last executing test programs:

9m9.326124207s ago: executing program 2 (id=258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440020e1beb40000ed00000000000000000000380397c234780a0b4ba46d3400"/41, @ANYRES32=0x0, @ANYBLOB="00000000900201001c001a8018000a80140007000000000000000000000000000000000108001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440020e1beb40000ed00000000000000000000380397c234780a0b4ba46d3400"/41, @ANYRES32=0x0, @ANYBLOB="00000000900201001c001a8018000a80140007000000000000000000000000000000000108001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

9m8.25706379s ago: executing program 2 (id=261):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
r1 = syz_usb_connect$uac1(0x1, 0xc7, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xf2, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x1}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x6, 0x6, [0x9, 0x8, 0x7, 0x7, 0x5, 0x0], 0x1}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x3, "582579a7"}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x3, 0x41, "e8369a"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0xb, 0x7, "701d0561de48"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x87, 0xc1, "00949d"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x3, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xb, 0x6, {0x7, 0x25, 0x1, 0x1, 0x81, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x10, 0x9, "cb"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x0, 0x3a, {0x7, 0x25, 0x1, 0x1c3, 0x1, 0xfff0}}}}}}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x201, 0x6, 0xb, 0x1, 0x8, 0x7}, 0x5, &(0x7f0000001140)={0x5, 0xf, 0x5}, 0x8, [{0xfd, &(0x7f0000001180)=@string={0xfd, 0x3, "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"}}, {0xa6, &(0x7f0000001340)=@string={0xa6, 0x3, "3826224ad77905d3cdcb7e173cbc100938652d2a425d79557d640f017f2d1cc51a442a2be1b5e241f9ffc499ce7866159bcbd2ec060980414fcfcda6703fff9c9f95aff7b9b84c2de23063ad1d7576dd9d5652c9c7761bf7c567c14f295fff7d993910fd66ffdca85e7d9a1f3ba7a88efe80bdb88b3fb2f7539e482ecbc176e64bf865b252e55f67c62f34a0eb88a05f519fe1b296f1b223190f7e5ed1abe0b1bdae3daa"}}, {0xa8, &(0x7f0000001400)=@string={0xa8, 0x3, "372fa07b0a6a549f8adbe97148280d0ab0c9b674df906ee18d916da770998730ff1d0241a425a2b82a6887948e37ea5f77c493ff99b7df0a9624f923641356d5f59a65925fc5f214cdc741b90a06e9647a668d43f9339a5d0e128d22a6adf2e1ccfeb398042dd1ccbe0f0bf7166be539cf1011e6a0ef749f783598bbc7a2dce391f724e848632f2f8baf6f55896e3cab1ba8332866c6eb96caf6799536c50b323fc1b08cb262"}}, {0x9b, &(0x7f00000014c0)=@string={0x9b, 0x3, "8fb6edaf9fbc449fff817022bf02c3e4cbb818c88239185db6b6d1c54f9fa01ec6ad29a51c07acb1f532c7205eb5509c90e0c7b84a1ae6094632c6eb2eb4194c2e8e2ecc483233b14bf4baf5f277ca9b54ae46fcdf065a95fb05737aa3867a232c7357479468adc390f282286e737de49bd4fe8cc50401f16b904c0cbc9d340dd017be29221381096ca2ce4bca58ebe7ccd63657a4102341cf"}}, {0x48, &(0x7f0000001580)=@string={0x48, 0x3, "30d0d388be1a702912c5865aa639bcaf155ea6e22986a50365d25ba00e97a226cdcfea7c278e89f523e2efccf5d40d12f121956c66687a4b3e6eb5c0dac8f9ee3be620396dbb"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x200a}}]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001280)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0xa00f73, 0x3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x4, 0x8, 0x1, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x4000084)
syz_usb_disconnect(r1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r3)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
listen(r5, 0x7)
unshare(0x24020400)
r6 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r6, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "72ab"}]}]}}}]}]}], {0x14}}, 0x6c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "fe62f1", 0x10, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, {[], {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

9m4.946256976s ago: executing program 2 (id=269):
syz_emit_ethernet(0xe6, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @rose, 0x0, [@bcast, @null, @remote, @remote, @default, @rose]}, &(0x7f0000000040)=0x40, 0x80c00)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents64(r2, &(0x7f0000000100)=""/176, 0xb0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0)
syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

9m2.058485541s ago: executing program 3 (id=274):
socket(0x8, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600), 0xfec8)
recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

