002b8, 0x0, &(0x7f0000000140)=[{}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r1, 0x3, 0x1c})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb7af})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, <r2=>0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
creat(&(0x7f0000000440)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})

114.362738ms ago: executing program 1 (id=172):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
r3 = syz_io_uring_setup(0x111, 0x0, &(0x7f00000029c0), &(0x7f0000002a00))
io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000480)=""/149, 0x95}], 0x4, 0x8, 0xfff)
memfd_create(0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x20, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x4, 0x1, 0x1, 0x64, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

0s ago: executing program 5 (id=173):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts.
[   67.453081][ T5824] cgroup: Unknown subsys name 'net'
[   67.574813][ T5824] cgroup: Unknown subsys name 'cpuset'
[   67.583871][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.098459][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.412459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[   71.418893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[   71.648450][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.657276][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.665264][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.673418][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.681160][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.689460][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.701250][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.713080][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.720902][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.728355][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.736670][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.743776][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.763698][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.767388][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.780334][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.788913][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.797293][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.821845][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.863683][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.865890][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.878084][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.887043][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.895300][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.902647][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.919281][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.232449][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   72.510931][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.519885][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.527810][ T5834] bridge_slave_0: entered allmulticast mode
[   72.536810][ T5834] bridge_slave_0: entered promiscuous mode
[   72.545507][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.552718][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.559890][ T5834] bridge_slave_1: entered allmulticast mode
[   72.567530][ T5834] bridge_slave_1: entered promiscuous mode
[   72.708039][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   72.729146][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.742784][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.762056][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   72.792070][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   72.902185][ T5834] team0: Port device team_slave_0 added
[   72.908273][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   72.950237][ T5834] team0: Port device team_slave_1 added
[   73.015222][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.024084][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.031214][ T5844] bridge_slave_0: entered allmulticast mode
[   73.039227][ T5844] bridge_slave_0: entered promiscuous mode
[   73.107152][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.114401][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.121666][ T5844] bridge_slave_1: entered allmulticast mode
[   73.128573][ T5844] bridge_slave_1: entered promiscuous mode
[   73.136435][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.143732][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.170957][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.229240][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.236262][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.262435][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.286424][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.294136][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.301283][ T5843] bridge_slave_0: entered allmulticast mode
[   73.308469][ T5843] bridge_slave_0: entered promiscuous mode
[   73.315997][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.324136][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.331849][ T5838] bridge_slave_0: entered allmulticast mode
[   73.338767][ T5838] bridge_slave_0: entered promiscuous mode
[   73.362656][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.377662][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.387399][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.394655][ T5843] bridge_slave_1: entered allmulticast mode
[   73.401991][ T5843] bridge_slave_1: entered promiscuous mode
[   73.409376][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.417686][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.425014][ T5838] bridge_slave_1: entered allmulticast mode
[   73.432472][ T5838] bridge_slave_1: entered promiscuous mode
[   73.456749][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.568728][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.580854][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.594073][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.609008][ T5834] hsr_slave_0: entered promiscuous mode
[   73.616034][ T5834] hsr_slave_1: entered promiscuous mode
[   73.638337][ T5844] team0: Port device team_slave_0 added
[   73.644684][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.652213][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.659347][ T5847] bridge_slave_0: entered allmulticast mode
[   73.666435][ T5847] bridge_slave_0: entered promiscuous mode
[   73.675591][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.722013][ T5854] Bluetooth: hci0: command tx timeout
[   73.732897][ T5844] team0: Port device team_slave_1 added
[   73.738998][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.746515][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.753967][ T5847] bridge_slave_1: entered allmulticast mode
[   73.760878][ T5847] bridge_slave_1: entered promiscuous mode
[   73.798097][ T5838] team0: Port device team_slave_0 added
[   73.850874][ T5843] team0: Port device team_slave_0 added
[   73.859896][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.877663][ T5838] team0: Port device team_slave_1 added
[   73.884386][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.892246][ T5854] Bluetooth: hci1: command tx timeout
[   73.895686][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.923948][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.937261][ T5843] team0: Port device team_slave_1 added
[   73.957580][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.966760][ T5854] Bluetooth: hci3: command tx timeout
[   73.967018][ T5854] Bluetooth: hci4: command tx timeout
[   73.971459][ T5837] Bluetooth: hci2: command tx timeout
[   74.020361][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.029283][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.057850][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.098303][ T5847] team0: Port device team_slave_0 added
[   74.129347][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.136780][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.163188][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.175791][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.182793][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.209112][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.222797][ T5847] team0: Port device team_slave_1 added
[   74.242006][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.248971][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.274925][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.288463][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.295558][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.321568][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.406038][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.413504][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.439577][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.498772][ T5844] hsr_slave_0: entered promiscuous mode
[   74.505513][ T5844] hsr_slave_1: entered promiscuous mode
[   74.511942][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.519685][ T5844] Cannot create hsr debugfs directory
