last executing test programs:

14m33.33198213s ago: executing program 0 (id=938):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_pidfd_open(0x0, 0x0)
io_getevents(0x0, 0x4, 0x3, &(0x7f00000019c0)=[{}, {}, {}], 0x0)

14m32.143997848s ago: executing program 0 (id=941):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x80400, 0x0)
ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f00000000c0)={0x4, 0x0})

14m31.968460665s ago: executing program 0 (id=942):
socket(0x2, 0x80805, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x180, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)

14m29.859967743s ago: executing program 0 (id=947):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r0, @ANYBLOB="fc0000000000000000000000000000000000000033"], 0x254}}, 0x40808)

14m29.568107492s ago: executing program 0 (id=950):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006500), 0x0, 0x41)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

14m25.268946696s ago: executing program 0 (id=956):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x10, 0xffffffffffffffff, 0xffffe000)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
munlockall()
fsmount(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000900)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$6lowpan_enable(r4, 0x0, 0x35)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xf956bcad9ca2051d, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
read$msr(r5, &(0x7f0000019680)=""/102381, 0x18fed)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)

14m10.144019188s ago: executing program 32 (id=956):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x10, 0xffffffffffffffff, 0xffffe000)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
munlockall()
fsmount(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000900)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$6lowpan_enable(r4, 0x0, 0x35)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xf956bcad9ca2051d, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
read$msr(r5, &(0x7f0000019680)=""/102381, 0x18fed)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)

14m8.694753091s ago: executing program 1 (id=1002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffd}}}}}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)

14m7.099689819s ago: executing program 1 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_setup(0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xe, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)

14m5.843042302s ago: executing program 1 (id=1008):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r3, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

14m1.81714923s ago: executing program 1 (id=1016):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033"], 0x254}}, 0x40808)

14m1.528985998s ago: executing program 1 (id=1017):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006500), 0x0, 0x41)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x101000, 0x0)

14m0.588615051s ago: executing program 1 (id=1018):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x3)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

13m44.871070482s ago: executing program 33 (id=1018):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x3)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

10m53.88946638s ago: executing program 5 (id=1365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

10m53.141590364s ago: executing program 5 (id=1368):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84)
socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

10m52.007099226s ago: executing program 5 (id=1375):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffc1d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x2000402)
lseek(r0, 0x0, 0x3)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x4}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = timerfd_create(0x1, 0x800)
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000040)=0xde4)

10m49.659450147s ago: executing program 5 (id=1379):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getrlimit(0x6, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
r7 = syz_open_dev$dri(0x0, 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000))

10m45.458024712s ago: executing program 5 (id=1384):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251900005f338895357ecaa9e789240008000300ef0654e7f137d09422e834120ed68b6f74eadad4f724b7839fa1e25f8ee1c5f69f50af6c1b8805df795d2ebdf81309a30a12fbd8cbe53eafc2e6d0c27618944dc0ee417305516d763981a2bbc66c4455499781191ebc73a4edff5999c1de2d108e244415c991c28ebe00fde884ed9af790ee97b5cb8b", @ANYBLOB="06006d00"], 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, 0x0)
syz_io_uring_submit(r5, 0x0, 0x0)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62})
r6 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r8, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
connect$rose(r8, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x5}, 0x4)

10m43.979975978s ago: executing program 5 (id=1389):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

10m27.571668516s ago: executing program 34 (id=1389):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

7m38.475951589s ago: executing program 2 (id=1736):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x8000)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)

7m38.131572753s ago: executing program 2 (id=1740):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x4008800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0xfffffffe}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000a00)='sit0\x00', 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x4e8)
r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x80000000)
close_range(r4, 0xffffffffffffffff, 0x0)

7m37.166077308s ago: executing program 2 (id=1743):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
setpriority(0x0, 0x0, 0x2)

7m35.32396396s ago: executing program 2 (id=1745):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

7m27.607532911s ago: executing program 2 (id=1758):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}})

7m25.419954606s ago: executing program 2 (id=1762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)

7m10.250349423s ago: executing program 35 (id=1762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)

2m19.311876076s ago: executing program 3 (id=2304):
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES64=0x0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2m18.539907962s ago: executing program 3 (id=2307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x203, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1401, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x6808}, 0x30000010)

2m16.851702859s ago: executing program 3 (id=2311):
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket(0x1e, 0x5, 0x400)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000e080047000030fffc0000000690784404df000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, "246717e1ceaf6d2be4f62e196f71f153ee47a665c900", 0x7, 0xffffffff, 0x7fff, 0x774f}, 0x3c)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000001140)=0x8000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

2m16.051895478s ago: executing program 3 (id=2312):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[])
chdir(&(0x7f0000000100)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0xfffffff7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00'}, 0x2c)

2m14.975392534s ago: executing program 3 (id=2316):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m10.102453695s ago: executing program 3 (id=2320):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0x4008800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0xfffffffe}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000a00)='sit0\x00', 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x4e8)
r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x80000000)
close_range(r4, 0xffffffffffffffff, 0x0)

1m54.571985537s ago: executing program 36 (id=2320):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0x4008800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0xfffffffe}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000a00)='sit0\x00', 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x4e8)
r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x80000000)
close_range(r4, 0xffffffffffffffff, 0x0)

26.719927964s ago: executing program 8 (id=2507):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getrlimit(0x6, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
r7 = syz_open_dev$dri(0x0, 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6})
r8 = socket(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000))

25.656751049s ago: executing program 4 (id=2509):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
timer_create(0x0, 0x0, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0)

24.688072415s ago: executing program 8 (id=2510):
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket(0x1e, 0x5, 0x400)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000e080047000030fffc0000000690784404df000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000001140)=0x8000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x21, @time})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

23.569646825s ago: executing program 8 (id=2512):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2b8180, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fff}, @exit]}, 0x0, 0x0, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x0, '\x00', r5, @fallback=0x25, r6, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x6, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, &(0x7f0000000540), 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x40, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25)

16.998589373s ago: executing program 7 (id=2524):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0)
sendmsg$nl_route_sched(r2, 0x0, 0x400c084)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340))
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

16.185410613s ago: executing program 4 (id=2525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[])
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r7, 0x4188aec6, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)

15.949104957s ago: executing program 7 (id=2527):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffc1d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x2000402)
lseek(r0, 0x0, 0x3)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x4}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r2 = timerfd_create(0x1, 0x800)
ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000040)=0xde4)

13.160197752s ago: executing program 8 (id=2532):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
openat(0xffffffffffffff9c, 0x0, 0x101640, 0x1ff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(r1, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d1", 0x2f}, {&(0x7f0000000d00)="7e93ddb16d6dded2586d9a83d6d79a26d8e5f8c7fc7279fe5fe209663600f76ffd8db76b41b6d87176d3d81c389026", 0x2f}], 0x2}}], 0x2, 0x40408e0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RELDISP(r3, 0x5605)

12.311567665s ago: executing program 7 (id=2534):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
close(r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
listen(r1, 0xffffffff)
r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r0}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0)

10.305216993s ago: executing program 7 (id=2535):
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

10.007924493s ago: executing program 9 (id=2536):
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})

9.866522037s ago: executing program 7 (id=2537):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0)
sendmsg$nl_route_sched(r2, 0x0, 0x400c084)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340))
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

9.108004211s ago: executing program 4 (id=2539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x22020600)
setpriority(0x0, 0x0, 0x2)

8.751091507s ago: executing program 9 (id=2540):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010003ca8ca210392a8c3f4ddb0102030109021b00010f08b0060904000601ffc88f800905ff27e065a3332a045eee9911d82b9c5b98dda43d8048ff292c3bb3c01303f48869560f115ad84e80840e79997180c8ea7bbc6030472b7b4ce065b9"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0xafbcb7aa, {{0x2, 0x4e22, @remote}}}, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
timer_settime(0x0, 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$nl_generic(r2, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)

8.028560428s ago: executing program 4 (id=2541):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0)
syz_io_uring_setup(0x49e, 0x0, 0x0, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x20323159, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x80000002, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}})
socket$tipc(0x1e, 0x5, 0x0)

7.984776012s ago: executing program 7 (id=2542):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2b8180, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fff}, @exit]}, 0x0, 0x0, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x0, '\x00', r5, @fallback=0x25, r6, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x6, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, &(0x7f0000000540), 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x40, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25)

7.944913496s ago: executing program 6 (id=2543):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)

6.913911708s ago: executing program 6 (id=2544):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffc1d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x2000402)
lseek(r0, 0x0, 0x3)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x4}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = timerfd_create(0x1, 0x800)
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000040)=0xde4)

6.856084414s ago: executing program 4 (id=2545):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

6.458372663s ago: executing program 4 (id=2546):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@loopback, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0xffffffa3, 0xffff, 0x2, 0x100, 0x2, 0x4000000})

5.534250294s ago: executing program 6 (id=2547):
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

5.075722519s ago: executing program 8 (id=2548):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0xff)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x3}})
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r8}, &(0x7f0000000140)=0x8)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

4.042294581s ago: executing program 8 (id=2549):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0xa, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendfile(r4, r3, 0x0, 0x20000023893)
fallocate(r2, 0x0, 0x7, 0x81)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

3.964091299s ago: executing program 9 (id=2550):
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = io_uring_setup(0x4c4c, &(0x7f0000000280)={0x0, 0xffbffffe, 0x1, 0x0, 0x345})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x100000, 0x2, 0xf, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a2072776d0022e0e429f7dfa3d87d053bf08f"], 0xa)
write$cgroup_devices(r3, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8)

3.74740642s ago: executing program 6 (id=2551):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x22020600)
setpriority(0x0, 0x0, 0x2)

2.595752164s ago: executing program 6 (id=2552):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0)
sendmsg$nl_route_sched(r2, 0x0, 0x400c084)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340))
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

2.377179966s ago: executing program 9 (id=2553):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[])
chdir(0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00'}, 0x2c)

1.233210648s ago: executing program 9 (id=2554):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000})

93.426471ms ago: executing program 6 (id=2555):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0)
syz_io_uring_setup(0x49e, 0x0, 0x0, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x20323159, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x80000002, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}})
socket$tipc(0x1e, 0x5, 0x0)