9m1.927737054s ago: executing program 2 (id=275):
r0 = socket$kcm(0x2d, 0x2, 0x0)
syz_usb_connect(0x2, 0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102ba3e5e0d10141090c223010203ca7402140001067580000904d0fda3e90600210209"], &(0x7f0000000400)={0x0, 0x0, 0x96, 0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
syz_usb_connect(0x0, 0xae5, &(0x7f0000003940)={{0x12, 0x1, 0x310, 0xbe, 0x26, 0x5f, 0xef, 0x4b4, 0x5500, 0x33e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad3, 0x4, 0x9, 0x80, 0x10, 0x4, [{{0x9, 0x4, 0xc9, 0x8, 0x10, 0x88, 0x82, 0xda, 0x40, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "5696"}, {0x5, 0x24, 0x0, 0x4a}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x9, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xff, 0x4}, @acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x10}, @dmm={0x7, 0x24, 0x14, 0x4, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x200, [0x9, 0x6, 0x1, 0x40, 0x7ca, 0x400]}, @ncm={0x6, 0x24, 0x1a, 0xd0c, 0x21}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0xf3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x3d, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xfc, 0xff, 0x1, [@generic={0x1a, 0x6, "04813898553023ebe31689ac3294992e33066c010d3b1554"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x40, 0xb4, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x3b7, 0x3, 0x5, 0x80, [@generic={0xf2, 0x6, "bc54493b4db7f0b76df4a46c4ae8748e7a4e3241059d30c40ff1bdbdbef82469afcd50d635d804d2b85e8ecbb7c0d095c538260751ee0d80e3c8fb63b5a503ba3c9823831a1c47a0253164e5d9020bc38bbd48576594eedae2009b92e74354d607b5b59f4be4f8009084d78a9f024c36c398f18163c0646f60a7cc954e74b7f7913772c091241d03b5fbf0602a3456a0ede3caf9c166bba8e96e98470441c8ca83e8280043dc9ad887581131acdb60c41d005222dbc47ab897858880fd121fe052e0ccb1697e743fd91a43e3cf24958f060388f0e1f865e0d0247a64d12e8701032758d245d0741a88537cb7aa6c9c07"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x85, 0x1, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0x7f, 0x5, [@generic={0xa2, 0xf, "2dde85ab2e0ce8bf66be16fe606e8ab2bc6c5221c2273ec9b95a63eaa9f14fd8284621ea7f59165c4771759926d2e60fd7dd5c34a185bbaadca1842f37caaaa5b4e9a8781fe63d282dcd5e0db1705a2e0d5ab473c2411ebf02f711e90ba7b5a3fc4462b1ba341e1840c985fb96f1268cbc2d0602daddf9857d90718ea22045271fbefce6bec6cc133a099337525f644009e75019e3feb806a91a976419b91af0"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xd, 0x6, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x4, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1, 0xfffd}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xef, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x3}, @generic={0x3d, 0x6, "a20392a4d04ffc8caab1f902fc9e2d1ea8c4a0109a983e5c4f541e88659a4269e6245c06dd17d83db85630bc78e2e3cfc835f9f46186b6042dedb2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5ff, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xe}]}}, {{0x9, 0x5, 0xd, 0x62b2e5de4fdcd3e3, 0x10, 0x74, 0x10, 0xf9, [@generic={0x1c, 0x4, "ab86a2f897bba2e0c2729aef6c4b7d909d69755660d2f38f3b1b"}, @generic={0x66, 0xb, "a5f4095112e6d66fc652297d08b267e0a0a66416f32836d6bcd5e786840babc2ac511f1ffd8a782a6f85015a5a9274fb4267f83b387afb949b635d92b27066388a0deb64331720e95306ed3c95202724d2cb9c795b13fb75901d5dc7e281a8163aab89c0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x80, 0x68, [@generic={0x21, 0x4, "fd7d29d6888f7545522e1f761ef3cf11c7ea263cd1c857395a830a7688a40a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xdb, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x3, 0xf4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x74, 0x4}]}}]}}, {{0x9, 0x4, 0x33, 0x2, 0x9, 0xf3, 0x24, 0x53, 0x3, [@generic={0xc7, 0xa, "d9852ea364faf2c087b98c0e6e163f45c4376399a240a7677c65bbe2848667063b6bee62c22088881f8e5c22f1a5194703adae56061b3e760744770e7043041e1bad6041c4fc9463250b0c58e1fd01be530868925e5966f5bb907224e416e15561dda2786c369335d032b6f9485a0ee0c34caf6465e306a6db309c703b0cd00ccf907e2a6d9346d6c6121ba867f8fb0b1c96c8a6ada39b5ca3312d7dbab3eb21a4816e2a4a290766f51d154101651fde3d1c815d51b349fc76ec808c672e874d7ab3f89bfc"}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x81, 0xf, 0x48}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x1, 0x7f}}, {{0x9, 0x5, 0x9b2f22600fceee7d, 0x0, 0x200, 0x8, 0x12, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xf}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x7, 0x9, [@generic={0xb2, 0x22, "da66a7f0fce2da36d2c49fa87a1c14a1742a27d6fec153c15ca17f04690cc7fcedb0e5ccb808966289806a26d8d2ebf5bb09baa78cf1b9a9ff2728fd65f0ff614ba92a2d65c0dc1496c95e2ce92119b5fd7fcde818cc4dd193aed4c4e528e0c376f64aa645bbae19992ec292fbf7b0532ea2763db323585d8d1e8a2baf6de539afda4205e8cde4c0e537896dee95383485770035ef38b14be6d2d85671b47a7b54fe336cedd81549df7397e3afb551e5"}, @generic={0x7c, 0xb, "5276b5874a9764d14ac312420f0c1cbbbdf211db3457ad62a5f96be3038bea834dff0ae944e303bcd04b5454a95bc69cc1d03f5041921b5483814f675f11d33d25168ff2b8f7f5c8a013263a762aaea2a204049464c4862fd7ff71b348dee0dcf525cd073bd9767b9730ba9afae2d73517be7e217dd6425b32bd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x821e}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x26, 0x9, 0x5, [@generic={0x55, 0xf, "83c7ab4f31f6980b8c4b74473a3e65ee6f767d4f1d379b5bbb8f38e3809143e0711f3a81d14056abfe5288071a1a4f38746b14e50db490d090597d88feebb9980773efdc177e72ff0578b58990875927aa054d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x5e, 0xe9, [@generic={0xcf, 0x2, "c82f5095f747d4a8f8e22ef48e878ce61bb07bcf0eca5042456a30f791da2f9d6c0a799d4e1c49d1a41b3dfa02caeade758787aebef51668c1d45ffef3c2b54de6e0e9f2b731c4465eacdf02b827b0038b9cbe5bda43e7383adf3977afbcba94ddda723c9950b72b3e980e38cc687eaaab4f62fe2315db4267020b4c1ce883c45108d4053673c60d9adb20c5704c2788dd049d91d7918f324c9d05847387dc09762f6608c599fffef8c88afcf1ba01a2a149dde1336b1b6814b02acd84b4b2db151c76e4477559298cf1c178e7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0x1, 0x2, [@generic={0xe3, 0xe, "e5206afb5e169a9a2116164a6abef9b7b4d16c68f0cd0f9ca2d61a18af95ccbe81ba412cc94ef4364df14e12f71a710f331abb6514f2cd0d1291bf85a1eda0cc5f3c4ac9dee1379e55256ba45a139d27038c177966b6ebde08d4fb9a751e7158efeae47d567bb7f41d5e1e924b96088cf8b069c596b3b963cf6a99d3729294efac9b5993ba7092125dfc7baafecccb24edf81c7d8961cbcddefe3b6264e4e60d7a20c07b2e09f70d45ad97669a3c05ffa89064c4646e564544ed4e00ea460715fcae5faaf7f4eae72764dbeae539dbcf9b789320d0801715b8b93f21979f059286"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}]}}, {{0x9, 0x4, 0xd8, 0x1, 0x1, 0xf8, 0x26, 0x4, 0x1, [@generic={0x20, 0xc, "3b57e98b1021fb7c3458de6672fba84fb1e7a7a4e847f7a36d6a74dbe0a9"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x81, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0x5215, 0x8}, [@acm={0x4, 0x24, 0x2, 0xf}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x5172, 0x3, 0xb, 0x8, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa}]}], [{{0x9, 0x5, 0xd, 0x47c0d7f2ab8a2018, 0x8, 0xb1, 0x1, 0xfd, [@generic={0x66, 0xc, "9da75364e3871efd77b736acc27e17c3065b0a1a63579a5a23246d72005f6641e96d99ebe5f79c51668d12cdc6dcf8bef10cf6ce9439796b67252fc77b91a6423749a38cb3c2455a168c4a82db0f587a7e6b5b56c35c131952b1e935093519dc8dbcf2ee"}, @generic={0xf4, 0x7, "986bf89ddca7d5f491699d7f2e2e3504876728b017b21a321cd96e097249c1ad2ff6b1d55695c317562aca4c4c221a34ceafd401f6241a153564f3c86d492ab96172a1255f4ac68be7af3ef8d9936a5df408908c8503184e6e8e3e44ee1789e8a2975d993f51901210aecdc2ed0d925d7fd2619dd8724d967222b7d2e168f363e66db4d7b6fae696d73940052c82f2c1af76fbbe51d78f5194877f4902a66a8dc17d25fbe19c741e88d07f3b7a0118027aa07c53266a40f028dd775bd6512d657f450cfda784aa9eea8d870016cafb68120aca47bedc53fde391e8d9155f191aafa3f6822d1c827f5c4e3bd97be70c619793"}]}}]}}, {{0x9, 0x4, 0xe6, 0x81, 0x2, 0xff, 0x13, 0xea, 0x9, [@generic={0xa, 0xd, "dbd8e08abcca51d8"}], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xb8, 0x7c, 0x10, [@generic={0x98, 0xd, "93ff0f123ea05b66b0d62121ea31cff96237afa6931712bdba0784d1d262ba14adc07ebc69e8c17d765ee9fe7abf538facb8f1b3aaacc4ef181c7855841f5f33442616eda1e28e1cde79824b8572be164089d382437cbb396abb4d34ceeb2e86f3733f1e16a2f9378830457b812ee2d300d4d20f0e39432fd99329808065067b4cb290b293cfe0af57cff3a6306db883a59d258071a5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xc}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x0, 0x1b, 0x3, 0x8, 0x4a}, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="050f3d000514100403167973b1afda543536fb1e62754630d61410040168a7fb3c371f95c3c1cf81d95ff48ab40a1003025f000200551903100b03100b"], 0x6, [{0x0, 0xfffffffffffffffd}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x443}}, {0xa4, &(0x7f00000013c0)=@string={0xa4, 0x3, "e1f79475e922f2c6e62aea701020b634cba5246f8c20f531e0c619f5f5d908d4cd16b6621c037a3c9ccfb7682aba2f9e9e093686b7c7b3a8b40d705c027e3a3496594b2fdf7bee52e6f0eb1a2411c72e61268b8b22f6926553c15b640acea5f1007f59bb92168e3c5f6eca550aaff74bbd8cc5394c6e0b6095f42b9646943d0e3a3a8ce12427e98b581d34548aeea37f20fcf32873abc3589dd84908fdf598d188bc"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x3401}}]})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200))
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x40000)
r4 = creat(&(0x7f0000001380)='./file0\x00', 0x12c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001940)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0xa, "d492a4c7072d10"})
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "520cb365", {0x1, 0x17a, 0x1, 0x14, 0x7f}})
syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x0, 0x0, 0xd, 0x2, 0x8, 0xdd}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002940)={r6, r8, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000380)={{r8, 0x67, 0x7, 0x78fd61f8, 0x0, 0xc88, 0x8, 0x4, 0x4, 0xc3, 0x9, 0x9, 0x0, 0x2, 0x2}})