[   74.525991][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.533190][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.559332][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.639365][ T5843] hsr_slave_0: entered promiscuous mode
[   74.645642][ T5843] hsr_slave_1: entered promiscuous mode
[   74.652917][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.660477][ T5843] Cannot create hsr debugfs directory
[   74.671217][ T5838] hsr_slave_0: entered promiscuous mode
[   74.677632][ T5838] hsr_slave_1: entered promiscuous mode
[   74.684015][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.691636][ T5838] Cannot create hsr debugfs directory
[   74.835000][ T5847] hsr_slave_0: entered promiscuous mode
[   74.841198][ T5847] hsr_slave_1: entered promiscuous mode
[   74.847840][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.856020][ T5847] Cannot create hsr debugfs directory
[   75.116424][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.147216][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.158271][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.188909][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.284845][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.296950][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.308039][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.333713][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.447027][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.457626][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.486020][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.499859][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.586237][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.598733][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.618599][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.629124][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.674617][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.760257][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.774539][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.787386][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.800797][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   75.808393][ T5837] Bluetooth: hci0: command tx timeout
[   75.826821][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.840854][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.848388][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.867392][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.874561][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.911540][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.964204][ T5837] Bluetooth: hci1: command tx timeout
[   75.968918][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   75.995657][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.002847][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.038076][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.047895][ T5837] Bluetooth: hci2: command tx timeout
[   76.049637][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.054517][ T5854] Bluetooth: hci4: command tx timeout
[   76.060808][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.066076][ T5837] Bluetooth: hci3: command tx timeout
[   76.145142][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   76.170416][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.199221][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.206410][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.265501][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.272744][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.298082][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   76.348530][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.355718][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.391173][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.398379][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.434503][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.527999][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.558213][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   76.625245][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.632446][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.649822][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.657022][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.678063][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.876669][ T5834] veth0_vlan: entered promiscuous mode
[   76.909743][ T5834] veth1_vlan: entered promiscuous mode
[   76.999955][ T5834] veth0_macvtap: entered promiscuous mode
[   77.038530][ T5834] veth1_macvtap: entered promiscuous mode
[   77.103232][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.126981][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.146976][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.180407][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.224886][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.295357][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.305104][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.318718][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.338965][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.370344][ T5844] veth0_vlan: entered promiscuous mode
[   77.402961][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.461054][ T5844] veth1_vlan: entered promiscuous mode
[   77.473866][ T5838] veth0_vlan: entered promiscuous mode
[   77.537530][ T5838] veth1_vlan: entered promiscuous mode
[   77.625059][ T5847] veth0_vlan: entered promiscuous mode
[   77.643084][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.658175][ T5847] veth1_vlan: entered promiscuous mode
[   77.666036][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.674219][ T5843] veth0_vlan: entered promiscuous mode
[   77.698562][ T5844] veth0_macvtap: entered promiscuous mode
[   77.736963][ T5838] veth0_macvtap: entered promiscuous mode
[   77.745885][ T5843] veth1_vlan: entered promiscuous mode
[   77.753489][ T5844] veth1_macvtap: entered promiscuous mode
[   77.761131][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.773989][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.778010][ T5838] veth1_macvtap: entered promiscuous mode
[   77.855833][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.868478][ T5847] veth0_macvtap: entered promiscuous mode
[   77.882964][ T5837] Bluetooth: hci0: command tx timeout
[   77.893106][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.893679][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.908467][ T5847] veth1_macvtap: entered promiscuous mode
[   77.928376][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.956863][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.968553][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.978373][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.988941][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.000522][ T5843] veth0_macvtap: entered promiscuous mode
[   78.016119][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.041974][ T5837] Bluetooth: hci1: command tx timeout
[   78.056025][ T5843] veth1_macvtap: entered promiscuous mode
[   78.076291][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.085717][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.095223][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.104442][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.123062][ T5837] Bluetooth: hci2: command tx timeout
[   78.129119][ T5854] Bluetooth: hci3: command tx timeout
[   78.129127][ T5852] Bluetooth: hci4: command tx timeout
[   78.155236][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.166062][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.198057][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.224559][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.268008][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.283281][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.292350][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.301052][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.317259][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.327991][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.337086][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.346453][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.454202][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.475946][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.529183][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.537621][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.572395][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.587161][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.651898][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.660886][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.704058][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.719693][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.790580][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.814628][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.010064][    C1] sd 0:0:1:0: [sda] tag#6368 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   79.020602][    C1] sd 0:0:1:0: [sda] tag#6368 CDB: Write(6) 0a 0a 15 00 06 00 00 00 00 00 00 00
[   79.103984][ T5960] netlink: 'syz.3.4': attribute type 9 has an invalid length.