0s ago: executing program 9 (id=2556):
epoll_create1(0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x45}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000)
syz_io_uring_setup(0x2ced, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x2, 0x11f}, &(0x7f0000000040), &(0x7f0000000280)=<r0=>0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000580)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

xpected cc 0x0c38 length: 249 > 2
[  678.488856][ T9512] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1403'.
[  678.498233][ T9517] netlink: 'syz.4.1402': attribute type 1 has an invalid length.
[  678.506456][ T9517] netlink: 'syz.4.1402': attribute type 2 has an invalid length.
[  678.514290][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1402'.
[  678.523811][ T9518] netlink: 'syz.4.1402': attribute type 1 has an invalid length.
[  678.531821][ T9518] netlink: 'syz.4.1402': attribute type 2 has an invalid length.
[  678.539652][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1402'.
[  679.581018][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[  680.740727][ T9571] tipc: Started in network mode
[  680.745807][ T9571] tipc: Node identity 4, cluster identity 4711
[  680.751984][ T9571] tipc: Node number set to 4
[  681.674253][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[  682.248156][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  683.177638][ T4385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.366032][ T4385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.509991][ T4385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.725259][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[  683.943653][ T9621] netlink: 464 bytes leftover after parsing attributes in process `syz.6.1428'.
[  683.967074][ T9560] chnl_net:caif_netlink_parms(): no params data found
[  685.341641][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'.
[  685.355813][ T4385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.814087][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[  685.822571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.852497][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.564321][ T9641] xt_socket: unknown flags 0xc
[  686.755244][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.794576][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.802900][ T9560] device bridge_slave_0 entered promiscuous mode
[  686.942859][ T1041] block nbd4: Attempted send on invalid socket
[  686.949324][ T1041] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  686.964238][ T9661] SQUASHFS error: Failed to read block 0x0: -5
[  687.017568][ T9661] unable to read squashfs_super_block
[  687.018357][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.030877][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.039287][ T9560] device bridge_slave_1 entered promiscuous mode
[  687.212684][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  688.336689][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.697318][ T9674] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1442'.
[  689.168436][ T9560] team0: Port device team_slave_0 added
[  689.961287][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  689.981448][ T9560] team0: Port device team_slave_1 added
[  690.133355][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.140965][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.169881][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.199705][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.208570][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.235441][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.383086][ T9560] device hsr_slave_0 entered promiscuous mode
[  690.415716][ T9560] device hsr_slave_1 entered promiscuous mode
[  690.471424][ T9560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  690.487695][ T9560] Cannot create hsr debugfs directory
[  693.459807][ T4385] device hsr_slave_0 left promiscuous mode
[  693.470880][ T4385] device hsr_slave_1 left promiscuous mode
[  693.478219][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.486445][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.501724][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.524261][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.548905][ T4385] device team0 left promiscuous mode
[  693.570095][ T4385] device team_slave_0 left promiscuous mode
[  693.590684][ T4385] device team_slave_1 left promiscuous mode
[  693.659661][ T4385] bridge0: port 3(team0) entered disabled state
[  693.690427][ T4385] device bridge_slave_1 left promiscuous mode
[  693.814420][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.891758][ T4385] device bridge_slave_0 left promiscuous mode
[  693.910104][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.151649][ T4385] device veth1_macvtap left promiscuous mode
[  694.171592][ T4385] device veth0_macvtap left promiscuous mode
[  694.201761][ T4385] device veth1_vlan left promiscuous mode
[  694.232383][ T4385] device veth0_vlan left promiscuous mode
[  696.481982][ T4385] team0 (unregistering): Port device team_slave_1 removed
[  696.530904][ T4385] team0 (unregistering): Port device team_slave_0 removed
[  696.574335][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  696.626326][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  697.137580][ T4385] bond0 (unregistering): Released all slaves
[  697.209179][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'.
[  697.230189][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.291785][ T9707] device bridge_slave_1 left promiscuous mode
[  697.298912][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.565780][ T9560] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  698.112947][ T9560] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  698.160758][ T9560] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  698.255299][ T9560] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  700.020033][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  700.424165][ T9145] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  700.533593][ T9744] netlink: 'syz.4.1454': attribute type 20 has an invalid length.
[  700.556900][ T9744] IPv6: NLM_F_CREATE should be specified when creating new route
[  700.614016][ T9145] usb 3-1: Using ep0 maxpacket: 32
[  700.624180][ T9145] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  700.637033][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.847275][ T9145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.867595][ T9145] usb 3-1: config 0 has no interface number 0
[  700.880317][ T9145] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  700.934864][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  700.946135][ T9145] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  700.959053][ T9145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.989634][ T9145] usb 3-1: config 0 descriptor??
[  700.995677][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  701.149550][ T9145] usbhid 3-1:0.1: couldn't find an input interrupt endpoint
[  701.497789][ T9560] 8021q: adding VLAN 0 to HW filter on device team0
[  701.588303][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.607602][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.638924][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  701.649934][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  701.666628][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.673818][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.716522][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  701.749701][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  701.780088][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.787265][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.795403][ T9145] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  701.824642][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  701.845148][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  701.885009][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  701.914750][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  701.956244][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  701.982584][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  701.993934][ T9145] usb 4-1: Using ep0 maxpacket: 8
[  702.008859][ T9145] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  702.054280][ T9145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.065237][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  702.114724][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  702.132690][ T9560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  702.136099][ T9145] pvrusb2: Hardware description: Terratec Grabster AV400
[  702.171551][ T9145] pvrusb2: **********
[  702.186903][ T9145] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  702.207497][ T9560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  702.224063][ T9145] pvrusb2: Important functionality might not be entirely working.
[  702.238155][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  702.256913][ T9145] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  702.257343][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  702.299269][ T9145] pvrusb2: **********
[  702.342370][ T2310] pvrusb2: Invalid write control endpoint
[  702.356749][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  702.378696][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  702.391619][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  702.574314][ T9776] pvrusb2: Invalid write control endpoint
[  702.582698][ T9145] usb 4-1: USB disconnect, device number 6
[  703.676387][ T9796] capability: warning: `syz.3.1462' uses deprecated v2 capabilities in a way that may be insecure
[  704.037868][ T2310] pvrusb2: Invalid write control endpoint
[  704.082974][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  704.191178][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  704.246093][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  704.373947][ T2310] pvrusb2: Device being rendered inoperable
[  704.441723][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  704.527442][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  704.559841][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  704.567757][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  704.588920][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.681024][  T951] usb 3-1: USB disconnect, device number 2
[  704.682736][ T2310] pvrusb2: Attached sub-driver cx25840
[  704.693101][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  704.784663][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  704.844869][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'.
[  708.392524][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  709.542978][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  709.572617][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  709.669046][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  709.690208][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  709.750290][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  709.873204][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  709.937647][ T9560] device veth0_vlan entered promiscuous mode
[  709.948704][ T9876] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  709.996820][ T9560] device veth1_vlan entered promiscuous mode
[  710.095736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  710.134786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  710.143322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  710.478468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  710.785043][ T9560] device veth0_macvtap entered promiscuous mode
[  710.826612][ T9560] device veth1_macvtap entered promiscuous mode
[  710.857642][ T9883] netlink: 'syz.3.1475': attribute type 10 has an invalid length.
[  710.887004][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1475'.
[  710.975098][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  711.042249][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  711.115070][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.184085][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.244982][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'.
[  711.324096][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.353949][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.401704][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.475367][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.594511][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.608872][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.620685][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.629675][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  711.656788][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  711.696997][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.734552][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.769060][ T9905] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  711.769784][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.548927][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.680112][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.857998][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.029793][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.205338][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.377772][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  714.517029][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  714.544587][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  714.646837][ T9560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.670344][ T9560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.714018][ T9560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.764018][ T9560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.295186][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.308041][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.327871][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.655883][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.735539][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  716.745448][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  719.552728][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1487'.
[  719.591940][ T9920] syz.4.1480 (9920): drop_caches: 2
[  721.548266][ T9982] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  722.176834][ T9993] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1495'.
[  727.043964][ T9145] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  727.254113][ T9145] usb 7-1: Using ep0 maxpacket: 32
[  727.340542][ T9145] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  727.362415][ T9145] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  727.797208][ T9145] usb 7-1: config 0 has no interface number 0