9m1.013929218s ago: executing program 3 (id=277):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xe6)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0xd21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x544a06)
socket$kcm(0x2a, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@deltclass={0x8e8, 0x29, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {0x0, 0xfff1}, {0x8, 0xc}}, [@tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x8a0, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xf4, 0x1, 0x6, 0x6, 0x0, 0x7c4}, {0x5, 0x0, 0xffff, 0xfff8, 0x7, 0x3ff}, 0x400, 0x10, 0x8000, 0x9, 0xa}}, @TCA_HTB_RTAB={0x404, 0x4, [0xf, 0x7, 0x7, 0x3, 0x7, 0x6, 0xffff8001, 0x4, 0xae8, 0x3ff, 0x2, 0xb12, 0x9, 0x1, 0x13, 0x7cd, 0x2, 0x9, 0x8000, 0x5, 0x2, 0x4, 0x7ff, 0xd, 0x7fff, 0x9, 0x7, 0x6, 0x5, 0x123, 0x7b, 0x2, 0x5, 0x10, 0x199, 0x2, 0x7, 0x9f4, 0x8, 0x40, 0xfffffc00, 0x7fffffff, 0xb9e, 0x1, 0x10, 0x5, 0x2ca7, 0x4016d83c, 0x7fff, 0x7aa, 0xc, 0x6, 0x401, 0x1, 0x7, 0x8, 0x2, 0x50, 0x0, 0x40, 0x7, 0x81, 0xfffff7f1, 0xf30, 0x10000, 0x3, 0x0, 0xd, 0x0, 0x5, 0x8, 0x5, 0x1, 0x1, 0x5d400000, 0x4, 0x15806ad4, 0x8, 0x10001, 0x71c9, 0x9, 0x8442, 0x3ff, 0xfffff801, 0x4, 0x5, 0xa, 0x7, 0x6, 0x4, 0xcb, 0xe, 0x0, 0x3ff, 0x6, 0xab, 0x8, 0x0, 0x0, 0x1, 0x5, 0x6, 0x7, 0x81, 0x40, 0xdf, 0xc, 0x918f, 0x60000, 0x1, 0x16b, 0x3, 0x4, 0x2fa, 0x3, 0x4, 0x3, 0xfffffffa, 0x4, 0x80, 0x8, 0x4, 0xd374, 0x3, 0xfff, 0x7fff, 0x80000, 0x7fff, 0x40000000, 0xf, 0xf7, 0x9, 0x401, 0x1, 0x1b, 0x6, 0x1, 0x2, 0x0, 0xfffffff7, 0x80000000, 0xffff, 0x1, 0x6, 0x7, 0x80000001, 0x8, 0x5, 0x8, 0x9, 0xc, 0xd, 0x101, 0x9, 0xb7, 0x8, 0x81, 0x6, 0x3, 0x2, 0x4, 0x9, 0x8, 0x0, 0x5, 0x5, 0xff, 0x9, 0x1, 0xd9f5, 0x2, 0xdd, 0x9, 0x2, 0x7f, 0x1, 0x7, 0x6, 0x7fff, 0x9, 0x10001, 0x9, 0xffff, 0x7, 0x0, 0x9, 0x1000, 0x3, 0x0, 0x80, 0xd23, 0x2, 0x9, 0x8, 0x0, 0x0, 0x10001, 0x0, 0x9, 0x0, 0x5, 0x8, 0x80, 0x6, 0x8, 0x10, 0x6, 0x4, 0x3, 0x49c32d38, 0xf, 0x5, 0x5, 0x8001, 0x4d1c0000, 0x7fffffff, 0xbf5, 0x5, 0x6, 0x9, 0xe, 0x7, 0xf2, 0x8f4f, 0x2, 0xb2, 0x8, 0x3b1b3167, 0xe, 0x7fff, 0x8, 0xa, 0x437, 0x6, 0x0, 0x1, 0x40, 0x75, 0xfffffff5, 0x7, 0x5, 0x5, 0x400, 0x6, 0x4, 0xe19, 0x80, 0x3, 0xa, 0x82a, 0x2, 0x9, 0x7fffffff, 0x80000001, 0x7, 0x8001]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0xe532, 0xfff2, 0x2, 0x1}, {0x5, 0x1, 0x18, 0x3b, 0x0, 0xac}, 0x4, 0x7, 0xf, 0xfa4, 0x4}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x2, 0x460, 0x3, 0xc87, 0xfffffff8}, {0x2, 0x0, 0x28f, 0x5, 0x8000, 0x3}, 0xffff, 0x0, 0x7, 0x2c, 0x2708}}, @TCA_HTB_RTAB={0x404, 0x4, [0x6, 0xa4e, 0x1, 0x7ff, 0x2, 0x2, 0xfffff000, 0x9, 0x2, 0x80000000, 0x8, 0x3, 0x2, 0x7, 0x8, 0x49, 0x6, 0x88, 0x5, 0x359, 0x1, 0x9, 0x8001, 0x8, 0x1, 0xff, 0x6, 0xe, 0x6, 0x1, 0x4, 0x9e7a, 0x6, 0x6, 0x3, 0x4, 0x95, 0x40, 0x8, 0x7, 0x0, 0x2, 0x2a30, 0x6, 0xfffffffb, 0x8, 0x2, 0x9, 0x504, 0x7fff, 0x7, 0x10, 0x2, 0x1ff, 0x0, 0x26, 0x3778, 0x7639, 0x100, 0x3, 0x390, 0xfffffeff, 0x3, 0xaa, 0x3, 0x4, 0x96000000, 0x2a, 0x5, 0xc, 0x1000, 0x6, 0x0, 0x1, 0x1, 0xfffffffb, 0xffffffff, 0x6, 0x4, 0x6, 0x1, 0x259, 0xee26, 0x0, 0x6, 0x6, 0x7ff, 0x6, 0x4, 0x2bc, 0x800, 0xb, 0xd4e, 0x0, 0x7, 0x332, 0x20000000, 0x4, 0x7, 0x8, 0x3, 0x0, 0x6, 0x5b2b, 0x9, 0x100, 0x2, 0x8fd, 0x4, 0x43f, 0x8, 0x0, 0x1, 0x8d68, 0xfb, 0x1ac8, 0x40, 0x9, 0x3, 0x81, 0x2000000, 0x99e5, 0x9, 0x8, 0x9, 0x4, 0x5, 0x2, 0x6, 0x9, 0x0, 0xff, 0x0, 0xd, 0x9, 0x47c4, 0x0, 0x8100000, 0x4, 0x401, 0x8001, 0x40, 0x5, 0x0, 0xffff, 0x1, 0x5, 0xfffffff7, 0x1, 0x5, 0x10000, 0x6, 0x7fffffff, 0xffffffff, 0x6, 0x66, 0x2, 0x4, 0x5, 0x7, 0x0, 0xdbfc, 0x3, 0xb, 0x0, 0x2669, 0x8, 0x7, 0x72, 0x8, 0x8, 0xfffffff8, 0x4, 0xf, 0x0, 0x1, 0x5, 0x0, 0x332, 0x5, 0x101, 0x4, 0x9, 0xd9d, 0x401, 0x2, 0x8, 0x6d89, 0xeef, 0x9, 0x8, 0x6, 0x3, 0x2, 0x1, 0xf09, 0x0, 0x1, 0x1, 0x3, 0x3, 0x6, 0xea6f, 0x1, 0x4, 0x9, 0xfffffffe, 0xb, 0x3, 0x1, 0x41, 0x6, 0x1, 0x80000000, 0xffffff10, 0xd, 0x8, 0x101, 0x9, 0x81, 0x1, 0x3, 0x9a7, 0x9, 0x7311, 0xffff, 0x9, 0x5, 0x7fff, 0x1, 0xb, 0x1, 0x4, 0x8, 0xde0, 0x5, 0xffff6aa1, 0x5, 0x6, 0x100, 0x4, 0x5, 0x4, 0x4, 0x6, 0x2, 0x2, 0x3, 0x92ca, 0x17, 0x8, 0x0, 0xc, 0x4, 0x0, 0x5]}]}}, @tclass_kind_options=@c_cake={0x9}]}, 0x8e8}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r5=>0x0)
ioprio_get$uid(0x3, r5)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, <r7=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x1fff})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0x40)
syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)

8m58.451535102s ago: executing program 2 (id=283):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$qrtrtun(r0, &(0x7f0000000300)="ca", 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004740)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r6, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f00000003c0)="bd", 0x1}], 0x1, 0x2000, 0x0, 0x3)
preadv2(r7, &(0x7f0000000000)=[{&(0x7f0000000bc0)=""/4103, 0x1007}], 0x1, 0x0, 0x80, 0x0)
ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0xce2)
sendto$inet(r0, &(0x7f0000000000)="9f350b9400d450ba218824387fcfc5e752a1c3549115e543431a5c2613b586a89a9e0be200093aee10595cf27a", 0x2d, 0x48090, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @private=0xa010102}, {0x7e9c410684292a59, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x52, {0x2, 0x4e22, @private=0xa010102}, 'veth1_to_batadv\x00'})
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))

8m56.955867108s ago: executing program 2 (id=288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000210001002cbd7000fddbdf250a100004ff0000000400010014000100fe8000000000000000000000000000aa0c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000004c0), 0x401000, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

8m55.88950803s ago: executing program 3 (id=292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x21, 0x0, 0x772d62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100050000000000040004000000000010000200000000002000"], 0x24, 0x2)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17e22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m55.70703454s ago: executing program 3 (id=294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
statx(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x2000, 0x800, &(0x7f00000003c0))
connect$qrtr(r2, &(0x7f0000000080), 0xc)
read(r2, &(0x7f0000000040)=""/49, 0x31)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
write$binfmt_script(r3, 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

8m55.167700402s ago: executing program 3 (id=295):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00', 0x2}, &(0x7f00000001c0)=0x1e)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r5, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x2, 0xfffffbfc}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x200, 0x0, {0x81}}, 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r10 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x14})
setsockopt(r9, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040))

8m54.539853299s ago: executing program 3 (id=297):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004020}, 0x4000004)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fgetxattr(r2, &(0x7f0000000140)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0)

8m53.588942634s ago: executing program 32 (id=297):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004020}, 0x4000004)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fgetxattr(r2, &(0x7f0000000140)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0)

8m41.829414963s ago: executing program 33 (id=288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000210001002cbd7000fddbdf250a100004ff0000000400010014000100fe8000000000000000000000000000aa0c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000004c0), 0x401000, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

5m13.068342526s ago: executing program 0 (id=720):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_connect$uac1(0x2, 0xad, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101", @ANYRESHEX], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r1)