[   79.108638][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.126790][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.159335][ T5960] bond_slave_0: entered promiscuous mode
[   79.165157][ T5960] bond_slave_1: entered promiscuous mode
[   79.180286][ T5960] macvlan2: entered promiscuous mode
[   79.185875][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.202121][ T5960] bond0: entered promiscuous mode
[   79.210395][ T5960] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.226550][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.247366][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.283182][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.370916][ T5966] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.451927][ T5845] usb 3-1: device descriptor read/64, error -71
[   80.015688][ T5854] Bluetooth: hci0: command tx timeout
[   80.119958][   T48] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   80.159556][ T5854] Bluetooth: hci1: command tx timeout
[   80.202499][ T5854] Bluetooth: hci3: command tx timeout
[   80.243996][ T5854] Bluetooth: hci2: command tx timeout
[   80.249535][ T5854] Bluetooth: hci4: command tx timeout
[   80.263206][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.863577][ T5845] usb 3-1: device descriptor read/64, error -71
[   80.864317][   T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.888415][   T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.899912][   T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   80.977099][ T5845] usb usb3-port1: attempt power cycle
[   81.011871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   81.032955][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   81.082233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   81.246899][   T48] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40
[   81.318432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   81.428619][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.446279][   T48] usb 1-1: Product: syz
[   81.478486][   T48] usb 1-1: Manufacturer: syz
[   81.485979][ T5993] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9'.
[   81.511779][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.520309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.560154][   T48] usb 1-1: SerialNumber: syz
[   81.582160][ T5966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   81.783385][ T5845] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.802142][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.961792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   82.116427][ T5845] usb 3-1: device not accepting address 4, error -71
[   82.124374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   82.219259][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[   82.372753][ T6001] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.521886][ T5854] Bluetooth: hci4: command 0x0405 tx timeout
[   82.732124][   T48] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[   82.760789][   T48] cdc_ncm 1-1:1.0: bind() failure
[   82.783402][   T48] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   82.783448][   T48] cdc_ncm 1-1:1.1: bind() failure
[   82.791098][   T48] usb 1-1: USB disconnect, device number 2
[   83.091416][   T30] audit: type=1326 audit(1752751232.019:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="syz.4.14" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60abd8e929 code=0x0
[   83.131895][ T5845] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.166887][ T5845] usb 3-1: Using ep0 maxpacket: 16
[   83.175905][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.199525][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.220612][ T5845] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[   83.238640][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.419649][ T5845] usb 3-1: config 0 descriptor??
[   85.583654][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.590832][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.598026][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.605118][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.610757][ T6032] xt_l2tp: invalid flags combination: 8
[   85.612204][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.612242][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.612265][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.643079][ T5845] hid-led 0003:1294:1320.0001: unknown main item tag 0x0
[   85.656325][ T5845] hid-led 0003:1294:1320.0001: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0
[   85.666759][ T6032] comedi comedi1: Minor -1 is invalid!
[   85.672968][ T5845] hid-led 0003:1294:1320.0001: Riso Kagaku Webmail Notifier initialized
[   85.686851][ T5845] usb 3-1: USB disconnect, device number 5
[   85.741287][   T13] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[   85.787378][   T12] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[   85.822113][   T13] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[   87.155728][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.379385][   T10] cfg80211: failed to load regulatory.db
[   87.451569][    T9] usb 5-1: Using ep0 maxpacket: 32
[   87.466341][    T9] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[   87.858147][    T9] usb 5-1: config 0 has no interface number 0
[   87.914429][    T9] usb 5-1: config 0 interface 230 has no altsetting 0
[   88.437488][    T9] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   88.561383][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.569385][    T9] usb 5-1: Product: syz
[   88.641494][    T9] usb 5-1: Manufacturer: syz
[   88.649553][ T6039] fido_id[6039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   88.705249][    T9] usb 5-1: SerialNumber: syz
[   88.722543][    T9] usb 5-1: config 0 descriptor??
[   88.783928][    T9] ums-usbat 5-1:0.230: USB Mass Storage device detected
[   88.829400][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.866848][    T9] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[   88.954650][    T9] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[   89.010553][    T9] usb 5-1: USB disconnect, device number 2
[   89.058722][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.115869][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.208318][ T6062] Zero length message leads to an empty skb
[   89.533153][ T6063] FAULT_INJECTION: forcing a failure.