[  727.819705][ T9145] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  727.889065][ T9145] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  727.925176][ T9145] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.971008][ T9145] usb 7-1: config 0 descriptor??
[  727.987834][ T9145] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[  728.193397][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.255184][T10058] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1510'.
[  728.285436][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.349967][ T5361] usb 7-1: USB disconnect, device number 4
[  733.440182][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  733.440199][   T26] audit: type=1326 audit(1761357449.385:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  733.610099][   T26] audit: type=1326 audit(1761357449.385:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  733.633051][   T26] audit: type=1326 audit(1761357449.385:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  733.684042][   T26] audit: type=1326 audit(1761357449.385:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  735.274914][T10099] block device autoloading is deprecated and will be removed.
[  735.474064][   T26] audit: type=1326 audit(1761357449.385:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  735.504690][   T26] audit: type=1326 audit(1761357449.385:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  735.921220][   T26] audit: type=1326 audit(1761357449.385:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  736.167998][T10112] random: crng reseeded on system resumption
[  736.326827][   T26] audit: type=1326 audit(1761357449.385:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  736.985860][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'.
[  737.213973][   T26] audit: type=1326 audit(1761357449.385:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  737.750926][   T26] audit: type=1326 audit(1761357449.385:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  737.868016][T10137] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1524'.
[  739.004277][  T951] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  743.398394][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1533'.
[  744.879842][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'.
[  745.066726][T10182] netlink: 'syz.6.1537': attribute type 10 has an invalid length.
[  745.099067][T10182] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1537'.
[  745.108692][T10182] device team0 entered promiscuous mode
[  745.123471][T10182] device team_slave_0 entered promiscuous mode
[  745.140438][T10182] device team_slave_1 entered promiscuous mode
[  745.193346][T10182] bridge0: port 3(team0) entered blocking state
[  745.200425][T10182] bridge0: port 3(team0) entered disabled state
[  745.217966][T10182] bridge0: port 3(team0) entered blocking state
[  745.224720][T10182] bridge0: port 3(team0) entered forwarding state
[  746.775014][T10202] netlink: 464 bytes leftover after parsing attributes in process `syz.7.1542'.
[  747.265702][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.272057][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  749.524270][ T4348] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  750.163956][ T4348] usb 8-1: Using ep0 maxpacket: 8
[  750.222127][ T4348] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  750.284001][ T4348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.314421][ T4348] usb 8-1: Product: syz
[  750.318663][ T4348] usb 8-1: Manufacturer: syz
[  750.323385][ T4348] usb 8-1: SerialNumber: syz
[  750.376093][ T4348] usb 8-1: config 0 descriptor??
[  750.425413][ T4348] gspca_main: se401-2.14.0 probing 047d:5003
[  751.173991][ T4348] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[  751.383989][ T4348] usb 8-1: device descriptor read/64, error -32
[  751.654061][ T4348] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[  751.945484][T10254] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  754.790006][T10247] bridge0: port 4(batadv0) entered disabled state
[  754.797630][T10247] bridge0: port 3(team0) entered disabled state
[  754.804357][T10247] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.811758][T10247] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.309889][ T4348] gspca_se401: read req failed req 0x06 error -19
[  756.325120][ T4348] usb 8-1: USB disconnect, device number 2
[  759.636750][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.917147][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.930119][T10305] loop6: detected capacity change from 0 to 524288000
[  762.865390][T10247] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.874526][T10247] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.883726][T10247] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.895417][T10247] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  763.071357][T10263] netlink: 'syz.4.1554': attribute type 10 has an invalid length.
[  763.115812][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1554'.
[  763.138519][T10265] netlink: 464 bytes leftover after parsing attributes in process `syz.6.1555'.
[  763.173951][T10301] netlink: 'syz.2.1564': attribute type 4 has an invalid length.
[  763.252282][T10303] netlink: 'syz.2.1564': attribute type 4 has an invalid length.
[  764.539029][T10320] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  768.646963][T10356] netlink: 464 bytes leftover after parsing attributes in process `syz.6.1576'.
[  770.730962][T10370] syz.6.1580 (10370): attempted to duplicate a private mapping with mremap.  This is not supported.
[  770.928503][T10373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  771.987467][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1584'.
[  773.478942][T10399] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1589'.
[  773.800617][T10402] overlayfs: './file0' not a directory
[  775.847290][T10425] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  776.291929][   T52] block nbd3: Attempted send on invalid socket
[  776.298265][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  776.308030][T10430] SQUASHFS error: Failed to read block 0x0: -5
[  776.397136][T10430] unable to read squashfs_super_block
[  776.423562][T10433] loop6: detected capacity change from 0 to 524288000
[  776.490063][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1598'.
[  776.897967][T10438] support for the xor transformation has been removed.
[  778.314363][T10456] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1601'.
[  781.248271][T10486] overlayfs: './file0' not a directory
[  786.287892][T10513] netlink: 'syz.6.1612': attribute type 10 has an invalid length.
[  786.330397][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1612'.
[  786.928291][T10520] netlink: 464 bytes leftover after parsing attributes in process `syz.7.1613'.
[  789.606420][   T52] block nbd7: Attempted send on invalid socket
[  789.612697][   T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  789.622458][T10537] SQUASHFS error: Failed to read block 0x0: -5
[  789.640225][T10537] unable to read squashfs_super_block
[  790.161814][T10545] overlayfs: './file0' not a directory
[  790.885231][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  790.885275][   T26] audit: type=1326 audit(1761357506.835:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  792.501582][   T26] audit: type=1326 audit(1761357506.835:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  792.737433][   T26] audit: type=1326 audit(1761357506.865:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  792.869617][   T26] audit: type=1326 audit(1761357506.865:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  792.945064][   T26] audit: type=1326 audit(1761357506.865:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  793.052451][   T26] audit: type=1326 audit(1761357507.285:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  793.904708][   T26] audit: type=1326 audit(1761357507.285:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  793.927697][    C1] vkms_vblank_simulate: vblank timer overrun
[  794.179056][T10575] netlink: 'syz.4.1625': attribute type 10 has an invalid length.
[  794.244086][T10575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1625'.
[  797.221116][T10604] Bluetooth: MGMT ver 1.22
[  797.619926][T10619] overlayfs: './file0' not a directory
[  801.494898][T10630] comedi comedi0: No channels found!
[  803.133954][ T4348] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  803.971545][ T1041] block nbd6: Attempted send on invalid socket
[  803.977985][ T1041] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  804.001156][T10652] SQUASHFS error: Failed to read block 0x0: -5
[  804.043965][ T4348] usb 8-1: Using ep0 maxpacket: 8
[  804.103683][ T4348] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  804.113759][ T4348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.134947][ T4348] usb 8-1: Product: syz
[  804.140879][ T4348] usb 8-1: Manufacturer: syz
[  804.142495][T10652] unable to read squashfs_super_block
[  804.210234][ T4348] usb 8-1: SerialNumber: syz
[  804.282262][ T4348] usb 8-1: config 0 descriptor??
[  804.517913][ T4348] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  804.938074][ T4348] gspca_sunplus: reg_w_riv err -71
[  804.972050][ T4348] sunplus: probe of 8-1:0.0 failed with error -71
[  805.164734][ T4348] usb 8-1: USB disconnect, device number 3
[  807.994616][T10687] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  809.186058][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  809.192420][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  811.359054][ T4325] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  811.596797][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.631223][ T4325] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  811.802489][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.014213][ T4325] usb 4-1: config 0 descriptor??
[  812.286071][ T4325] pwc: Askey VC010 type 2 USB webcam detected.
[  812.533918][ T4325] pwc: recv_control_msg error -32 req 02 val 2b00
[  812.683920][ T4325] pwc: recv_control_msg error -32 req 02 val 2700
[  812.898896][ T4325] pwc: recv_control_msg error -71 req 04 val 1000
[  812.909106][ T4325] pwc: recv_control_msg error -71 req 04 val 1300
[  812.967407][ T4325] pwc: recv_control_msg error -71 req 04 val 1400
[  813.016585][ T4325] pwc: recv_control_msg error -71 req 02 val 2000
[  813.040684][ T4325] pwc: recv_control_msg error -71 req 02 val 2100
[  813.070776][ T4325] pwc: recv_control_msg error -71 req 04 val 1500
[  813.212008][ T4325] pwc: recv_control_msg error -71 req 02 val 2500
[  813.282956][ T4325] pwc: recv_control_msg error -71 req 02 val 2400
[  813.293225][T10733] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  814.523928][ T4325] pwc: recv_control_msg error -71 req 02 val 2600
[  814.554087][ T4325] pwc: recv_control_msg error -71 req 02 val 2900
[  814.599884][ T4325] pwc: recv_control_msg error -71 req 02 val 2800
[  814.794077][ T4325] pwc: recv_control_msg error -71 req 04 val 1100
[  814.907676][ T4325] pwc: recv_control_msg error -71 req 04 val 1200
[  814.968267][ T4325] pwc: Registered as video103.
[  815.031074][ T4325] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  815.123319][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1660'.
[  815.436892][ T4325] usb 4-1: USB disconnect, device number 7
[  815.883512][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1662'.
[  817.370589][   T52] block nbd2: Attempted send on invalid socket
[  817.377016][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  817.388348][T10781] SQUASHFS error: Failed to read block 0x0: -5
[  817.413441][T10781] unable to read squashfs_super_block
[  818.840127][T10800] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  821.134994][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'.
[  822.657292][T10840] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1678'.
[  823.492234][T10853] netlink: 'syz.2.1682': attribute type 10 has an invalid length.
[  823.531008][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1682'.
[  824.095752][T10855] tipc: Started in network mode
[  824.100795][T10855] tipc: Node identity 7249cd499002, cluster identity 4711
[  824.112226][T10855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.121233][T10855] device syzkaller0 entered promiscuous mode
[  824.212103][T10855] tipc: Resetting bearer <eth:syzkaller0>
[  824.270065][T10854] tipc: Resetting bearer <eth:syzkaller0>
[  824.373942][T10854] tipc: Disabling bearer <eth:syzkaller0>
[  824.557113][T10861] netlink: 'syz.3.1684': attribute type 3 has an invalid length.
[  824.894224][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'.
[  831.760773][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1700'.
[  832.725968][T10949] overlayfs: './file0' not a directory
[  836.296345][T10985] netlink: 'syz.2.1713': attribute type 29 has an invalid length.
[  836.462713][T10985] netlink: 'syz.2.1713': attribute type 29 has an invalid length.
[  836.585890][T10991] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[  837.337816][T10990] netlink: 'syz.2.1713': attribute type 29 has an invalid length.
[  839.647261][T11014] overlayfs: './file0' not a directory
[  840.275071][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'.
[  841.003934][T10622] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  841.195935][T10622] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  841.216854][T10622] usb 5-1: config 1 has no interface number 0
[  841.244075][T10622] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 64
[  841.255806][T10622] usb 5-1: config 1 interface 105 has no altsetting 0
[  841.360027][T10622] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  841.670307][T10622] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  841.963968][T10622] usb 5-1: Product: syz
[  842.011423][T10622] usb 5-1: Manufacturer: syz
[  842.040497][T10622] usb 5-1: SerialNumber: syz
[  842.079843][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  843.322059][T11059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  843.556394][T10622] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  843.643231][T10622] aqc111: probe of 5-1:1.105 failed with error -71
[  843.705832][T10622] usb 5-1: USB disconnect, device number 3
[  854.255545][T11165] netlink: 'syz.6.1752': attribute type 10 has an invalid length.
[  854.273928][T11165] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1752'.
[  856.254686][ T9924] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  856.555378][ T9924] usb 7-1: Using ep0 maxpacket: 32
[  856.562501][ T9924] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  856.597270][ T9924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  856.626065][ T9924] usb 7-1: config 0 has no interface number 0