5m10.201761628s ago: executing program 0 (id=727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x58fc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
unshare(0xc000600)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x1, 0x0, 0x0, "26ea7c68d21e"}}}, @TCF_EM_CONTAINER={0x9, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@private, @dev, <r9=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=<r12=>0x0, &(0x7f0000000600)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x5a0, 0x0, 0x404, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf972}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x6, 0x5, 0x42c3999d}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r13 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0)
fallocate(r13, 0x0, 0x7ffffffffffffffe, 0x7000000)
r14 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r15 = socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r15, 0x240)
ioctl$SNDCTL_DSP_SETFRAGMENT(r14, 0xc004500a, &(0x7f0000000180)=0xffff0018)
read$dsp(r14, &(0x7f0000000080)=""/203, 0xcb)

5m8.221360069s ago: executing program 0 (id=732):
r0 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
fallocate(r0, 0x10, 0x2, 0x101)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x339e, 0x0, &(0x7f0000002480), 0x0)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"6e5f236b8c70f03fa12ac19b650094cb", 0x0, <r4=>0x0, {0x4, 0x7}, {0x8, 0x5}, 0x0, [0x7fff, 0x0, 0x7, 0x414d, 0x3, 0x6, 0x7, 0x1b, 0x5, 0x5, 0x7fffffff, 0x5, 0xffffffff00000000, 0xf4, 0x7, 0x4]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000024c0)={{r3}, r4, 0x1a, @inherit={0x68, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, @devid})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}]}]}]}, 0x44}}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, r2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000540)={0x0, 0x7fff, "b48745", 0x48, 0xa})

5m2.099568592s ago: executing program 0 (id=740):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=@sha1={0x1, "076886f7ea42da64b49397ed03f512f72d917b4a"}, 0x15, 0x7)
mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd600000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5m1.803552213s ago: executing program 0 (id=742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x58fc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
unshare(0xc000600)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x1, 0x0, 0x0, "26ea7c68d21e"}}}, @TCF_EM_CONTAINER={0x9, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@private, @dev, <r9=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=<r12=>0x0, &(0x7f0000000600)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x5a0, 0x0, 0x404, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf972}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x6, 0x5, 0x42c3999d}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r13 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0)
fallocate(r13, 0x0, 0x7ffffffffffffffe, 0x7000000)
r14 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r15 = socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r15, 0x240)
ioctl$SNDCTL_DSP_SETFRAGMENT(r14, 0xc004500a, &(0x7f0000000180)=0xffff0018)
read$dsp(r14, &(0x7f0000000080)=""/203, 0xcb)

5m0.421150954s ago: executing program 0 (id=744):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x14, 0x36, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

4m59.743506286s ago: executing program 34 (id=744):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x14, 0x36, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

16.739127722s ago: executing program 1 (id=1421):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000028c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYBLOB="08699b2420360e655285974f5f36c48e653353db7a3faf2788159330f020346b4a6fd9f6ae8ef14e", @ANYRESHEX, @ANYBLOB="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", @ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x94)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

13.851902634s ago: executing program 5 (id=1428):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1, 0x1}, 0x20)
recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xe00)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000300)={0x1, 0x9}, 0x2)
read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000001c0)={r5, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x1, 0x1, "b4fd8fc7627dac52d8cb59ee041bece67299bdef67e9fc8e7e824b0ee88aacece3eb96c6842f8d2a80b5f3897ed9694cb579bc9d2dc4a03da37ece06c23c4690", "2a311000ed7b4a6b872ec9dae68e9751a3e1a54df95160706589e73e0954dccb6c2cc6e27e976150dc31e9795f1ae61dd3feeff948c39595aa6b2d190a133d89", "6f03a17381447970d2c4d3571fcef5725ae3f19589c3cdbdf2e4459ff08c8044", [0xfffffffffffffffd, 0x1]}})

13.56404546s ago: executing program 7 (id=1431):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)

13.562656567s ago: executing program 1 (id=1432):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080))
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"})
r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eca86999a4a0c7cb5b00", 0xc, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r8, r7}, &(0x7f00000000c0)=""/83, 0x53, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r11 = dup(r10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000})

11.226449418s ago: executing program 7 (id=1435):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0, 0xa00}}], 0x1, 0x240c089d)

10.507959222s ago: executing program 5 (id=1437):
r0 = syz_usb_connect(0xc, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000083, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x8000)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, 0x0)
ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="00000000000000000300"/28], 0x50)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffbe}], 0x1, 0x0, 0x0, 0x8044045}, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000040)=0x84)

10.38209121s ago: executing program 7 (id=1439):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prlimit64(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x7, 0xfffffff9, 0x0, 0x1, 0x7, 0x800, 0x3, 0x8, 0xe1e, 0xa7ec, 0x7, 0xbd, 0x8, 0x800006, 0x0, 0x0, {0x3, 0xd}, 0xf, 0xe}})
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
ftruncate(r4, 0x30)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e20, @empty}, 0xfffffffffffffd49)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r5 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x1, 0x0, &(0x7f0000002280))

9.524171248s ago: executing program 1 (id=1440):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(0x0, 0xc)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x1, 0x0)
msgsnd(r3, &(0x7f0000000000)={0x3}, 0x8, 0x800)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{0x1, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x40aa, 0x1, 0x2, 0x3, 0x9, 0xb, 0x2, 0x3037})
chdir(&(0x7f0000000100)='./file1\x00')
r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3})
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x4, 0x1, {}, 0x101})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000105000400030000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000d00000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105"], 0x64}}, 0x4800)
sendmmsg$inet6(r5, 0x0, 0x0, 0x0)
shutdown(r5, 0x1)

8.175848971s ago: executing program 1 (id=1442):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prlimit64(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x7, 0xfffffff9, 0x0, 0x1, 0x7, 0x800, 0x3, 0x8, 0xe1e, 0xa7ec, 0x7, 0xbd, 0x8, 0x800006, 0x0, 0x0, {0x3, 0xd}, 0xf, 0xe}})
ftruncate(r4, 0x2007ffb)
ftruncate(r4, 0x30)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e20, @empty}, 0xfffffffffffffd49)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x1b6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
socket(0xa, 0x2400000001, 0x0)

7.447945237s ago: executing program 7 (id=1443):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r4, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0xe7c, 0x97}}, 0x143900)

6.678755192s ago: executing program 1 (id=1445):
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
bind$inet(r7, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000040)=0xc)

6.450653064s ago: executing program 5 (id=1447):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1, 0x1}, 0x20)
recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xe00)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000300)={0x1, 0x9}, 0x2)
read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000001c0)={r5, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x1, 0x1, "b4fd8fc7627dac52d8cb59ee041bece67299bdef67e9fc8e7e824b0ee88aacece3eb96c6842f8d2a80b5f3897ed9694cb579bc9d2dc4a03da37ece06c23c4690", "2a311000ed7b4a6b872ec9dae68e9751a3e1a54df95160706589e73e0954dccb6c2cc6e27e976150dc31e9795f1ae61dd3feeff948c39595aa6b2d190a133d89", "6f03a17381447970d2c4d3571fcef5725ae3f19589c3cdbdf2e4459ff08c8044", [0xfffffffffffffffd, 0x1]}})

5.741367406s ago: executing program 7 (id=1448):
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xee00, 0x0, 0xee00)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a0000001800018014000200746561dba093b946d84a54f8a6ecdf20"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="ee", 0x1}, {&(0x7f0000000240)="b2fd140f880a8bd77829ccbfef80995d8ad0558a9ffbe30a76677ca3436ff0ba51fa911841924a6150386b2143c8149113ae62ffc586fad512e43ee6df2ee46a3774ec791f80ffc431b7dc52b16ee5eeef5af1c8379bc71779e3c00d34aa9def35a8fe6a6ccd89153ca9a42eb917f7c11f13a648489f3ba64ffe4cfa74cfdae8fe14acb8167ff8c3a4d1b69522c0a264f7267b5ecc5c134fb7dfbd7b746625de997ee8afb12eb72bbc4e8ed802e945d92e5a5b4ce85c4861", 0xb8}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES8=r6], 0x10b8}, 0xff4c)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.40070114s ago: executing program 6 (id=1449):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200003, 0x200003, 0x0, 0x0, 0x7, 0x3})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00')
getdents(r4, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001080)={r1, 0x4}, &(0x7f0000001100)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000010c0)='ext4_es_lookup_extent_enter\x00', 0xffffffffffffffff, 0x0, 0xdd}, 0x18)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)

4.411586231s ago: executing program 6 (id=1450):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prlimit64(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)
ftruncate(r2, 0x30)

4.410519891s ago: executing program 5 (id=1451):
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)={0x5, "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"})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x240488c0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000780)="b5acdcca761511ff486503ee11fad25ec1c79501ecca332fe2682320d1d7d555d99b6886a29d181a6c06465a16824b5d64fe8eebfa3d0ba5a44c2832bc0a4d7cc832ce7fa24298a6c8eae706a7f894f1e8fcdfbba19902eb257c96036705ed1d98e53c382c587ff2f2678011d59eb85b45c923af825d17951e58873529059b4483a18390158400f135f59027599a97d7075735ec078f9bf75cc7e53cccfd5bdea05eb6b05e1ea71459d245f29a7ee9897809a7a3fc3e201414c60bb9a1da0b8b9315c546c3ea408cd0e166b504f914ddd97ace9f6a1ddba4fd265a5bf48b320b6f5dbdf322caeb1944e4359dca1c76dad18510b7ce2b9af8a64c0ecc1270", 0xfe}], 0x1, 0x0, 0x0, 0x2c}, 0x404c084)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000480)={@host})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@any, 0x7}, 0x1, 0x2, 0x7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680))
r6 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ppoll(&(0x7f00000000c0)=[{r6}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x5a59)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="05000000010000", 0x7)