[   89.533153][ T6063] name failslab, interval 1, probability 0, space 0, times 1
[   89.546386][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.3.30 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[   89.546410][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   89.546426][ T6063] Call Trace:
[   89.546437][ T6063]  <TASK>
[   89.546444][ T6063]  dump_stack_lvl+0x189/0x250
[   89.546466][ T6063]  ? irqentry_exit+0x74/0x90
[   89.546493][ T6063]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.546528][ T6063]  should_fail_ex+0x414/0x560
[   89.546555][ T6063]  should_failslab+0xa8/0x100
[   89.546580][ T6063]  kmem_cache_alloc_noprof+0x73/0x3c0
[   89.546601][ T6063]  ? alloc_empty_file+0x55/0x1d0
[   89.546622][ T6063]  alloc_empty_file+0x55/0x1d0
[   89.546648][ T6063]  path_openat+0x107/0x3830
[   89.546666][ T6063]  ? arch_stack_walk+0xfc/0x150
[   89.546711][ T6063]  ? kasan_save_track+0x4f/0x80
[   89.546730][ T6063]  ? kasan_save_track+0x3e/0x80
[   89.546747][ T6063]  ? __kasan_slab_alloc+0x6c/0x80
[   89.546767][ T6063]  ? getname_flags+0xb8/0x540
[   89.546782][ T6063]  ? __pfx_path_openat+0x10/0x10
[   89.546800][ T6063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.546836][ T6063]  do_filp_open+0x1fa/0x410
[   89.546853][ T6063]  ? __lock_acquire+0xab9/0xd20
[   89.546871][ T6063]  ? __pfx_do_filp_open+0x10/0x10
[   89.546911][ T6063]  ? _raw_spin_unlock+0x28/0x50
[   89.546931][ T6063]  ? alloc_fd+0x64c/0x6c0
[   89.546965][ T6063]  do_sys_openat2+0x121/0x1c0
[   89.546985][ T6063]  ? __pfx_do_sys_openat2+0x10/0x10
[   89.547010][ T6063]  ? rcu_is_watching+0x15/0xb0
[   89.547032][ T6063]  __x64_sys_creat+0x8f/0xc0
[   89.547054][ T6063]  do_syscall_64+0xfa/0x3b0
[   89.547071][ T6063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.547086][ T6063]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[   89.547101][ T6063]  ? clear_bhb_loop+0x60/0xb0
[   89.547121][ T6063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.547137][ T6063] RIP: 0033:0x7fab1ef8e929
[   89.547156][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.547169][ T6063] RSP: 002b:00007fab1fe63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   89.547187][ T6063] RAX: ffffffffffffffda RBX: 00007fab1f1b6080 RCX: 00007fab1ef8e929
[   89.547199][ T6063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000880
[   89.547209][ T6063] RBP: 00007fab1fe63090 R08: 0000000000000000 R09: 0000000000000000
[   89.547219][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.547229][ T6063] R13: 0000000000000000 R14: 00007fab1f1b6080 R15: 00007ffc17857f18
[   89.547256][ T6063]  </TASK>
[   90.230250][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.363844][ T5991] bridge_slave_1: left allmulticast mode
[   92.369658][ T5991] bridge_slave_1: left promiscuous mode
[   92.437436][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.451639][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.459540][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.468417][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.476389][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.502175][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.663868][ T5991] bridge_slave_0: left allmulticast mode
[   92.669665][ T5991] bridge_slave_0: left promiscuous mode
[   92.676135][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.413460][ T6102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.427301][ T6102] evm: overlay not supported
[   94.187092][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43'.
[   94.328897][ T6115] =======================================================
[   94.328897][ T6115] WARNING: The mand mount option has been deprecated and
[   94.328897][ T6115]          and is ignored by this kernel. Remove the mand
[   94.328897][ T6115]          option from the mount to silence this warning.
[   94.328897][ T6115] =======================================================
[   94.366382][ T6115] new mount options do not match the existing superblock, will be ignored
[   94.532384][ T5837] Bluetooth: hci0: command tx timeout
[   94.575131][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.590074][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.603105][ T5991] bond0 (unregistering): Released all slaves
[   94.617344][ T6094] netlink: 'syz.3.38': attribute type 12 has an invalid length.
[   96.067387][ T6126] capability: warning: `syz.4.47' uses deprecated v2 capabilities in a way that may be insecure
[   96.106931][ T6126] 9pnet_rdma: rdma_create_trans (6126): problem binding to privport: 13
[   97.066808][ T5837] Bluetooth: hci0: command tx timeout
[   99.081524][ T5837] Bluetooth: hci0: command tx timeout
[  101.161443][ T5837] Bluetooth: hci0: command tx timeout
[  102.324687][ T6163] netlink: 'syz.2.52': attribute type 10 has an invalid length.
[  103.712606][ T6162] bridge1: the hash_elasticity option has been deprecated and is always 16
[  103.886887][ T6163] team0: Port device geneve1 added
[  104.052761][ T6090] chnl_net:caif_netlink_parms(): no params data found
[  104.231845][ T6163] syz.2.52 (6163) used greatest stack depth: 19800 bytes left
[  105.330522][ T5991] hsr_slave_0: left promiscuous mode
[  105.486595][ T5991] hsr_slave_1: left promiscuous mode
[  105.512034][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.519519][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.914429][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.948753][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.941301][ T5991] veth1_macvtap: left promiscuous mode
[  106.978911][ T5991] veth0_macvtap: left promiscuous mode
[  107.025049][ T5991] veth1_vlan: left promiscuous mode
[  107.068778][ T5991] veth0_vlan: left promiscuous mode
[  108.289544][ T6213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.63'.
[  108.428237][ T6214] new mount options do not match the existing superblock, will be ignored
[  108.870038][ T5991] team0 (unregistering): Port device team_slave_1 removed
[  108.910164][ T5991] team0 (unregistering): Port device team_slave_0 removed
[  109.228809][ T6194] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  109.246137][ T6194] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.815072][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.937898][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.024817][ T6090] bridge_slave_0: entered allmulticast mode
[  110.101721][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.137315][ T6090] bridge_slave_0: entered promiscuous mode
[  110.287834][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.305158][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short
[  110.338720][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.352182][ T5892] usb 4-1: no configurations
[  110.375022][ T6090] bridge_slave_1: entered allmulticast mode
[  110.381139][ T5892] usb 4-1: can't read configurations, error -22
[  110.419815][ T6090] bridge_slave_1: entered promiscuous mode
[  110.579077][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.793327][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.383384][ T6090] team0: Port device team_slave_0 added
[  111.547592][ T6090] team0: Port device team_slave_1 added
[  111.709845][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.732216][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.879529][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.937125][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.986779][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.012769][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.106007][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.566678][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.75'.