[  856.642472][ T9924] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  856.710107][ T9924] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  856.723954][ T9924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.796735][ T9924] usb 7-1: config 0 descriptor??
[  857.306337][ T9924] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[  857.325004][T11191] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  857.334904][T11177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.374397][T11177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.898057][T11203] overlayfs: './file0' not a directory
[  859.123606][   T52] block nbd4: Attempted send on invalid socket
[  859.130048][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  859.143247][T11217] SQUASHFS error: Failed to read block 0x0: -5
[  859.402454][T11217] unable to read squashfs_super_block
[  861.793878][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'.
[  862.421604][T10622] usb 7-1: USB disconnect, device number 6
[  863.310913][T11251] netlink: 'syz.3.1767': attribute type 10 has an invalid length.
[  863.319054][T11251] device syz_tun entered promiscuous mode
[  863.327221][T11251] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  863.708122][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'.
[  867.795420][T11280] overlayfs: failed to resolve './file1': -2
[  867.881374][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'.
[  867.905587][T11258] syz.6.1769 (11258): drop_caches: 2
[  867.983018][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'.
[  868.803951][ T4325] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  868.882643][   T26] audit: type=1326 audit(1761357584.825:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  870.107509][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.114028][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.820082][   T26] audit: type=1326 audit(1761357584.855:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  871.109475][   T26] audit: type=1326 audit(1761357584.855:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  871.193945][ T4325] usb 5-1: Using ep0 maxpacket: 32
[  871.296424][ T4325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  871.314009][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  871.324562][ T4325] usb 5-1: config 0 has no interface number 0
[  871.334010][ T4325] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  871.350402][   T26] audit: type=1326 audit(1761357584.855:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  871.353904][ T4325] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  871.382401][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.393260][ T4325] usb 5-1: config 0 descriptor??
[  871.517746][ T4325] usb 5-1: can't set config #0, error -71
[  871.554610][ T4325] usb 5-1: USB disconnect, device number 4
[  871.599299][   T26] audit: type=1326 audit(1761357585.105:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  872.283183][   T26] audit: type=1326 audit(1761357585.115:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[  874.587982][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  875.255667][T11341] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  875.265261][T11341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  875.275024][T11341] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  876.119748][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1792'.
[  876.904092][  T951] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  877.177266][  T951] usb 7-1: Using ep0 maxpacket: 32
[  877.216073][  T951] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  877.794023][  T951] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  877.863969][  T951] usb 7-1: config 0 has no interface number 0
[  877.886104][  T951] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  877.939993][  T951] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  877.990301][  T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.184873][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  878.185196][  T951] usb 7-1: config 0 descriptor??
[  878.198975][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  878.208153][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  878.216024][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  878.223927][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  878.591667][  T951] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[  878.865870][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  878.881549][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  878.889952][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  878.904748][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  878.912742][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.922551][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  878.930043][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.945031][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  878.953756][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  879.525131][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1798'.
[  880.316946][ T4325] usb 7-1: USB disconnect, device number 7
[  880.509717][T11370] chnl_net:caif_netlink_parms(): no params data found
[  880.569210][T11398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  881.085448][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  882.174901][T11370] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.182190][T11370] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.189526][T11409] syz.7.1801 (11409) used obsolete PPPIOCDETACH ioctl
[  882.541169][T11419] overlayfs: './file0' not a directory
[  883.066574][T11370] device bridge_slave_0 entered promiscuous mode
[  883.143963][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  883.595376][T11370] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.760142][T11370] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.824012][T11370] device bridge_slave_1 entered promiscuous mode
[  883.861677][T11414] netlink: 'syz.3.1802': attribute type 10 has an invalid length.
[  883.909070][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1802'.
[  883.978230][T11414] 8021q: adding VLAN 0 to HW filter on device team0
[  884.137737][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  885.136147][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.224048][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  886.728189][T11370] team0: Port device team_slave_0 added
[  887.056022][T11370] team0: Port device team_slave_1 added
[  887.304044][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  887.634041][  T954] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  887.776165][T11370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.823976][  T954] usb 8-1: device descriptor read/64, error -71
[  888.043990][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.094117][  T954] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  888.811713][T11370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  888.945414][T11370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.974163][  T954] usb 8-1: device descriptor read/64, error -71
[  889.011297][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  889.094243][  T954] usb usb8-port1: attempt power cycle
[  889.303898][  T951] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  889.340921][T11475] overlayfs: './file0' not a directory
[  889.564083][  T954] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  889.974617][T11370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  890.014749][  T954] usb 8-1: device descriptor read/8, error -71
[  890.123910][  T951] usb 7-1: Using ep0 maxpacket: 32
[  890.124255][T11370] device hsr_slave_0 entered promiscuous mode
[  890.131379][  T951] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  890.224046][  T951] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  890.283989][  T954] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  890.312326][  T951] usb 7-1: config 0 has no interface number 0
[  890.329217][  T951] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  890.432337][  T951] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  890.478369][  T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.498987][  T951] usb 7-1: config 0 descriptor??
[  890.531936][T11370] device hsr_slave_1 entered promiscuous mode
[  890.607555][  T951] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[  890.655924][T11370] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  890.673359][T11370] Cannot create hsr debugfs directory
[  890.761659][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.824344][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  890.938073][T11484] netlink: 'syz.3.1815': attribute type 10 has an invalid length.
[  890.970972][T11484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1815'.
[  891.858241][  T954] usb 8-1: device descriptor read/8, error -71
[  891.994134][  T954] usb usb8-port1: unable to enumerate USB device
[  893.623152][T11370] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  893.820475][T11370] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  894.078051][T11370] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  894.884042][ T5532] usb 7-1: USB disconnect, device number 8
[  894.911536][T11370] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  897.368780][ T4501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.799293][ T4501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.975553][ T4501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.796103][T11370] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.326250][T11370] 8021q: adding VLAN 0 to HW filter on device team0
[  899.343140][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  899.353370][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  900.023377][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'.
[  900.124572][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  900.145077][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  900.208976][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.216230][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  900.286442][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  900.419454][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  900.474509][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.481711][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  900.554168][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  900.685329][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  900.754893][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  900.822835][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  900.901551][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  901.044981][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  901.058438][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  901.086092][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  901.142344][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  901.216795][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  901.295332][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  901.375241][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  901.639447][ T4501] tipc: Left network mode
[  901.647690][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  901.664209][  T954] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  902.601947][  T954] usb 5-1: Using ep0 maxpacket: 32
[  902.632949][  T954] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  902.682551][  T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.699463][  T954] usb 5-1: config 0 has no interface number 0
[  902.707174][  T954] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  902.723908][  T954] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  902.775584][  T954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.856503][  T954] usb 5-1: config 0 descriptor??
[  902.916536][  T954] usbhid 5-1:0.1: couldn't find an input interrupt endpoint
[  903.129172][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.175049][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.297837][ T5532] usb 5-1: USB disconnect, device number 5
[  908.733061][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  908.784404][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  908.897124][T11370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  910.054226][ T4501] device hsr_slave_0 left promiscuous mode
[  910.090669][ T4501] device hsr_slave_1 left promiscuous mode
[  910.147244][ T4501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  910.155253][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  910.187294][ T4501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  910.198376][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  910.224697][ T4501] bridge0: port 3(team0) entered disabled state
[  910.238424][ T4501] device bridge_slave_1 left promiscuous mode
[  910.299250][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.347836][ T4501] device bridge_slave_0 left promiscuous mode
[  910.385458][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.013024][ T4501] device veth1_macvtap left promiscuous mode
[  911.023335][ T4501] device veth1_vlan left promiscuous mode
[  911.068303][ T4501] device veth0_vlan left promiscuous mode
[  911.371433][T11638] xt_ecn: cannot match TCP bits for non-tcp packets
[  911.401247][T11642] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[  912.696294][T11648] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  915.914627][ T4501] device team_slave_1 left promiscuous mode
[  915.935274][ T4501] team0 (unregistering): Port device team_slave_1 removed
[  916.203894][ T4501] device team_slave_0 left promiscuous mode
[  916.232534][ T4501] team0 (unregistering): Port device team_slave_0 removed
[  916.773439][ T4501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  916.844891][ T4501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  916.888257][  T126] infiniband syz1: ib_query_port failed (-19)
[  917.420302][T11682] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  918.581314][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1858'.
[  919.689328][ T4501] bond0 (unregistering): Released all slaves
[  919.814911][  T954] bond0 speed is unknown, defaulting to 1000
[  922.423294][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'.
[  923.089772][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  923.258556][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  923.384993][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  923.398388][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  923.444707][T11370] device veth0_vlan entered promiscuous mode
[  923.487322][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  923.587020][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  923.816564][T11370] device veth1_vlan entered promiscuous mode