4.33934444s ago: executing program 4 (id=1452):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000d30000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='mm_page_alloc\x00', r0}, 0x18)
ioperm(0x21, 0x1, 0x81)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000f80)={[0x6, 0x483d, 0x6a, 0x4, 0x6, 0xe2, 0x9, 0x3ff, 0x3, 0x0, 0x9, 0x2800000, 0x1, 0x2, 0xeef9, 0x7, 0x800, 0xfffff2ed, 0x5, 0x4, 0x5, 0x0, 0x5, 0x271, 0x388c, 0x3, 0xffffffac, 0x9, 0xfffffffd, 0x4, 0x8, 0x2, 0x6, 0x2, 0xffff, 0xa, 0x1, 0x3, 0x5, 0x9, 0xffffff00, 0x3, 0xfff, 0x9, 0x6, 0x2, 0x40, 0x8, 0x4, 0x1, 0xffffff25, 0xbf4, 0x7, 0xfffffffd, 0x40, 0x9, 0x9a1a, 0x0, 0x1ff, 0xdb, 0x4, 0x4, 0x4a, 0x8, 0x9, 0x54af, 0x8, 0x3, 0x1, 0xfffffff8, 0x9, 0x4, 0x9, 0x8, 0x4, 0x7, 0x1, 0xffff, 0xe000000, 0x400, 0x4, 0x4, 0x4, 0x6, 0x9, 0x5, 0xffffffff, 0x54a97a21, 0x80000, 0x8000, 0x2, 0x8, 0xfbcc, 0x100, 0x0, 0xef, 0x0, 0xfffffff7, 0x7f, 0xfffffff8, 0x4, 0x5, 0x2, 0x9, 0x6, 0x3e9, 0x2, 0x81, 0x7fff, 0x0, 0x2, 0x6, 0x1, 0x9, 0x101, 0x522a, 0x2, 0x800, 0xc, 0x7fff, 0xfffffffe, 0x200, 0x1, 0x80000001, 0x5e, 0xa948, 0xbd3, 0x0, 0x3, 0xfffffffb, 0x80, 0x7, 0x725d804, 0x4, 0x8, 0x3, 0x7, 0x7, 0xfffffffd, 0x54dd, 0x81, 0x4, 0xd, 0x4, 0x2, 0x0, 0x7, 0xe579a880, 0x1ff, 0x1, 0x8, 0x80000000, 0xffff, 0x99, 0x80000001, 0x9c59, 0xffff, 0x1, 0x2, 0x8, 0x1, 0xf, 0x5, 0x5954, 0x6e, 0x7ff, 0x6, 0xd0, 0x7, 0x10001, 0x265e, 0x7, 0x1000, 0x7fff, 0x64, 0x400, 0x4, 0x0, 0x3, 0x2, 0xff, 0x7, 0x3ff, 0x2, 0x3, 0x5, 0x80, 0x2, 0x96, 0x6, 0x0, 0x1, 0x4, 0x38a7e6f2, 0x8, 0x477, 0x8, 0x9, 0x80000000, 0xa, 0x9, 0x6, 0x9, 0x200, 0xffff0001, 0x6, 0x80, 0x8, 0x3, 0x7ff, 0x9e3, 0x7fff, 0xae0a, 0x0, 0x7fff, 0xb, 0x8, 0x1, 0x2, 0x80, 0x7, 0xc616, 0x3, 0x401, 0xbb, 0x2, 0x7, 0x6, 0xa13a, 0x9, 0x0, 0x6, 0x72, 0xffff, 0x7, 0x6, 0x101, 0x7c6, 0x2, 0x5, 0x6e05249b, 0x9, 0x7ff, 0x200, 0x1, 0x1000, 0x5, 0x7, 0x3, 0xaa5, 0x4, 0x8, 0xfffffffd, 0x8, 0x9, 0x9aa8, 0xaf43, 0x8eb, 0x8, 0xf9, 0x8, 0xffa9, 0x962f, 0x9e, 0xfffffff7, 0x63, 0xf, 0x3, 0x1, 0xb, 0x18, 0x1, 0x5, 0x2, 0x7, 0xffffc19d, 0x1, 0xfffffff3, 0x8000, 0xffff, 0x9ce5, 0x7f, 0xffffff00, 0x10000, 0x3, 0x4, 0x400, 0x1, 0x6, 0x1f, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x8e, 0xe, 0x6, 0x10000, 0x1, 0x1, 0x9, 0xc5, 0x2, 0x0, 0xd, 0x3, 0x1, 0x8, 0xffffffff, 0x0, 0xfffffb49, 0x8, 0x101, 0x77, 0x9, 0x66d, 0x1400000, 0x2864, 0x2, 0x4, 0x8001, 0x3fffc0, 0xfffffff8, 0x80, 0x5, 0x9, 0x2b7, 0x3, 0x9, 0x9, 0xffffffff, 0x6, 0x1ff, 0x8, 0x97c, 0x8, 0x28dd3bbe, 0x8, 0x8, 0x3d, 0x8, 0x7fffffff, 0x80000000, 0xfffff160, 0x6, 0xfffffffc, 0x4, 0xfffffc00, 0x1b26, 0x7, 0x8001, 0xffff, 0x1, 0x0, 0x6, 0x2, 0x8, 0x7, 0x3, 0x6, 0xdae1, 0x1, 0x7, 0x86, 0x6b07, 0x9, 0x4, 0x70, 0x4, 0xa1da, 0x1, 0x3, 0x7, 0x6, 0x8000, 0x9, 0x2690e8ed, 0x3, 0x0, 0xcae0, 0xe8a0, 0x9, 0xf, 0x5, 0x80000000, 0x10, 0xf6, 0x8, 0xec0, 0x6, 0x2, 0x525e, 0x400, 0x8, 0x8001, 0x8, 0x8, 0x8, 0xa48, 0x74, 0x9, 0x1, 0x80000001, 0x4, 0xf8, 0x3ff, 0x5, 0xcc5, 0x7, 0xcd76, 0x40, 0x101, 0x7, 0x10000, 0x8001, 0x1, 0x3, 0x0, 0xc8, 0xfffffff7, 0x4, 0xef, 0x0, 0x6, 0x2, 0x3, 0xfdd, 0x7ff, 0x4f1d9da4, 0x8, 0x9, 0x1, 0x4c36913b, 0x8, 0x6, 0x10000, 0x8, 0x5, 0x9, 0x5, 0x0, 0x37, 0x10000, 0x2, 0x0, 0x8000, 0x3, 0x2, 0x9, 0x5, 0x8001, 0x7fff, 0x776, 0xa02d, 0x0, 0x0, 0x7, 0x8000, 0x40e2, 0x9, 0xffffffff, 0xff, 0x3, 0x1, 0x2, 0x4, 0x8, 0x8, 0x2, 0xa900, 0x7fff, 0x4, 0x3, 0x7, 0x0, 0x10, 0xe9a9, 0x4, 0x9, 0x7, 0x6ce2, 0xff, 0xad000, 0x0, 0x10001, 0x7247, 0x9, 0x2, 0x6, 0x5, 0x876, 0x5ae, 0x80000000, 0xb, 0x7fff, 0x980f, 0x400, 0x7, 0x81, 0xd66f, 0x1, 0x80, 0x7, 0x73, 0x4, 0x1000, 0x4, 0x7, 0x4, 0x1, 0x5, 0x9, 0xe4e5dd1, 0xfffffffa, 0x3, 0x7fffffff, 0x6, 0x7, 0x4, 0x4, 0x400, 0x7, 0x80, 0x6, 0x0, 0x1ff, 0x9, 0x9, 0x5, 0x6, 0x9c1, 0x7, 0x10000, 0x210b, 0x2, 0x1, 0x2, 0x8, 0x7ff, 0x5, 0x7, 0xb, 0x10001, 0x101, 0x2, 0xc0, 0x4, 0x4, 0xa7c, 0x5, 0x377f, 0x4, 0x8001, 0xe5, 0x5e, 0x3, 0x4, 0x2, 0x9, 0x5, 0x2, 0xb0, 0x3, 0x1, 0x5, 0x8, 0x6, 0x7ff, 0x7f, 0xffff, 0x100, 0x7fff, 0xfffffffd, 0x2e96faeb, 0xed, 0x1, 0x5, 0x1, 0x8, 0x9, 0x1, 0x19c, 0x742, 0x0, 0xd6, 0x3, 0x8, 0x5, 0x8, 0x7, 0x6, 0x97, 0x2, 0xfffffffb, 0x9, 0xc8e8, 0x1, 0xfffffffa, 0x5, 0xebd, 0x1, 0x3b5, 0x0, 0x8001, 0x5, 0x8, 0x1, 0x80000001, 0x3, 0x4, 0x2, 0x0, 0xfffffffc, 0x9, 0x6, 0x4, 0xffffffff, 0x3, 0xa5, 0xab, 0x7, 0x4, 0x8, 0xffff32f8, 0x81, 0x4030, 0x0, 0x10001, 0x80000000, 0x9, 0x8, 0x8, 0x7ff, 0x1, 0x4, 0xffff, 0x7, 0x2, 0x5, 0x9, 0x6, 0xd7, 0xbd, 0x1, 0x6, 0x80000000, 0xc557, 0x8001, 0xffffffff, 0x5, 0x1000, 0x100, 0x4, 0x5, 0x0, 0xd756, 0x80000001, 0x985, 0x3, 0x2, 0x3355, 0x1c000, 0x6, 0x5, 0x6, 0x1, 0xfffffff1, 0x5561, 0x7, 0x0, 0xd2, 0x13d8, 0x3, 0x2, 0xfffffffe, 0x80000001, 0x2, 0x2, 0x7, 0x7, 0x6, 0x2, 0x4, 0x7, 0x7f, 0x3, 0x4, 0x1, 0x7fffffff, 0x1988, 0x1, 0x4, 0x7fff, 0xc, 0x5, 0xc4fd, 0x8001, 0x7, 0x8b, 0x59d, 0x3, 0x6, 0x10000, 0x9, 0x7, 0x7fffffff, 0x2, 0x6, 0x70, 0xa0a, 0x3, 0xffff, 0xffffffc0, 0x3ff, 0x4, 0x9, 0x7ff, 0x6, 0x0, 0x8000, 0x10000, 0x69, 0xfffffff7, 0x0, 0x8, 0x40c, 0x0, 0x8, 0xb, 0x10, 0x4, 0x9, 0x0, 0x9, 0x9, 0xd25, 0x0, 0x4, 0xfe8, 0x7b9, 0x3, 0x0, 0x7, 0xfffffff9, 0xe6da, 0x7, 0x4, 0x4, 0x4, 0xffffffff, 0x11, 0x5, 0x9f, 0x4, 0x1, 0x6, 0x7f, 0xff, 0xa3, 0x10001, 0x7, 0xff, 0x4, 0x3, 0xfffffffe, 0x6, 0x8, 0x7, 0x3ff, 0xb3d1bc5, 0x7, 0x1000, 0x30c, 0xa91d, 0x1, 0x80000000, 0x10001, 0x81, 0x2, 0x5, 0x0, 0x9, 0x4, 0x8000, 0x14, 0xa, 0x7, 0x1ff, 0x7fffffff, 0x401, 0x3, 0x3, 0x7, 0x17, 0x3, 0x3, 0xc35e, 0x9, 0x4, 0xf6df, 0x3ff, 0x9, 0x10000, 0x9, 0xe, 0x200, 0x4, 0x3, 0x401, 0x7, 0xfffffff9, 0xb4, 0x6, 0x4, 0x4, 0x8, 0xffffff7f, 0x3, 0x1, 0x0, 0xffff8000, 0xf52, 0x0, 0x9, 0x7fff, 0x0, 0x7, 0xbd, 0x2, 0xae1d, 0x3, 0x9, 0x80, 0x63b8, 0x7, 0x71bc52b7, 0x7, 0x8, 0x4, 0x2de8036a, 0x1, 0x7, 0x4, 0xa718, 0x9, 0x4, 0xb, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x1d5, 0x1, 0x0, 0x3, 0x1ff, 0x858, 0x100, 0x6, 0xd, 0xf, 0x80000001, 0x9, 0xfff, 0x0, 0x98, 0x6, 0xcbe, 0x97, 0x9000000, 0x7ff, 0x1, 0x9, 0x7, 0x0, 0x7fffffff, 0x10000, 0xfbba, 0xfffffff9, 0x5, 0xfffffffd, 0x7, 0x4, 0x101, 0xe2630, 0x6, 0x0, 0x100, 0xc43, 0x1, 0x101, 0x5, 0x400, 0x6000000, 0x9, 0x5, 0x8, 0x0, 0x5, 0x2, 0x1, 0x4, 0x16c8, 0x0, 0xcd07c0c0, 0x0, 0x200, 0x4, 0x5, 0x7fffffff, 0x400, 0x5, 0x4, 0x10, 0x0, 0x7, 0x566, 0x5, 0x6, 0xc249, 0x1, 0x200, 0x0, 0x1000, 0x7, 0x3, 0x5, 0x2, 0xffffffff, 0x8a, 0x8000, 0x7, 0x3800, 0x1, 0x1, 0x800, 0x80000001, 0x9, 0x100, 0x2, 0x3ff, 0x7, 0x9, 0x2, 0x1, 0xd678, 0x40, 0x8, 0xfa3, 0x8, 0x2, 0x9, 0x4, 0x3, 0x6, 0x5, 0x8000, 0x37, 0x2, 0x6, 0x8000000, 0x4, 0xfffffff7, 0x7, 0x0, 0x4, 0x6, 0xfff, 0xcc, 0xff, 0x400, 0x9, 0x530c, 0x7, 0x1ff, 0x1, 0x800, 0xfffffff9, 0x81, 0x8, 0x665, 0xffff, 0xb, 0x142c, 0x4, 0x5, 0x9, 0x8000, 0x8, 0x7, 0x8, 0x5, 0x7, 0x0, 0x36, 0x1, 0x8000, 0x3, 0x2, 0x8000, 0x2, 0x8, 0x2, 0x40, 0x5, 0xaf, 0x9, 0xffffffff, 0x9, 0x200, 0xd, 0x7011f83e, 0x7fff, 0x75, 0x8, 0x4, 0x5, 0x10001, 0x2a2e, 0x6, 0x6, 0x2]})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18)
syslog(0x9, 0x0, 0x0)