[  112.635054][ T6283] new mount options do not match the existing superblock, will be ignored
[  113.071942][ T6090] hsr_slave_0: entered promiscuous mode
[  113.078659][ T6090] hsr_slave_1: entered promiscuous mode
[  114.692112][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  115.012437][ T5948] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.235814][ T5948] usb 4-1: unable to get BOS descriptor or descriptor too short
[  115.257949][ T5948] usb 4-1: config 6 has an invalid interface number: 88 but max is 0
[  115.270947][ T5948] usb 4-1: config 6 has no interface number 0
[  115.305048][ T5948] usb 4-1: config 6 interface 88 has no altsetting 0
[  115.347871][ T5948] usb 4-1: New USB device found, idVendor=12d1, idProduct=0081, bcdDevice=af.d5
[  115.368105][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.385241][ T5948] usb 4-1: Product: syz
[  115.431918][ T5948] usb 4-1: Manufacturer: syz
[  115.436588][ T5948] usb 4-1: SerialNumber: syz
[  115.593516][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  115.628710][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.629387][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  115.698872][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.813324][ T6291] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  115.832868][ T6291] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  116.027081][ T5899] usb 2-1: Using ep0 maxpacket: 8
[  116.041888][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  116.051761][ T5899] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  116.064802][ T5899] usb 2-1: config 179 has no interface number 0
[  116.090453][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  116.104143][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  116.147628][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  116.224616][ T5899] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  116.319412][ T5948] usb-storage 4-1:6.88: USB Mass Storage device detected
[  116.325015][ T5899] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  116.382930][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.460075][ T6307] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  116.849425][ T5948] usb 4-1: USB disconnect, device number 4
[  117.008434][ T5899] usb 2-1: USB disconnect, device number 2
[  117.014452][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  117.014504][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  117.117981][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.309479][ T6090] 8021q: adding VLAN 0 to HW filter on device team0
[  117.461708][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.468899][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.584229][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.591439][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.733333][ T6391] overlayfs: failed to resolve './file0': -2
[  119.843543][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.792408][ T6415] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET)
[  121.831714][ T5996] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.143777][ T5996] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  123.035798][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.070285][ T5996] usb 5-1: config 0 descriptor??
[  123.116468][ T5996] gspca_main: sunplus-2.14.0 probing 055f:c420
[  123.180674][ T6441] Bluetooth: MGMT ver 1.23
[  123.399439][ T6090] veth0_vlan: entered promiscuous mode
[  123.460208][ T6444] input: syz0 as /devices/virtual/input/input13
[  123.473417][ T6090] veth1_vlan: entered promiscuous mode
[  124.774697][ T6090] veth0_macvtap: entered promiscuous mode
[  124.780546][ T5996] gspca_sunplus: reg_w_riv err -110
[  124.789740][ T5996] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  124.801154][ T6090] veth1_macvtap: entered promiscuous mode
[  124.980541][ T5996] usb 5-1: USB disconnect, device number 3
[  125.001588][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.045977][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.153012][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.164591][ T6455] mmap: syz.2.110 (6455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  125.587818][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.704795][ T6463] 9pnet_fd: Insufficient options for proto=fd
[  125.911956][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.979276][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.441575][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  126.593224][ T5899] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  126.623872][ T5899] usb 3-1: config 0 has no interface number 0
[  126.644617][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.666871][ T5899] usb 3-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  126.724873][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.757620][ T5899] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6
[  126.770130][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.795256][ T5899] usb 3-1: Product: syz
[  126.807155][ T5899] usb 3-1: Manufacturer: syz
[  126.820447][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.839837][ T5899] usb 3-1: SerialNumber: syz
[  126.847280][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.992475][ T5899] usb 3-1: config 0 descriptor??