[  924.084298][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  924.105306][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  924.149700][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  924.177606][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  924.442546][   T26] audit: type=1326 audit(1761357640.385:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  925.637419][   T26] audit: type=1326 audit(1761357640.415:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  925.642532][T11370] device veth0_macvtap entered promiscuous mode
[  925.667598][   T26] audit: type=1326 audit(1761357640.415:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  925.691130][   T26] audit: type=1326 audit(1761357640.415:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  926.063014][   T26] audit: type=1326 audit(1761357640.675:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  926.110001][T11370] device veth1_macvtap entered promiscuous mode
[  926.132112][   T26] audit: type=1326 audit(1761357640.675:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.4.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  926.154562][    C1] vkms_vblank_simulate: vblank timer overrun
[  926.215474][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.268451][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.116819][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.127512][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.144870][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.155638][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.173551][T11370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  927.181263][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  927.747153][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  927.802635][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.843933][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.878198][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.916591][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.944667][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.004633][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.030808][T11370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.068972][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  928.125281][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  928.172799][T11739] syz.6.1868 (11739): drop_caches: 2
[  928.192816][T11370] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.229538][T11370] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.295417][T11370] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.674311][T11370] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.778665][T10158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.488637][ T4980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.522186][T10158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.570406][ T4980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.638307][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  930.727597][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  931.548468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.557022][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  932.474462][T11808] tmpfs: Unknown parameter 'usrquota'
[  932.989962][T11807] tty tty35: ldisc open failed (-12), clearing slot 34
[  937.618002][T11824] syz.3.1883 (11824): drop_caches: 2
[  937.669699][T11839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  937.747778][T11839] device syzkaller0 entered promiscuous mode
[  937.836080][T11839] tipc: Resetting bearer <eth:syzkaller0>
[  937.964128][   T26] audit: type=1326 audit(1761357653.905:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  938.681383][T11838] tipc: Resetting bearer <eth:syzkaller0>
[  938.809330][   T26] audit: type=1326 audit(1761357653.935:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  938.831963][   T26] audit: type=1326 audit(1761357653.935:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  938.853902][  T126] tipc: Node number set to 3796618569
[  938.893424][   T26] audit: type=1326 audit(1761357653.935:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  939.072660][T11838] tipc: Disabling bearer <eth:syzkaller0>
[  939.914171][   T26] audit: type=1326 audit(1761357654.205:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  939.936584][    C1] vkms_vblank_simulate: vblank timer overrun
[  940.023565][   T26] audit: type=1326 audit(1761357654.205:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbf8efc9 code=0x7ffc0000
[  941.074245][T10622] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  941.304393][T10622] usb 5-1: Using ep0 maxpacket: 32
[  941.317132][T10622] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  941.470924][T10622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  941.660782][T10622] usb 5-1: config 0 has no interface number 0
[  941.771285][T10622] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  942.169275][T10622] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  942.199580][T10622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.250352][T11882] process 'syz.6.1895' launched './file0' with NULL argv: empty string added
[  943.085920][T10622] usb 5-1: config 0 descriptor??
[  943.120801][T10622] usbhid 5-1:0.1: couldn't find an input interrupt endpoint
[  943.229526][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'.
[  943.255623][T11886] netlink: 440 bytes leftover after parsing attributes in process `syz.3.1897'.
[  943.401194][T11864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.834111][T11864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  948.853005][ T9145] usb 5-1: USB disconnect, device number 6
[  950.434991][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1906'.
[  951.455758][T11932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  951.463547][T11932] device syzkaller0 entered promiscuous mode
[  951.528297][T11932] tipc: Resetting bearer <eth:syzkaller0>
[  951.624630][T11931] tipc: Resetting bearer <eth:syzkaller0>
[  951.754656][T11931] tipc: Disabling bearer <eth:syzkaller0>
[  953.187800][T11953] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  953.459936][T11949] overlayfs: failed to resolve './bus': -2
[  956.514086][ T4348] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  956.893973][ T4348] usb 4-1: Using ep0 maxpacket: 16
[  956.924507][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.935607][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  956.945662][ T4348] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  956.954866][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.957457][T11980] fuse: Bad value for 'group_id'
[  957.018064][ T4348] usb 4-1: config 0 descriptor??
[  957.455364][ T4348] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  957.615360][ T4348] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  957.623034][ T4348] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  957.664016][ T4348] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  957.671142][ T4348] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  957.734167][T11990] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  957.778723][ T4348] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  958.616130][T11998] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  959.060456][ T4348] usb 4-1: USB disconnect, device number 8
[  960.607286][T12020] fuse: Bad value for 'fd'
[  960.628029][T12020] overlayfs: './file0' not a directory
[  962.148006][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1930'.
[  963.004108][T12041] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  967.760101][   T26] audit: type=1326 audit(1761357683.705:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  968.840728][   T26] audit: type=1326 audit(1761357683.735:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  970.434137][   T26] audit: type=1326 audit(1761357683.735:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  970.606695][   T26] audit: type=1326 audit(1761357683.735:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  970.640353][   T26] audit: type=1326 audit(1761357683.735:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  971.571365][   T26] audit: type=1326 audit(1761357684.035:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  971.608508][   T26] audit: type=1326 audit(1761357684.035:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.4.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  974.733859][   T41] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  974.923987][   T41] usb 7-1: Using ep0 maxpacket: 16
[  975.659816][   T41] usb 7-1: device descriptor read/all, error -71
[  975.685585][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1954'.
[  976.677298][T12149] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  976.688055][T12149] VFS: Can't find a romfs filesystem on dev nullb0.
[  976.688055][T12149] 
[  976.992864][   T26] audit: type=1326 audit(1761357692.935:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  977.760862][   T26] audit: type=1326 audit(1761357692.965:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  977.783925][   T26] audit: type=1326 audit(1761357692.965:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  977.807006][   T26] audit: type=1326 audit(1761357692.965:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  977.829749][   T26] audit: type=1326 audit(1761357693.225:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  977.852676][   T26] audit: type=1326 audit(1761357693.225:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[  978.811666][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  981.780255][T12194] fuse: Bad value for 'group_id'
[  982.380412][T12203] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  984.150177][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1968'.
[  986.335960][T12228] syz.7.1973 (12228): drop_caches: 2
[  987.484195][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'.
[  988.994127][ T4700] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  989.203933][ T4700] usb 7-1: Using ep0 maxpacket: 32
[  989.228896][ T4700] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  989.336323][ T4700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.428286][ T4700] usb 7-1: Product: syz
[  989.476268][ T4700] usb 7-1: Manufacturer: syz
[  989.537232][ T4700] usb 7-1: SerialNumber: syz
[  989.649605][ T4700] usb 7-1: config 0 descriptor??
[  990.527456][ T4700] usb 7-1: can't set config #0, error -71
[  990.694915][ T4700] usb 7-1: USB disconnect, device number 11
[  992.989003][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  992.995403][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  994.199192][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1986'.
[  996.454304][T12299] syz.8.1988 (12299): drop_caches: 2
[ 1000.265378][T12334] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1000.274183][T12334] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1000.274183][T12334] 
[ 1000.523249][T12336] fuse: Bad value for 'group_id'
[ 1005.032229][T12362] syz.4.2002 (12362): drop_caches: 2
[ 1005.303955][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[ 1006.680495][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2007'.
[ 1007.572756][T12395] netlink: 464 bytes leftover after parsing attributes in process `syz.7.2011'.
[ 1007.806903][T10622] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1008.075763][T10622] usb 9-1: Using ep0 maxpacket: 32
[ 1008.101347][T10622] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1008.299068][T10622] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.351182][T10622] usb 9-1: config 0 has no interface number 0
[ 1009.081849][T12400] overlayfs: './file0' not a directory
[ 1009.133309][T10622] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1009.168559][T10622] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1009.186004][T10622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.212683][T10622] usb 9-1: config 0 descriptor??
[ 1009.237853][T12411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1009.466277][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1009.478120][T10622] usbhid 9-1:0.1: couldn't find an input interrupt endpoint
[ 1009.504139][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1009.520569][T12416] device syzkaller0 entered promiscuous mode
[ 1010.141419][T12407] tipc: Resetting bearer <eth:syzkaller0>
[ 1010.298686][T12407] tipc: Disabling bearer <eth:syzkaller0>
[ 1010.526279][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2020'.
[ 1012.283123][ T5532] usb 9-1: USB disconnect, device number 2
[ 1016.854528][T12476] overlayfs: './file0' not a directory
[ 1017.306198][T12489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1017.389001][T12491] device syzkaller0 entered promiscuous mode
[ 1017.521745][T12488] tipc: Resetting bearer <eth:syzkaller0>
[ 1017.781162][T12488] tipc: Disabling bearer <eth:syzkaller0>
[ 1018.425495][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'.
[ 1018.893890][  T951] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1019.084324][  T951] usb 8-1: Using ep0 maxpacket: 32
[ 1019.093245][  T951] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1019.138561][  T951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.248415][  T951] usb 8-1: config 0 has no interface number 0
[ 1019.280271][  T951] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.309903][  T951] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1019.322992][  T951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.348942][  T951] usb 8-1: config 0 descriptor??
[ 1019.409862][  T951] usbhid 8-1:0.1: couldn't find an input interrupt endpoint
[ 1019.653946][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.678745][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1022.783122][  T954] usb 8-1: USB disconnect, device number 8
[ 1023.758613][T12534] overlayfs: './file0' not a directory
[ 1026.135052][T12564] fuse: Bad value for 'group_id'
[ 1028.260943][   T26] audit: type=1326 audit(1761357744.205:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1028.424172][   T26] audit: type=1326 audit(1761357744.205:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1028.447942][   T26] audit: type=1326 audit(1761357744.205:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1028.474120][   T26] audit: type=1326 audit(1761357744.205:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1028.526331][   T26] audit: type=1326 audit(1761357744.205:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1028.581872][   T26] audit: type=1326 audit(1761357744.255:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1031.845361][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2053'.
[ 1032.741552][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2056'.
[ 1036.691120][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2068'.