3.434762293s ago: executing program 4 (id=1453):
syz_open_dev$dri(&(0x7f00000000c0), 0x1fc, 0xa800)
mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801010000029b42543092e2a8dba33e9c312d5c47e8000000", @ANYRES64=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='skip_task_reaping\x00', r0, 0x0, 0xa}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20402)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0x252, 0x3, 0x6}, 0x2000007, 0x2, 0x3})
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r7, &(0x7f000001b700)=""/102400, 0x19000)
socket$inet(0x2, 0x2, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)

2.386839694s ago: executing program 4 (id=1454):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prlimit64(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x7, 0xfffffff9, 0x0, 0x1, 0x7, 0x800, 0x3, 0x8, 0xe1e, 0xa7ec, 0x7, 0xbd, 0x8, 0x800006, 0x0, 0x0, {0x3, 0xd}, 0xf, 0xe}})
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
ftruncate(r4, 0x30)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e20, @empty}, 0xfffffffffffffd49)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a", 0x1b6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
socket(0xa, 0x2400000001, 0x0)

2.176547402s ago: executing program 5 (id=1455):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c)

2.12256685s ago: executing program 6 (id=1456):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x6})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0x2811, 0x8, 0x3, 0x112b}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2})
io_uring_enter(r1, 0x847ba, 0x1000000, 0xe, 0x0, 0x0)

1.919117875s ago: executing program 5 (id=1457):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x30, r2, 0x5cfe9b9de6b8c055, 0x70bd22, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb7, 0x5}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x149600, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x10)
write$dsp(r3, &(0x7f00000004c0), 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000440)=""/85, 0x55}, &(0x7f00000004c0), 0x48}, 0x20)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0)
ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000240)={0x2000, 0x480, 0x1e0, 0x320, 0x6, 0x6, 0xf, 0x0, {0x9bf, 0x8}, {0x0, 0xfffffa28, 0x1}, {0x396, 0x2, 0x63}, {0x8, 0x8}, 0x1, 0x100, 0x401, 0x7fffffff, 0x0, 0x3, 0x7, 0x3, 0xc737, 0x6, 0x80000000, 0x9, 0x33, 0x64894bcf5940cb71, 0x1})
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0))
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x406002, 0x4)
r6 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc7, 0x0, &(0x7f0000000300)=""/199, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@mcast2, 0x800, 0x0, 0x3, 0x3, 0x0, 0x100}, 0x20)
getresuid(&(0x7f0000000540)=<r8=>0x0, &(0x7f0000000580), &(0x7f0000000640))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@mcast2, 0x4e22, 0xfff, 0x4e23, 0xffff, 0xa, 0x80, 0x70, 0x0, 0x0, r8}, {0xeab, 0x4, 0x28, 0x0, 0x8, 0x4, 0x3ff, 0x5}, {0x0, 0x6, 0xfffffffffffff788, 0x3}, 0x7, 0x6e6bbd, 0x0, 0x0, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@empty, 0x3503, 0x2, 0x1, 0x5, 0x9, 0x0, 0x3}}, 0xe8)
sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x4, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xe4})

1.807164432s ago: executing program 6 (id=1458):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)