[  127.095179][ T6483] [U] :
[  127.098127][ T6483] [U] 
[  127.100833][ T6483] [U] 
[  127.103532][ T6483] [U] 
[  127.106628][ T6483] [U] 
[  127.109339][ T6483] [U] 
[  127.112040][ T6483] [U] 
[  127.114740][ T6483] [U] 
[  127.119423][ T6483] [U] 
[  127.122122][ T6483] [U] 
[  127.124789][ T6483] [U] 
[  127.127455][ T6483] [U] 
[  127.130735][ T6483] [U] 
[  127.133470][ T6483] [U] 
[  127.136168][ T6483] [U] 
[  127.138868][ T6483] [U] 
[  127.142040][ T6483] [U] 
[  127.144747][ T6483] [U] 
[  127.147444][ T6483] [U] 
[  127.150145][ T6483] [U] 
[  127.167209][ T6483] [U] 
[  127.169953][ T6483] [U] 
[  127.172655][ T6483] [U] 
[  127.175354][ T6483] [U] 
[  127.178741][ T6483] [U] 
[  127.181458][ T6483] [U] 
[  127.184159][ T6483] [U] 
[  127.186857][ T6483] [U] 
[  127.190131][ T6483] [U] 
[  127.192846][ T6483] [U] 
[  127.195550][ T6483] [U] 
[  127.198248][ T6483] [U] 
[  127.202938][ T6483] [U] 
[  127.205661][ T6483] [U] 
[  127.208360][ T6483] [U] 
[  127.211062][ T6483] [U] 
[  127.214877][ T6483] [U] 
[  127.217600][ T6483] [U] 
[  127.220301][ T6483] [U] 
[  127.223003][ T6483] [U] 
[  127.226223][ T6483] [U] 
[  127.228935][ T6483] [U] 
[  127.231634][ T6483] [U] 
[  127.234333][ T6483] [U] 
[  127.237506][ T6483] [U] 
[  127.240217][ T6483] [U] 
[  127.242921][ T6483] [U] 
[  127.245624][ T6483] [U] 
[  127.248948][ T6483] [U] 
[  127.251660][ T6483] [U] 
[  127.254363][ T6483] [U] 
[  127.257063][ T6483] [U] 
[  127.260220][ T6483] [U] 
[  127.262932][ T6483] [U] 
[  127.265636][ T6483] [U] 
[  127.268331][ T6483] [U] 
[  127.271781][ T6483] [U] 
[  127.274495][ T6483] [U] 
[  127.277195][ T6483] [U] 
[  127.279896][ T6483] [U] 
[  127.283086][ T6483] [U] 
[  127.285792][ T6483] [U] 
[  127.288491][ T6483] [U] 
[  127.291190][ T6483] [U] 
[  127.294481][ T6483] [U] 
[  127.297191][ T6483] [U] 
[  127.299897][ T6483] [U] 
[  127.302595][ T6483] [U] 
[  127.306462][ T6483] [U] 
[  127.309172][ T6483] [U] 
[  127.311872][ T6483] [U] 
[  127.314580][ T6483] [U] 
[  127.318510][ T6483] [U] 
[  127.321223][ T6483] [U] 
[  127.323932][ T6483] [U] 
[  127.326629][ T6483] [U] 
[  127.329872][ T6483] [U] 
[  127.332595][ T6483] [U] 
[  127.335298][ T6483] [U] 
[  127.337999][ T6483] [U] 
[  127.341154][ T6483] [U] 
[  127.343864][ T6483] [U] 
[  127.346573][ T6483] [U] 
[  127.349275][ T6483] [U] 
[  127.352378][ T6483] [U] 
[  127.355087][ T6483] [U] 
[  127.357786][ T6483] [U] 
[  127.360486][ T6483] [U] 
[  127.363724][ T6483] [U] 
[  127.366435][ T6483] [U] 
[  127.369134][ T6483] [U] 
[  127.371833][ T6483] [U] 
[  127.375036][ T6483] [U] 
[  127.377743][ T6483] [U] 
[  127.380446][ T6483] [U] 
[  127.383147][ T6483] [U] 
[  127.386366][ T6483] [U] 
[  127.389076][ T6483] [U] 
[  127.391779][ T6483] [U] 
[  127.394477][ T6483] [U] 
[  127.397181][ T6470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  127.405677][ T6483] [U] 
[  127.408398][ T6483] [U] 
[  127.411098][ T6483] [U] 
[  127.413798][ T6483] [U] 
[  127.417090][ T6483] [U] 
[  127.419823][ T6483] [U] 
[  127.422533][ T6483] [U] 
[  127.425242][ T6483] [U] 
[  127.428470][ T6483] [U] 
[  127.431192][ T6483] [U] 
[  127.433896][ T6483] [U] 
[  127.436601][ T6483] [U] 
[  127.439869][ T6483] [U] 
[  127.442590][ T6483] [U] 
[  127.445288][ T6483] [U] 
[  127.447990][ T6483] [U] 
[  127.451199][ T6483] [U] 
[  127.453906][ T6483] [U] 
[  127.456608][ T6483] [U] 
[  127.459306][ T6483] [U] 
[  127.462533][ T6483] [U] 
[  127.465244][ T6483] [U] 
[  127.467948][ T6483] [U] 
[  127.470645][ T6483] [U] 
[  127.473686][ T6483] [U] 
[  127.476393][ T6483] [U] 
[  127.479095][ T6483] [U] 
[  127.709978][ T6480] [U] 
[  128.098795][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.125903][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.154902][    T9] usb 3-1: USB disconnect, device number 6
[  129.423638][ T6499] NILFS (nullb0): couldn't find nilfs on the device
[  129.646831][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[  130.610760][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[  131.191619][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  132.120667][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.128'.
[  132.142714][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.128'.