[ 1041.100914][   T26] audit: type=1326 audit(1761357757.045:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1042.033681][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2076'.
[ 1042.490832][   T26] audit: type=1326 audit(1761357757.075:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1043.630192][   T26] audit: type=1326 audit(1761357757.075:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1043.654396][   T26] audit: type=1326 audit(1761357757.075:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1043.688711][   T26] audit: type=1326 audit(1761357757.335:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1043.749479][   T26] audit: type=1326 audit(1761357757.335:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d418efc9 code=0x7ffc0000
[ 1044.192656][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2082'.
[ 1051.907485][T12748] overlayfs: './file0' not a directory
[ 1054.080585][T12762] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2094'.
[ 1054.272832][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2098'.
[ 1054.452972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.467690][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.243945][ T5532] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1055.503922][ T5532] usb 4-1: Using ep0 maxpacket: 32
[ 1055.525333][ T5532] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1055.533550][ T5532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.073340][ T5532] usb 4-1: config 0 has no interface number 0
[ 1056.179059][ T5532] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1056.216063][T12789] fuse: Bad value for 'fd'
[ 1056.688785][ T5532] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1056.741360][ T5532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.790261][ T5532] usb 4-1: config 0 descriptor??
[ 1056.844972][ T5532] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[ 1057.025150][T12769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1057.052791][T12769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.977003][T12816] overlayfs: './file0' not a directory
[ 1059.801940][ T5532] usb 4-1: USB disconnect, device number 9
[ 1062.428544][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'.
[ 1064.828885][ T1041] block nbd7: Attempted send on invalid socket
[ 1064.835845][ T1041] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1064.870574][T12871] SQUASHFS error: Failed to read block 0x0: -5
[ 1064.884546][T12871] unable to read squashfs_super_block
[ 1065.155834][T12880] overlayfs: './file0' not a directory
[ 1066.464025][ T5532] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1066.683997][ T5532] usb 8-1: Using ep0 maxpacket: 32
[ 1066.690781][ T5532] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1067.386280][ T5532] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.448680][ T5532] usb 8-1: config 0 has no interface number 0
[ 1067.477810][ T5532] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1067.492673][ T5532] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1067.503836][ T5532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.528175][ T5532] usb 8-1: config 0 descriptor??
[ 1067.559568][ T5532] usbhid 8-1:0.1: couldn't find an input interrupt endpoint
[ 1067.759333][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.830681][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.921123][T12911] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1068.103238][T12911] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1068.103238][T12911] 
[ 1069.472325][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2129'.
[ 1069.681040][T12924] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1070.511201][ T1041] block nbd3: Attempted send on invalid socket
[ 1070.517643][ T1041] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1070.577654][T12927] SQUASHFS error: Failed to read block 0x0: -5
[ 1070.622931][T12927] unable to read squashfs_super_block
[ 1070.985246][   T26] audit: type=1326 audit(1761357786.935:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1071.745206][ T4317] usb 8-1: USB disconnect, device number 9
[ 1071.772110][   T26] audit: type=1326 audit(1761357786.955:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1071.803802][   T26] audit: type=1326 audit(1761357786.955:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1071.836780][   T26] audit: type=1326 audit(1761357786.955:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1071.860582][   T26] audit: type=1326 audit(1761357787.255:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1071.883948][   T26] audit: type=1326 audit(1761357787.265:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.8.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdc18efc9 code=0x7ffc0000
[ 1072.255785][T12950] device syzkaller0 entered promiscuous mode
[ 1072.878614][T12946] overlayfs: './file0' not a directory
[ 1074.387869][T12965] syz.3.2139 (12965): drop_caches: 2
[ 1074.511809][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2140'.
[ 1075.504821][ T1041] block nbd7: Attempted send on invalid socket
[ 1075.511066][ T1041] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1075.530889][T12985] SQUASHFS error: Failed to read block 0x0: -5
[ 1075.544064][T12985] unable to read squashfs_super_block
[ 1075.953859][ T4325] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1075.977298][   T26] audit: type=1326 audit(1761357791.925:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.048263][   T26] audit: type=1326 audit(1761357791.945:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.071848][   T26] audit: type=1326 audit(1761357791.955:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.096562][   T26] audit: type=1326 audit(1761357791.955:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.120087][   T26] audit: type=1326 audit(1761357791.955:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.143451][   T26] audit: type=1326 audit(1761357791.955:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.166983][   T26] audit: type=1326 audit(1761357791.955:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.190341][   T26] audit: type=1326 audit(1761357791.955:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.225723][   T26] audit: type=1326 audit(1761357791.955:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.249351][ T4325] usb 5-1: Using ep0 maxpacket: 32
[ 1078.268782][ T4325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1078.313783][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.405738][   T26] audit: type=1326 audit(1761357791.955:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.474096][ T4325] usb 5-1: config 0 has no interface number 0
[ 1078.552517][ T4325] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1078.560589][   T26] audit: type=1326 audit(1761357791.955:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298efc9 code=0x7ffc0000
[ 1078.710604][ T4325] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1078.828464][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.999477][ T4325] usb 5-1: config 0 descriptor??
[ 1079.009217][ T4325] usb 5-1: can't set config #0, error -71
[ 1079.016982][ T4325] usb 5-1: USB disconnect, device number 7
[ 1079.091316][T13007] fuse: Bad value for 'fd'
[ 1079.167460][T13007] overlayfs: './file0' not a directory
[ 1079.676370][T13025] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1079.890073][T13017] syz.3.2152 (13017): drop_caches: 2
[ 1079.933297][T13025] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1079.933297][T13025] 
[ 1081.682802][ T1041] block nbd8: Attempted send on invalid socket
[ 1081.689322][ T1041] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1081.708895][T13041] SQUASHFS error: Failed to read block 0x0: -5
[ 1081.732580][T13041] unable to read squashfs_super_block
[ 1082.926209][ T4325] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1083.154112][ T4325] usb 8-1: Using ep0 maxpacket: 32
[ 1083.185837][ T4325] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1083.236066][ T4325] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.313114][ T4325] usb 8-1: config 0 has no interface number 0
[ 1083.356048][ T4325] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.453344][ T4325] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1083.524681][ T4325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.643043][ T4325] usb 8-1: config 0 descriptor??
[ 1083.726246][ T4325] usbhid 8-1:0.1: couldn't find an input interrupt endpoint
[ 1083.923596][T13051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.006806][T13051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.160443][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2165'.
[ 1085.743183][T13074] overlayfs: './file0' not a directory
[ 1086.064249][ T4325] usb 8-1: USB disconnect, device number 10
[ 1086.765378][ T4325] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1087.041054][ T4325] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1087.113578][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.180739][ T4325] usb 7-1: Product: syz
[ 1087.223873][ T4325] usb 7-1: Manufacturer: syz
[ 1087.228645][ T4325] usb 7-1: SerialNumber: syz
[ 1087.298646][ T4325] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1087.981082][ T4325] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1087.992552][ T1041] block nbd4: Attempted send on invalid socket
[ 1087.998882][ T1041] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1088.013434][T13108] SQUASHFS error: Failed to read block 0x0: -5
[ 1088.042431][T13108] unable to read squashfs_super_block
[ 1088.780229][  T951] usb 7-1: USB disconnect, device number 12
[ 1089.063904][ T4325] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1089.082864][ T4325] ath9k_htc: Failed to initialize the device
[ 1089.132226][  T951] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1089.525186][T13123] syz.8.2175 (13123): drop_caches: 2
[ 1090.628720][T13138] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1090.732285][T13138] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1090.732285][T13138] 
[ 1092.177129][  T951] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1092.374430][  T951] usb 4-1: Using ep0 maxpacket: 32
[ 1092.395543][  T951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1092.420505][  T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.448643][  T951] usb 4-1: config 0 has no interface number 0
[ 1092.463352][  T951] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1092.514700][  T951] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1092.536630][  T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.559613][  T951] usb 4-1: config 0 descriptor??
[ 1092.579471][  T951] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[ 1092.780842][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.811449][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1095.368357][T10622] usb 4-1: USB disconnect, device number 10
[ 1095.805137][   T52] block nbd8: Attempted send on invalid socket
[ 1095.811460][   T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1095.821025][T13194] SQUASHFS error: Failed to read block 0x0: -5
[ 1095.880016][T13194] unable to read squashfs_super_block
[ 1096.138270][T13201] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1098.789613][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2189'.
[ 1101.989291][T13242] syz.3.2194 (13242): drop_caches: 2
[ 1103.284992][ T4325] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1103.476769][ T4325] usb 9-1: Using ep0 maxpacket: 32
[ 1103.488807][ T4325] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1103.512561][ T4325] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1103.567677][ T4325] usb 9-1: config 0 has no interface number 0
[ 1103.589923][ T4325] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1103.620326][ T4325] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1103.637569][ T4325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1103.677244][ T4325] usb 9-1: config 0 descriptor??
[ 1103.700076][ T4325] usbhid 9-1:0.1: couldn't find an input interrupt endpoint
[ 1103.902581][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1103.954108][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1105.282960][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2200'.
[ 1105.856310][T13278] fuse: Bad value for 'fd'
[ 1107.039886][  T951] usb 9-1: USB disconnect, device number 3
[ 1108.129087][ T1041] block nbd8: Attempted send on invalid socket
[ 1108.135632][ T1041] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1108.163961][T13297] SQUASHFS error: Failed to read block 0x0: -5
[ 1108.195224][T13297] unable to read squashfs_super_block
[ 1108.875905][   T26] kauditd_printk_skb: 41 callbacks suppressed
[ 1108.875922][   T26] audit: type=1326 audit(1761357824.825:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1109.540458][T13301] block device autoloading is deprecated and will be removed.
[ 1109.558656][T13294] block device autoloading is deprecated and will be removed.
[ 1109.559176][   T26] audit: type=1326 audit(1761357824.855:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1109.590494][   T26] audit: type=1326 audit(1761357825.115:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1109.691512][   T26] audit: type=1326 audit(1761357825.115:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7f18efc9 code=0x7ffc0000
[ 1111.356448][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2213'.
[ 1112.854484][ T4325] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1113.823897][ T4325] usb 4-1: Using ep0 maxpacket: 32
[ 1113.831264][ T4325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1113.859331][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1114.035615][ T4325] usb 4-1: config 0 has no interface number 0
[ 1114.160531][ T4325] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1114.444520][ T4325] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1114.455186][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.556480][T13364] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1114.610514][ T4325] usb 4-1: config 0 descriptor??
[ 1114.618527][T13362] syz.7.2219 (13362): drop_caches: 2
[ 1114.659769][ T4325] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[ 1115.867928][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.874347][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.004114][ T4317] usb 4-1: USB disconnect, device number 11
[ 1120.847290][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2230'.
[ 1124.526136][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2235'.
[ 1124.915416][   T52] block nbd4: Attempted send on invalid socket
[ 1124.921683][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1124.935240][T13428] SQUASHFS error: Failed to read block 0x0: -5
[ 1124.941529][T13428] unable to read squashfs_super_block
[ 1125.165507][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2236'.
[ 1125.473821][ T9145] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1125.663971][ T9145] usb 8-1: Using ep0 maxpacket: 32