792.108214ms ago: executing program 6 (id=1459):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x2, @raw_data="2a343975d014526a474252479b8ba1020ddc691043a88ea839cd98783924da4a14fba7b7ed4ec69b103742f74a8ca05162770905367f7a89f04eaf93cf298d99f3b017ded7d8411d3c3fdbd7cd62b679d47166123fdacbe4fe91d0d026bdc171e78b766fc610a444bc160a9e1c21d8632416a2fad297bf8688b6055c9e5562fe8ef99e63591e76df3a3b1d7637068149088a16b580a18c83fc9f715f7bd17aa9ab3a084bf96132406d89444ef79e57b0179b38f3aee88bf828de272f71d3923f56e055d19b73971d"}) (async)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x54, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x644}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x54}}, 0x40000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)

612.385194ms ago: executing program 1 (id=1460):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x120)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000080)="0f0d640c6665f20f10ad00000fc7af0a000f201bd11fbaf80c66b840cd3c8466efbafc0cb011eeb800068ee00f20d86635080000000f22d866b9950300000f32660f38826bd3", 0x46}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004)
r4 = socket(0x2, 0x1, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r5, 0xab00, r4)
ioctl$NBD_DO_IT(r5, 0xab03)
sendto$inet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
unshare(0x2040400)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
writev(r6, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000980)='|', 0x36}], 0x2)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00')
preadv(r7, &(0x7f0000003580)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x33, 0x8)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844)

604.253334ms ago: executing program 4 (id=1461):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
userfaultfd(0x80801)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)

435.940207ms ago: executing program 6 (id=1462):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
userfaultfd(0x80801)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)

402.322931ms ago: executing program 4 (id=1463):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000000)=""/53, 0x35)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r3, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0xffffffc0}}, 0x0}, 0x94)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c)
ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000080)={0x3, 0x1})
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d)

309.259083ms ago: executing program 7 (id=1464):
syz_open_dev$dri(&(0x7f00000000c0), 0x1fc, 0xa800)
mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801010000029b42543092e2a8dba33e9c312d5c47e8000000", @ANYRES64=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='skip_task_reaping\x00', r0, 0x0, 0xa}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20402)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f000001b700)=""/102400, 0x19000)
socket$inet(0x2, 0x2, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)

0s ago: executing program 4 (id=1465):
fsmount(0xffffffffffffffff, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x228}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x200003, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f00000002c0)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0])

kernel console output (not intermixed with test programs):