[  132.244213][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  132.601428][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  132.847339][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  133.247408][ T5892] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  133.268460][ T5892] usb 5-1: config 0 has no interface number 0
[  133.278563][ T5892] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  133.289380][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  133.290779][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.304526][ T5892] usb 5-1: Product: syz
[  133.314391][ T5892] usb 5-1: Manufacturer: syz
[  133.324913][ T5892] usb 5-1: SerialNumber: syz
[  133.332515][ T5892] usb 5-1: config 0 descriptor??
[  133.343844][ T5892] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  133.554250][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  133.569206][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  134.540970][ T6571] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  136.141617][   T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  136.541658][   T48] usb 3-1: Using ep0 maxpacket: 8
[  136.723059][   T48] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[  136.967144][   T48] usb 3-1: config 127 has no interface number 1
[  137.109351][   T48] usb 3-1: config 127 interface 171 has no altsetting 0
[  137.288374][   T48] usb 3-1: config 127 interface 0 has no altsetting 0
[  137.621614][   T48] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  137.630737][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.827573][   T48] usb 3-1: Product: syz
[  137.832562][   T48] usb 3-1: Manufacturer: syz
[  137.837206][   T48] usb 3-1: SerialNumber: syz
[  137.991289][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.5.135'.
[  138.042778][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  138.054859][ T5845] usb 5-1: USB disconnect, device number 4
[  138.094812][   T48] xr_serial 3-1:127.171: xr_serial converter detected
[  138.130411][ T5845] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  138.144554][ T6593] new mount options do not match the existing superblock, will be ignored
[  138.155280][   T48] xr_serial ttyUSB2: Failed to set reg 0x1a: -71
[  138.186158][   T48] xr_serial ttyUSB2: probe with driver xr_serial failed with error -71
[  138.214017][ T5845] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  138.251520][ T5845] quatech2 5-1:0.51: device disconnected
[  138.263234][   T48] usb 3-1: USB disconnect, device number 7
[  138.332334][   T48] xr_serial 3-1:127.171: device disconnected
[  139.783031][ T6614] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.144'.
[  139.811694][ T6616] netlink: 92 bytes leftover after parsing attributes in process `syz.2.145'.
[  139.906341][ T6619] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[  139.975166][ T6619] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[  142.479363][ T6651] netlink: 104 bytes leftover after parsing attributes in process `syz.4.151'.
[  143.502186][ T6668] netlink: 'syz.4.154': attribute type 3 has an invalid length.
[  144.501453][ T6674] afs: Unknown parameter '�z��|0�[bF	3-�){�K���E��
[  144.501453][ T6674] �Bo�D�Q�D;��b'
[  145.491489][ T5953] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  145.499074][ T5944] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  145.671402][ T5944] usb 2-1: Using ep0 maxpacket: 32
[  145.774338][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  145.798715][ T5944] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  145.860355][ T5944] usb 2-1: config 0 has no interface number 0
[  145.889277][ T5953] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  145.981301][ T5944] usb 2-1: config 0 interface 85 has no altsetting 0
[  146.033584][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.241553][ T5944] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  146.250724][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.280722][ T5953] usb 5-1: config 0 descriptor??
[  146.292891][ T6684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  146.320850][ T5944] usb 2-1: Product: syz
[  146.361287][ T5944] usb 2-1: Manufacturer: syz
[  146.395849][ T5944] usb 2-1: SerialNumber: syz
[  146.416751][ T5944] usb 2-1: config 0 descriptor??
[  146.493715][ T5944] appletouch 2-1:0.85: Could not find int-in endpoint
[  146.500575][ T5944] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  146.555298][ T5944] usbhid 2-1:0.85: couldn't find an input interrupt endpoint
[  146.571646][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.618152][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.626853][ T6701] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  146.965811][ T5953] elan 0003:04F3:0755.0002: report_id 762802760 is invalid
[  147.240550][ T5953] elan 0003:04F3:0755.0002: item 0 4 1 8 parsing failed
[  148.141888][ T5953] elan 0003:04F3:0755.0002: Hid Parse failed
[  148.163742][ T5953] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22
[  148.246566][ T5953] usb 5-1: USB disconnect, device number 5
[  149.236988][ T5953] usb 2-1: USB disconnect, device number 3
[  149.541436][ T5944] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  149.583788][ T6730] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.722772][ T5944] usb 3-1: Using ep0 maxpacket: 32
[  149.788741][ T5944] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  149.878516][ T6736] ------------[ cut here ]------------
[  149.884358][ T6736] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[  149.894220][ T6736] shift exponent 32 is too large for 32-bit type 'int'