[ 1127.192394][ T9145] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1127.251470][ T9145] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.277708][ T9145] usb 8-1: config 0 has no interface number 0
[ 1127.311426][ T9145] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1127.369727][ T9145] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1127.551908][ T9145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.657776][ T9145] usb 8-1: config 0 descriptor??
[ 1127.735672][ T9145] usbhid 8-1:0.1: couldn't find an input interrupt endpoint
[ 1127.877546][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1127.899900][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1128.620911][T13447] syz.8.2241 (13447): drop_caches: 2
[ 1129.074668][T13454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2242'.
[ 1129.895489][ T9145] usb 8-1: USB disconnect, device number 11
[ 1129.906541][T13456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1130.019855][T13456] tipc: Resetting bearer <eth:syzkaller0>
[ 1130.234598][T13455] tipc: Disabling bearer <eth:syzkaller0>
[ 1132.596008][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2249'.
[ 1133.227518][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'.
[ 1133.373194][T13486] netlink: 'syz.3.2251': attribute type 10 has an invalid length.
[ 1133.432983][T13486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'.
[ 1134.876338][T13498] overlayfs: './file0' not a directory
[ 1136.888601][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2256'.
[ 1139.627208][T13527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2260'.
[ 1141.605253][T13538] netlink: 'syz.3.2264': attribute type 10 has an invalid length.
[ 1141.683908][T13538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'.
[ 1142.673000][   T52] block nbd4: Attempted send on invalid socket
[ 1142.679457][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1142.689524][T13547] SQUASHFS error: Failed to read block 0x0: -5
[ 1142.912012][T13547] unable to read squashfs_super_block
[ 1143.155340][T13546] overlayfs: './file0' not a directory
[ 1143.720908][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2268'.
[ 1144.228906][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2269'.
[ 1145.183900][  T951] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1145.373851][  T951] usb 7-1: Using ep0 maxpacket: 32
[ 1145.389548][  T951] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1145.407000][  T951] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1145.451261][  T951] usb 7-1: config 0 has no interface number 0
[ 1145.509365][  T951] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1145.578198][  T951] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1145.622348][  T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.677042][  T951] usb 7-1: config 0 descriptor??
[ 1145.715093][  T951] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[ 1145.913133][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.944237][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.679700][T13579] syz.3.2273 (13579): drop_caches: 2
[ 1148.296062][T10622] usb 7-1: USB disconnect, device number 13
[ 1151.175366][   T52] block nbd6: Attempted send on invalid socket
[ 1151.181742][   T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1151.198107][T13612] SQUASHFS error: Failed to read block 0x0: -5
[ 1151.214461][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2281'.
[ 1151.271995][T13612] unable to read squashfs_super_block
[ 1151.345657][T13602] overlayfs: './file0' not a directory
[ 1156.873835][ T4700] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1157.093804][ T4700] usb 9-1: Using ep0 maxpacket: 32
[ 1157.102817][ T4700] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1157.141996][ T4700] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1157.172889][ T4700] usb 9-1: config 0 has no interface number 0
[ 1157.186013][ T4700] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1157.231747][ T4700] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1157.262775][ T4700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.331870][ T4700] usb 9-1: config 0 descriptor??
[ 1157.356421][ T4700] usbhid 9-1:0.1: couldn't find an input interrupt endpoint
[ 1157.573958][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.597333][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1159.780421][T13664] fuse: Bad value for 'fd'
[ 1160.138888][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'.
[ 1160.636230][ T1041] block nbd7: Attempted send on invalid socket
[ 1160.643250][ T1041] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1160.771905][T13670] SQUASHFS error: Failed to read block 0x0: -5
[ 1161.164820][T13670] unable to read squashfs_super_block
[ 1161.233437][T13672] syz.4.2296 (13672): drop_caches: 2
[ 1164.957196][  T951] usb 9-1: USB disconnect, device number 4
[ 1165.247180][T13703] fuse: Bad value for 'fd'
[ 1166.048095][T13709] IPv6: Can't replace route, no match found
[ 1166.937595][T13710] syz.3.2307 (13710): drop_caches: 2
[ 1167.334484][T13713] tipc: Started in network mode
[ 1167.360211][T13713] tipc: Node identity beaa49bd2632, cluster identity 4711
[ 1167.379755][T13713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1167.452349][T13713] tipc: Resetting bearer <eth:syzkaller0>
[ 1167.468577][   T52] block nbd4: Attempted send on invalid socket
[ 1167.475001][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1167.486000][T13720] SQUASHFS error: Failed to read block 0x0: -5
[ 1167.521734][T13720] unable to read squashfs_super_block
[ 1168.097143][T13711] tipc: Disabling bearer <eth:syzkaller0>
[ 1174.712689][T13758] syz.7.2321 (13758): drop_caches: 2
[ 1176.550864][T13774] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1176.574724][T13774] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1176.574724][T13774] 
[ 1177.318498][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.325358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.495358][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2332'.
[ 1183.104009][ T5532] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1183.303933][ T5532] usb 5-1: Using ep0 maxpacket: 32
[ 1183.316213][ T5532] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1183.396997][ T5532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1183.472820][ T5532] usb 5-1: config 0 has no interface number 0
[ 1183.515358][ T5532] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1183.592504][ T5532] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1183.652733][ T5532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.739428][ T5532] usb 5-1: config 0 descriptor??
[ 1183.810070][ T5532] usbhid 5-1:0.1: couldn't find an input interrupt endpoint
[ 1184.396005][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1184.439096][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.009792][T13846] netlink: 'syz.7.2342': attribute type 10 has an invalid length.
[ 1189.430718][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2342'.
[ 1189.439987][T13846] device team0 entered promiscuous mode
[ 1189.456216][T13846] device team_slave_0 entered promiscuous mode
[ 1189.507934][T13846] device team_slave_1 entered promiscuous mode
[ 1189.629980][T13846] bridge0: port 3(team0) entered blocking state
[ 1189.724740][T13846] bridge0: port 3(team0) entered disabled state
[ 1189.969489][T13846] bridge0: port 3(team0) entered blocking state
[ 1189.976048][T13846] bridge0: port 3(team0) entered forwarding state
[ 1189.997004][  T126] usb 5-1: USB disconnect, device number 8
[ 1190.707200][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'.
[ 1192.023766][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2346'.
[ 1192.506241][ T4268] bond0: (slave syz_tun): Releasing backup interface
[ 1192.900196][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1192.909742][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1192.921645][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1193.686888][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1193.694529][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1193.784209][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1195.111299][T13889] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1195.207959][T13889] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1195.207959][T13889] 
[ 1195.729966][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2357'.
[ 1196.245291][T13873] Bluetooth: hci0: command 0x0409 tx timeout
[ 1196.624517][T13871] chnl_net:caif_netlink_parms(): no params data found
[ 1197.492673][ T4453] tipc: Left network mode
[ 1197.668617][T13871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1197.677292][T13871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1197.686219][T13871] device bridge_slave_0 entered promiscuous mode
[ 1198.263764][   T48] Bluetooth: hci0: command 0x041b tx timeout
[ 1199.405879][T13871] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.413042][T13871] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.475459][T13871] device bridge_slave_1 entered promiscuous mode
[ 1200.353828][   T48] Bluetooth: hci0: command 0x040f tx timeout
[ 1200.785805][T13871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1200.889320][T13871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1201.261954][T13871] team0: Port device team_slave_0 added
[ 1201.394602][T13871] team0: Port device team_slave_1 added
[ 1202.423871][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[ 1202.772418][T13871] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1202.922159][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1203.403970][T13871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1203.445858][T13871] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1203.452872][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1203.611198][T13961] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1203.618308][T13871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.933933][T13970] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1207.343318][T13871] device hsr_slave_0 entered promiscuous mode
[ 1208.110224][T13871] device hsr_slave_1 entered promiscuous mode
[ 1208.149371][T13871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1208.185925][T13871] Cannot create hsr debugfs directory
[ 1208.213788][T14002] netlink: 'syz.6.2382': attribute type 10 has an invalid length.
[ 1208.221996][T14002] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2382'.
[ 1210.035469][T14025] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1210.047721][ T4453] device hsr_slave_0 left promiscuous mode
[ 1210.737694][ T4453] device hsr_slave_1 left promiscuous mode
[ 1211.254268][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1211.269851][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1211.306045][ T4453] bridge0: port 4(batadv0) entered disabled state
[ 1211.829956][ T4453] bridge0: port 3(team0) entered disabled state
[ 1211.918431][ T4453] device bridge_slave_1 left promiscuous mode
[ 1211.945156][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1212.687531][ T4453] device bridge_slave_0 left promiscuous mode
[ 1212.706637][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.085462][T14092] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1218.092728][T14092] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1218.092728][T14092] 
[ 1219.090836][ T4453] device team_slave_1 left promiscuous mode
[ 1219.166157][ T4453] team0 (unregistering): Port device team_slave_1 removed
[ 1219.439126][ T4453] device team_slave_0 left promiscuous mode
[ 1219.446905][ T4453] team0 (unregistering): Port device team_slave_0 removed
[ 1219.516768][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1220.350405][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1221.317860][ T4453] bond0 (unregistering): Released all slaves
[ 1221.435234][T14054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1221.445297][T14058] netlink: 'syz.7.2397': attribute type 10 has an invalid length.
[ 1221.459025][T14058] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2397'.
[ 1221.944725][T13871] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1221.980388][T13871] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1222.065390][T13871] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1222.212949][T13871] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1223.105234][T14133] comedi comedi0: pcmda12: I/O port conflict (0x5,16)
[ 1223.537903][T13871] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1223.591591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1223.608223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1223.644971][T13871] 8021q: adding VLAN 0 to HW filter on device team0
[ 1223.696414][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1223.714689][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1223.740545][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1223.747799][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1223.788992][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1223.820274][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1223.879239][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1223.921546][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1223.928769][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1223.965595][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1224.146324][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1224.183117][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1225.065254][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2410'.
[ 1225.560769][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1226.553643][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1226.740898][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1226.827383][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1226.898197][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1227.149714][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1227.570696][T14162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1227.616796][T14175] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2413'.
[ 1227.740395][T14158] tipc: Disabling bearer <eth:syzkaller0>
[ 1227.789435][T13871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1227.828150][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1227.856533][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1227.872169][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1228.306856][T14188] netlink: 'syz.4.2415': attribute type 10 has an invalid length.
[ 1228.359726][T14188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2415'.
[ 1230.651167][T14212] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1230.676005][T14212] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1230.676005][T14212] 
[ 1232.031041][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1232.058019][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1232.136711][T13871] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1233.171470][T14244] overlayfs: './file0' not a directory
[ 1233.949595][T14245] syz.4.2427 (14245): drop_caches: 2
[ 1238.747658][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.754175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.586112][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1240.610734][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1240.676775][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1240.776707][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1240.856172][T13871] device veth0_vlan entered promiscuous mode
[ 1240.866727][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1240.882202][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1240.914664][T13871] device veth1_vlan entered promiscuous mode
[ 1240.999590][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1241.031307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1241.077070][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1241.153532][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1241.201561][T13871] device veth0_macvtap entered promiscuous mode
[ 1241.273232][T13871] device veth1_macvtap entered promiscuous mode
[ 1241.401839][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.452895][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.493855][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.533840][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.575161][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.623768][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.664090][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.708678][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.743423][T13871] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1241.801117][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1241.819626][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1241.862894][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1241.898188][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1241.934936][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.965745][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.994403][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.024525][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.076096][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.091382][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.149217][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.169097][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.194219][T13871] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.205022][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1242.245750][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1242.269370][T13871] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.316490][T13871] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.589826][T14318] overlayfs: './file0' not a directory
[ 1243.264425][T13871] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.273753][T13871] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.589759][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.630803][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1244.560283][ T4980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1244.581814][ T4980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1244.600392][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1244.623632][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1248.236805][T14357] netlink: 'syz.8.2446': attribute type 10 has an invalid length.
[ 1248.293404][T14357] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2446'.
[ 1248.306491][T14357] device team0 entered promiscuous mode
[ 1248.312570][T14357] device team_slave_0 entered promiscuous mode
[ 1248.355900][T14357] device team_slave_1 entered promiscuous mode
[ 1248.409763][T14357] bridge0: port 3(team0) entered blocking state
[ 1248.416527][T14357] bridge0: port 3(team0) entered disabled state
[ 1248.506157][T14357] bridge0: port 3(team0) entered blocking state
[ 1248.512506][T14357] bridge0: port 3(team0) entered forwarding state
[ 1252.583318][ T9145] libceph: connect (1)[c::]:6789 error -101
[ 1252.597081][ T9145] libceph: mon0 (1)[c::]:6789 connect error
[ 1252.629503][T14396] ceph: No mds server is up or the cluster is laggy
[ 1252.816623][T14405] syz.6.2454 (14405): drop_caches: 2
[ 1254.646631][T14425] netlink: 'syz.8.2461': attribute type 10 has an invalid length.
[ 1254.692459][T14425] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2461'.
[ 1254.958245][T14429] overlayfs: failed to resolve './file1': -2
[ 1257.618211][ T1041] block nbd9: Attempted send on invalid socket
[ 1257.624704][ T1041] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1257.640221][T14444] SQUASHFS error: Failed to read block 0x0: -5
[ 1257.770378][T14444] unable to read squashfs_super_block
[ 1259.183888][ T5532] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1259.385656][ T5532] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1259.421552][ T5532] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1259.458506][ T5532] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 1259.500724][ T5532] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.521184][ T5532] usb 9-1: config 0 descriptor??
[ 1259.935405][ T5532] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[ 1259.961720][ T5532] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0
[ 1260.147896][ T5532] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device
[ 1260.164258][ T5532] arvo 0003:1E7D:30D4.0003: couldn't install keyboard
[ 1260.198877][ T5532] arvo: probe of 0003:1E7D:30D4.0003 failed with error -32
[ 1260.262964][ T5532] usb 9-1: USB disconnect, device number 5
[ 1260.416445][T14477] fido_id[14477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1262.291006][T14493] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2473'.
[ 1269.476904][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2486'.
[ 1271.625542][ T1041] block nbd7: Attempted send on invalid socket
[ 1271.631794][ T1041] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1271.644058][T14583] SQUASHFS error: Failed to read block 0x0: -5
[ 1271.663711][T14583] unable to read squashfs_super_block
[ 1274.329955][T14616] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2500'.
[ 1277.090388][T14633] syz.7.2504 (14633): drop_caches: 2
[ 1278.193679][    C0] hrtimer: interrupt took 64558 ns
[ 1278.574554][T14642] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1279.397445][T14665] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1279.410478][T14665] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1279.410478][T14665] 
[ 1279.894149][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2511'.
[ 1280.932859][   T52] block nbd8: Attempted send on invalid socket
[ 1280.939413][   T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1280.952576][T14684] SQUASHFS error: Failed to read block 0x0: -5
[ 1281.022449][T14684] unable to read squashfs_super_block
[ 1284.629449][T14705] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2518'.
[ 1284.854045][ T9924] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1285.724120][T14715] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2520'.
[ 1285.865356][ T9924] usb 7-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 148, changing to 11
[ 1285.926305][ T9924] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1285.971509][T14721] device syzkaller0 entered promiscuous mode
[ 1286.031040][ T9924] usb 7-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40
[ 1286.328985][ T9924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.453506][ T9924] usb 7-1: Product: syz
[ 1286.466865][ T9924] usb 7-1: Manufacturer: syz
[ 1286.507052][ T9924] usb 7-1: SerialNumber: syz
[ 1286.997267][T14731] syz.9.2522[14731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1286.997529][T14731] syz.9.2522[14731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1287.357253][ T9924] usbhid 7-1:1.0: can't add hid device: -71
[ 1287.446248][ T9924] usbhid: probe of 7-1:1.0 failed with error -71
[ 1287.517435][ T9924] usb 7-1: USB disconnect, device number 14
[ 1287.637691][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2524'.
[ 1294.357070][T14799] loop2: detected capacity change from 0 to 7
[ 1294.463465][T13639] Dev loop2: unable to read RDB block 7
[ 1294.472143][T13639]  loop2: unable to read partition table
[ 1294.528605][T13639] loop2: partition table beyond EOD, truncated
[ 1294.649017][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2537'.
[ 1294.784021][T14799] Dev loop2: unable to read RDB block 7
[ 1294.803841][T14799]  loop2: unable to read partition table
[ 1295.134100][T14799] loop2: partition table beyond EOD, truncated
[ 1295.154044][T14799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1297.449092][   T52] block nbd7: Attempted send on invalid socket
[ 1297.455532][   T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1297.465460][T14828] SQUASHFS error: Failed to read block 0x0: -5
[ 1297.485847][T14828] unable to read squashfs_super_block
[ 1297.873740][  T954] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1298.065801][  T954] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1298.119525][  T954] usb 10-1: not running at top speed; connect to a high speed hub
[ 1298.181830][  T954] usb 10-1: config 15 interface 0 altsetting 6 has an invalid endpoint with address 0xFF, skipping
[ 1298.256385][  T954] usb 10-1: config 15 interface 0 has no altsetting 0
[ 1298.339420][  T954] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=db.4d
[ 1298.381379][  T954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1298.399159][  T954] usb 10-1: Product: syz
[ 1298.483333][  T954] usb 10-1: Manufacturer: syz
[ 1298.524258][  T954] usb 10-1: SerialNumber: syz
[ 1298.660913][T14820] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1298.952977][  T954] usb 10-1: USB disconnect, device number 2
[ 1299.582334][T14854] =======================================================
[ 1299.582334][T14854] WARNING: The mand mount option has been deprecated and
[ 1299.582334][T14854]          and is ignored by this kernel. Remove the mand
[ 1299.582334][T14854]          option from the mount to silence this warning.
[ 1299.582334][T14854] =======================================================
[ 1300.198201][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.204593][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.331387][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2552'.
[ 1304.305689][T14884] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[ 1304.317451][T14884] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[ 1304.325989][T14884] CPU: 0 PID: 14884 Comm: syz.9.2556 Not tainted syzkaller #0
[ 1304.333447][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1304.343512][T14884] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[ 1304.349074][T14884] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2d 7d 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 0c 7d 15 fa 4d 8b 24 24 48 83 c3
[ 1304.368706][T14884] RSP: 0018:ffffc9000355fa80 EFLAGS: 00010206
[ 1304.374779][T14884] RAX: 0000000000000005 RBX: ffff88802de1fa80 RCX: 0000000000080000
[ 1304.382752][T14884] RDX: ffffc9000f673000 RSI: 00000000000003d5 RDI: 00000000000003d6
[ 1304.390744][T14884] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029981e26
[ 1304.398747][T14884] R10: ffffed1029981e26 R11: 1ffff11029981e25 R12: 0000000000000028
[ 1304.406741][T14884] R13: dffffc0000000000 R14: ffff88814cc0f000 R15: dffffc0000000000
[ 1304.414722][T14884] FS:  00007ff28db8f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1304.423666][T14884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1304.430257][T14884] CR2: 000000110c26ffa0 CR3: 000000001cee6000 CR4: 00000000003506f0
[ 1304.438236][T14884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1304.446239][T14884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1304.454217][T14884] Call Trace:
[ 1304.457498][T14884]  <TASK>
[ 1304.460439][T14884]  pcl818_detach+0x62/0xd0
[ 1304.464872][T14884]  comedi_device_detach_locked+0x16e/0x710
[ 1304.470701][T14884]  comedi_unlocked_ioctl+0xd0b/0x1050
[ 1304.476082][T14884]  ? __lock_acquire+0x7c50/0x7c50
[ 1304.481116][T14884]  ? comedi_poll+0x8b0/0x8b0
[ 1304.485730][T14884]  ? __fget_files+0x28/0x4d0
[ 1304.490348][T14884]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1304.495379][T14884]  ? security_file_ioctl+0x7c/0xa0
[ 1304.500497][T14884]  ? comedi_poll+0x8b0/0x8b0
[ 1304.505090][T14884]  __se_sys_ioctl+0xfa/0x170
[ 1304.509686][T14884]  do_syscall_64+0x4c/0xa0
[ 1304.514106][T14884]  ? clear_bhb_loop+0x60/0xb0
[ 1304.518792][T14884]  ? clear_bhb_loop+0x60/0xb0
[ 1304.523487][T14884]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1304.529381][T14884] RIP: 0033:0x7ff28cd8efc9
[ 1304.533997][T14884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1304.553789][T14884] RSP: 002b:00007ff28db8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1304.562226][T14884] RAX: ffffffffffffffda RBX: 00007ff28cfe5fa0 RCX: 00007ff28cd8efc9
[ 1304.570198][T14884] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007
[ 1304.578255][T14884] RBP: 00007ff28ce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1304.586235][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1304.594208][T14884] R13: 00007ff28cfe6038 R14: 00007ff28cfe5fa0 R15: 00007ffcca761bb8
[ 1304.602191][T14884]  </TASK>
[ 1304.605222][T14884] Modules linked in:
[ 1304.627074][T14884] ---[ end trace 0000000000000000 ]---
[ 1304.643330][T14884] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[ 1304.649054][T14884] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2d 7d 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 0c 7d 15 fa 4d 8b 24 24 48 83 c3
[ 1304.669378][T14884] RSP: 0018:ffffc9000355fa80 EFLAGS: 00010206
[ 1304.675796][T14884] RAX: 0000000000000005 RBX: ffff88802de1fa80 RCX: 0000000000080000
[ 1304.683865][T14884] RDX: ffffc9000f673000 RSI: 00000000000003d5 RDI: 00000000000003d6
[ 1304.691896][T14884] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029981e26
[ 1304.699967][T14884] R10: ffffed1029981e26 R11: 1ffff11029981e25 R12: 0000000000000028
[ 1304.708168][T14884] R13: dffffc0000000000 R14: ffff88814cc0f000 R15: dffffc0000000000
[ 1304.716211][T14884] FS:  00007ff28db8f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1304.725245][T14884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1304.741560][T14884] CR2: 00007f71dc1e7dac CR3: 000000001cee6000 CR4: 00000000003506e0
[ 1304.749708][T14884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1304.757961][T14884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1304.766314][T14884] Kernel panic - not syncing: Fatal exception
[ 1304.772740][T14884] Kernel Offset: disabled
[ 1304.777077][T14884] Rebooting in 86400 seconds..