[  149.901511][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.1.172 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  149.901535][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.901546][ T6736] Call Trace:
[  149.901553][ T6736]  <TASK>
[  149.901561][ T6736]  dump_stack_lvl+0x189/0x250
[  149.901587][ T6736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.901605][ T6736]  ? __pfx__printk+0x10/0x10
[  149.901627][ T6736]  ? __pfx_i8254_io8_cb+0x10/0x10
[  149.901647][ T6736]  ? __ubsan_handle_shift_out_of_bounds+0x2c/0x410
[  149.901670][ T6736]  ubsan_epilogue+0xa/0x40
[  149.901690][ T6736]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  149.901726][ T6736]  pcl812_attach+0x1b9e/0x2300
[  149.901757][ T6736]  ? __pfx_pcl812_attach+0x10/0x10
[  149.901791][ T6736]  comedi_device_attach+0x520/0x670
[  149.901814][ T6736]  comedi_unlocked_ioctl+0x686/0xf40
[  149.901846][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  149.901882][ T6736]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.901920][ T6736]  ? rcu_is_watching+0x15/0xb0
[  149.901939][ T6736]  ? trace_irq_disable+0x37/0x110
[  149.901961][ T6736]  ? preempt_schedule_irq+0xde/0x150
[  149.901980][ T6736]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  149.902011][ T6736]  ? irqentry_exit+0x74/0x90
[  149.902034][ T6736]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.902061][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  149.902084][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  149.902106][ T6736]  ? __se_sys_ioctl+0xea/0x170
[  149.902130][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  149.902152][ T6736]  __se_sys_ioctl+0xfc/0x170
[  149.902175][ T6736]  do_syscall_64+0xfa/0x3b0
[  149.902193][ T6736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.902209][ T6736]  ? asm_sysvec_call_function_single+0x1a/0x20
[  149.902224][ T6736]  ? clear_bhb_loop+0x60/0xb0
[  149.902244][ T6736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.902260][ T6736] RIP: 0033:0x7f1b9e78e929
[  149.902276][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.902290][ T6736] RSP: 002b:00007f1b9f554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  149.902308][ T6736] RAX: ffffffffffffffda RBX: 00007f1b9e9b6160 RCX: 00007f1b9e78e929
[  149.902321][ T6736] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  149.902332][ T6736] RBP: 00007f1b9e810ca1 R08: 0000000000000000 R09: 0000000000000000
[  149.902343][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.902353][ T6736] R13: 0000000000000000 R14: 00007f1b9e9b6160 R15: 00007ffca9e0a868
[  149.902382][ T6736]  </TASK>
[  149.902431][ T6736] ---[ end trace ]---
[  150.036619][ T5944] usb 3-1: New USB device found, idVendor=2c5e, idProduct=1202, bcdDevice=85.40
[  150.038366][ T6736] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  150.038392][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.1.172 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  150.038414][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  150.038425][ T6736] Call Trace:
[  150.038434][ T6736]  <TASK>
[  150.038443][ T6736]  dump_stack_lvl+0x99/0x250
[  150.038476][ T6736]  ? __asan_memcpy+0x40/0x70
[  150.038497][ T6736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.038518][ T6736]  ? __pfx__printk+0x10/0x10
[  150.038554][ T6736]  panic+0x2db/0x790
[  150.038578][ T6736]  ? __pfx_panic+0x10/0x10
[  150.038594][ T6736]  ? _printk+0xcf/0x120
[  150.038620][ T6736]  ? __pfx__printk+0x10/0x10
[  150.038643][ T6736]  ? __pfx_i8254_io8_cb+0x10/0x10
[  150.038669][ T6736]  check_panic_on_warn+0x89/0xb0
[  150.038695][ T6736]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  150.038736][ T6736]  pcl812_attach+0x1b9e/0x2300
[  150.038769][ T6736]  ? __pfx_pcl812_attach+0x10/0x10
[  150.038802][ T6736]  comedi_device_attach+0x520/0x670
[  150.038828][ T6736]  comedi_unlocked_ioctl+0x686/0xf40
[  150.038860][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.038896][ T6736]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.038934][ T6736]  ? rcu_is_watching+0x15/0xb0
[  150.038954][ T6736]  ? trace_irq_disable+0x37/0x110
[  150.038977][ T6736]  ? preempt_schedule_irq+0xde/0x150
[  150.039000][ T6736]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  150.039031][ T6736]  ? irqentry_exit+0x74/0x90
[  150.039055][ T6736]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.039082][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.039105][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.039127][ T6736]  ? __se_sys_ioctl+0xea/0x170
[  150.039151][ T6736]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.039173][ T6736]  __se_sys_ioctl+0xfc/0x170
[  150.039196][ T6736]  do_syscall_64+0xfa/0x3b0
[  150.039214][ T6736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.039231][ T6736]  ? asm_sysvec_call_function_single+0x1a/0x20
[  150.039247][ T6736]  ? clear_bhb_loop+0x60/0xb0
[  150.039269][ T6736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.039286][ T6736] RIP: 0033:0x7f1b9e78e929
[  150.039303][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.039317][ T6736] RSP: 002b:00007f1b9f554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.039337][ T6736] RAX: ffffffffffffffda RBX: 00007f1b9e9b6160 RCX: 00007f1b9e78e929
[  150.039350][ T6736] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  150.039362][ T6736] RBP: 00007f1b9e810ca1 R08: 0000000000000000 R09: 0000000000000000
[  150.039373][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.039383][ T6736] R13: 0000000000000000 R14: 00007f1b9e9b6160 R15: 00007ffca9e0a868
[  150.039412][ T6736]  </TASK>
[  150.044301][ T6736] Kernel Offset: disabled