[  320.429427][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.762169][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.753069][   T51] Bluetooth: hci4: command tx timeout
[  321.949122][ T6221] hsr_slave_0: left promiscuous mode
[  322.016890][ T6221] hsr_slave_1: left promiscuous mode
[  322.049012][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.081962][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.189170][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.209990][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.347390][ T6221] veth1_macvtap: left promiscuous mode
[  322.371064][ T6221] veth0_macvtap: left promiscuous mode
[  322.457193][ T6221] veth1_vlan: left promiscuous mode
[  322.476137][ T6221] veth0_vlan: left promiscuous mode
[  323.839854][   T51] Bluetooth: hci4: command tx timeout
[  325.505595][ T6221] team0 (unregistering): Port device team_slave_1 removed
[  325.893149][   T51] Bluetooth: hci4: command tx timeout
[  326.289826][ T6221] team0 (unregistering): Port device team_slave_0 removed
[  328.129455][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  328.303011][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  328.310098][ T5927] usb 2-1: no configurations
[  328.317985][ T5927] usb 2-1: can't read configurations, error -22
[  328.440972][ T7987] team0: Port device team_slave_0 added
[  328.477372][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  328.487887][ T7987] team0: Port device team_slave_1 added
[  328.665777][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.674278][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.701026][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.714538][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.721510][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.731545][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  328.762529][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.766359][ T5927] usb 2-1: no configurations
[  328.821535][ T5927] usb 2-1: can't read configurations, error -22
[  328.841324][ T5927] usb usb2-port1: attempt power cycle
[  329.003840][ T7987] hsr_slave_0: entered promiscuous mode
[  329.014458][ T7987] hsr_slave_1: entered promiscuous mode
[  329.213023][ T5927] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  329.233376][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  329.240337][ T5927] usb 2-1: no configurations
[  329.245672][ T5927] usb 2-1: can't read configurations, error -22
[  329.394345][ T5927] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  329.503854][ T5927] usb 2-1: Using ep0 maxpacket: 8
[  329.527496][ T5927] usb 2-1: no configurations
[  329.532164][ T5927] usb 2-1: can't read configurations, error -22
[  329.601087][ T5927] usb usb2-port1: unable to enumerate USB device
[  329.614044][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'.
[  329.679016][ T8199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.760424][ T8199] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.003738][ T6221] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.198604][ T8078] chnl_net:caif_netlink_parms(): no params data found
[  330.677866][ T8209] process 'syz.4.449' launched './file0' with NULL argv: empty string added
[  331.382119][ T6221] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.891312][ T6221] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.087514][ T6221] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.162723][ T5999] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  332.326106][ T5999] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  332.346668][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.379548][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  332.395920][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.425154][ T8078] bridge_slave_0: entered allmulticast mode
[  332.432490][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  332.449470][ T8078] bridge_slave_0: entered promiscuous mode
[  332.455539][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  332.474107][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.492101][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.499608][ T5999] usb 1-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00
[  332.509619][ T8078] bridge_slave_1: entered allmulticast mode
[  332.519472][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.535939][ T8078] bridge_slave_1: entered promiscuous mode
[  332.548124][ T5999] usb 1-1: config 0 descriptor??
[  332.556965][ T8223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  332.766814][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.793293][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.916080][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.154136][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.204531][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.333575][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.485675][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.543024][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.597948][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.721129][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.918824][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.976651][ T5999] logitech-djreceiver 0003:046D:C70A.0002: hidraw0: USB HID v0.00 Device [HID 046d:c70a] on usb-dummy_hcd.0-1/input0
[  334.040668][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.491531][   T43] usb 1-1: USB disconnect, device number 6
[  334.766797][ T8078] team0: Port device team_slave_0 added
[  334.794374][ T6221] bridge_slave_1: left allmulticast mode
[  334.803677][ T6221] bridge_slave_1: left promiscuous mode
[  334.832757][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.875855][ T6221] bridge_slave_0: left allmulticast mode
[  334.881580][ T6221] bridge_slave_0: left promiscuous mode
[  334.925352][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.400548][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'.
[  336.473555][ T6221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.487790][ T6221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.505653][ T6221] bond0 (unregistering): Released all slaves
[  336.521069][ T8250] netlink: 'syz.4.456': attribute type 15 has an invalid length.
[  336.535813][ T8078] team0: Port device team_slave_1 added
[  336.757092][ T6221] hsr_slave_0: left promiscuous mode
[  336.804175][ T6221] hsr_slave_1: left promiscuous mode
[  336.810692][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.826132][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.840750][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.850382][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.891313][ T6221] veth1_macvtap: left promiscuous mode
[  336.900707][ T6221] veth0_macvtap: left promiscuous mode
[  336.908928][ T6221] veth1_vlan: left promiscuous mode
[  336.918122][ T6221] veth0_vlan: left promiscuous mode
[  337.900203][ T8269] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  338.544959][ T6221] team0 (unregistering): Port device team_slave_1 removed
[  338.630495][ T6221] team0 (unregistering): Port device team_slave_0 removed
[  340.205701][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.242481][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.283683][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.297092][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.307773][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.339033][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.829887][ T8078] hsr_slave_0: entered promiscuous mode
[  340.849422][ T8078] hsr_slave_1: entered promiscuous mode
[  340.877553][ T8078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.924345][ T8078] Cannot create hsr debugfs directory
[  343.395024][ T7987] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  343.437612][ T7987] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  343.490030][ T7987] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  343.516485][ T7987] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  343.613034][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  343.787191][   T24] usb 2-1: config 2 has an invalid descriptor of length 238, skipping remainder of the config
[  343.830253][   T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  343.856477][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.869514][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=d8.dd
[  343.885795][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.912319][   T24] usb 2-1: Product: syz
[  343.931693][   T24] usb 2-1: Manufacturer: syz
[  343.945825][ T7987] 8021q: adding VLAN 0 to HW filter on device team0
[  343.954211][   T24] usb 2-1: SerialNumber: syz
[  343.976782][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.984055][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.048382][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.055681][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.475729][   T24] usb 2-1: USB disconnect, device number 14
[  344.932332][ T8344] netlink: 'syz.4.473': attribute type 10 has an invalid length.
[  344.974751][ T8344] syz_tun: entered promiscuous mode
[  344.995594][ T8344] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  345.015528][ T8078] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  345.044388][ T8078] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  345.076215][ T8078] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  345.146108][ T8078] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  347.197501][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.385456][ T8078] 8021q: adding VLAN 0 to HW filter on device team0
[  347.414688][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.421862][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.454433][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.461805][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.062999][ T8386] 9pnet_fd: Insufficient options for proto=fd
[  349.007940][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.250896][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.642687][ T5927] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  349.668659][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'.
[  349.808656][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  349.808676][   T30] audit: type=1326 audit(1755769599.927:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8409 comm="syz.4.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7dfc0000
[  349.826661][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  349.874282][ T5927] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  349.929384][ T5927] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c
[  349.954231][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.986792][ T5927] usb 1-1: Product: syz
[  349.991058][ T5927] usb 1-1: Manufacturer: syz
[  350.016516][ T5927] usb 1-1: SerialNumber: syz
[  350.039069][ T5927] usb 1-1: config 0 descriptor??
[  350.070089][ T5927] usb 1-1: bad CDC descriptors
[  350.184143][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.298908][ T7987] veth0_vlan: entered promiscuous mode
[  350.308289][ T5927] usb 1-1: USB disconnect, device number 7
[  350.338617][ T7987] veth1_vlan: entered promiscuous mode
[  350.506531][ T7987] veth0_macvtap: entered promiscuous mode
[  350.555930][ T7987] veth1_macvtap: entered promiscuous mode
[  350.640325][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.720648][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.753930][ T7987] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.792530][ T7987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.821680][ T7987] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.845324][ T7987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.193192][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.209779][ T8434] kvm: Disabled LAPIC found during irq injection
[  351.249848][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.379917][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.408823][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.588996][ T8078] veth0_vlan: entered promiscuous mode
[  351.716578][ T8078] veth1_vlan: entered promiscuous mode
[  351.959265][ T8078] veth0_macvtap: entered promiscuous mode
[  353.328714][ T8078] veth1_macvtap: entered promiscuous mode
[  353.687138][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.716832][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.741099][ T8078] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.772579][ T8078] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.832651][ T8078] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.882771][ T8078] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.626016][ T6221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.953179][ T6221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.168001][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.180095][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.885332][ T8489] binder_alloc: 8487: binder_alloc_buf, no vma
[  359.213347][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[  360.488891][ T8514] gretap0: refused to change device tx_queue_len
[  360.684370][ T8514] net_ratelimit: 6 callbacks suppressed
[  360.684484][ T8514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  362.591999][ T8528] binder: 8522:8528 ioctl c0306201 2000000001c0 returned -22
[  365.489709][ T8534] qnx4: no qnx4 filesystem (no root dir).
[  367.258531][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'.
[  369.462859][ T8574] sctp: [Deprecated]: syz.6.517 (pid 8574) Use of int in max_burst socket option deprecated.
[  369.462859][ T8574] Use struct sctp_assoc_value instead
[  377.264020][   T30] audit: type=1326 audit(1755769627.387:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  378.766535][   T30] audit: type=1326 audit(1755769627.387:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  378.788384][   T30] audit: type=1326 audit(1755769628.387:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  378.809951][   T30] audit: type=1326 audit(1755769628.387:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  378.839097][   T30] audit: type=1326 audit(1755769628.397:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  378.863141][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.978462][   T30] audit: type=1326 audit(1755769628.397:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  379.007466][   T30] audit: type=1326 audit(1755769628.907:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  379.035962][   T30] audit: type=1326 audit(1755769628.907:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  379.066827][   T30] audit: type=1326 audit(1755769628.907:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  379.146109][   T30] audit: type=1326 audit(1755769629.087:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.6.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f81a6b8ebe9 code=0x7ffc0000
[  379.334712][ T8662] overlayfs: failed to clone upperpath
[  379.560569][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.538'.
[  381.889346][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'.
[  382.065786][ T8669] team0 (unregistering): Port device team_slave_0 removed
[  382.129491][ T8669] team0 (unregistering): Port device team_slave_1 removed
[  382.378288][ T8686] ip6gretap0: entered promiscuous mode
[  382.400248][ T8686] ip6gretap0: left promiscuous mode
[  383.537005][ T8704] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  383.978232][  T977] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  385.117539][  T977] usb 7-1: Using ep0 maxpacket: 32
[  385.156448][  T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.232061][  T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.356192][  T977] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  385.442886][  T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.613714][  T977] usb 7-1: config 0 descriptor??
[  390.696142][  T977] usbhid 7-1:0.0: can't add hid device: -32
[  390.702231][  T977] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[  390.905309][  T977] usb 7-1: USB disconnect, device number 2
[  390.915718][ T8775] binder: BINDER_SET_CONTEXT_MGR already set
[  390.922011][ T8775] binder: 8774:8775 ioctl 4018620d 200000000040 returned -16
[  391.423844][ T5999] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  391.644935][ T5999] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  394.332000][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.594224][ T5999] usb 1-1: config 0 descriptor??
[  394.600342][ T5999] usb 1-1: can't set config #0, error -71
[  394.620828][ T8810] syz_tun: entered allmulticast mode
[  394.632593][ T8807] syz_tun: left allmulticast mode
[  396.560037][ T5999] usb 1-1: USB disconnect, device number 8
[  396.643846][ T8820] binder: BINDER_SET_CONTEXT_MGR already set
[  396.650112][ T8820] binder: 8816:8820 ioctl 4018620d 200000000040 returned -16
[  396.660388][ T8820] binder: 8816:8820 ioctl c0306201 2000000001c0 returned -22
[  397.222167][ T8827] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  404.102905][ T1225] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  404.283486][ T1225] usb 6-1: Using ep0 maxpacket: 16
[  404.295880][ T1225] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  404.332050][ T1225] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.389144][ T1225] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.418039][ T1225] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  404.441743][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.480967][ T1225] usb 6-1: Product: syz
[  404.509534][ T1225] usb 6-1: Manufacturer: syz
[  404.517081][ T1225] usb 6-1: SerialNumber: syz
[  404.940778][ T1225] usb 6-1: 0:2 : does not exist
[  405.801208][ T6214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.789260][ T1225] usb 6-1: USB disconnect, device number 2
[  407.810500][ T6214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.497288][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  408.507545][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  408.531571][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  408.540907][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  408.550825][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  408.875854][ T6214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.327068][ T6214] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.536981][ T8989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  410.099858][ T9001] binder: 8993:9001 ioctl c0306201 2000000001c0 returned -22
[  410.612526][   T51] Bluetooth: hci4: command tx timeout
[  412.339615][ T8966] chnl_net:caif_netlink_parms(): no params data found
[  412.600064][ T6214] bridge_slave_1: left allmulticast mode
[  412.627050][ T6214] bridge_slave_1: left promiscuous mode
[  412.669900][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.690084][ T6214] bridge_slave_0: left allmulticast mode
[  412.696034][ T5999] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  412.709643][   T51] Bluetooth: hci4: command tx timeout
[  412.727572][ T6214] bridge_slave_0: left promiscuous mode
[  412.740519][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.925441][ T5999] usb 2-1: Using ep0 maxpacket: 16
[  412.949778][ T5999] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  412.972403][ T5999] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.010409][ T5999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  413.168456][ T5999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  413.182478][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.202393][ T5999] usb 2-1: Product: syz
[  413.206649][ T5999] usb 2-1: Manufacturer: syz
[  413.218162][ T5999] usb 2-1: SerialNumber: syz
[  414.458189][ T5999] usb 2-1: 0:2 : does not exist
[  414.782722][   T51] Bluetooth: hci4: command tx timeout
[  415.867011][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.898925][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.911884][ T6214] bond0 (unregistering): Released all slaves
[  416.852933][   T51] Bluetooth: hci4: command tx timeout
[  417.090516][ T9052] : entered promiscuous mode
[  417.179498][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.213118][ T5927] usb 2-1: USB disconnect, device number 15
[  417.234648][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.241980][ T8966] bridge_slave_0: entered allmulticast mode
[  417.256993][ T8966] bridge_slave_0: entered promiscuous mode
[  417.391134][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.398933][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.406222][ T8966] bridge_slave_1: entered allmulticast mode
[  417.415284][ T8966] bridge_slave_1: entered promiscuous mode
[  417.498134][ T9058] netlink: 'syz.1.622': attribute type 83 has an invalid length.
[  418.476253][ T6214] hsr_slave_0: left promiscuous mode
[  418.536224][ T6214] hsr_slave_1: left promiscuous mode
[  418.549743][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.593904][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.615856][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.633005][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.755972][ T6214] veth1_macvtap: left promiscuous mode
[  418.791698][ T6214] veth0_macvtap: left promiscuous mode
[  418.815017][ T6214] veth1_vlan: left promiscuous mode
[  418.997950][ T6214] veth0_vlan: left promiscuous mode
[  420.692959][ T9091] netlink: 'syz.0.629': attribute type 2 has an invalid length.
[  422.504175][ T5903] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  422.774967][ T5903] usb 2-1: Using ep0 maxpacket: 8
[  422.877619][ T5903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  422.890741][ T5903] usb 2-1: config 0 has no interface number 0
[  422.907879][ T5903] usb 2-1: config 0 interface 1 has no altsetting 0
[  423.075659][ T5903] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d
[  423.812624][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.822459][ T5903] usb 2-1: Product: syz
[  423.828520][ T5903] usb 2-1: Manufacturer: syz
[  423.833265][ T5903] usb 2-1: SerialNumber: syz
[  423.846018][ T5903] usb 2-1: config 0 descriptor??
[  424.040156][ T6214] team0 (unregistering): Port device team_slave_1 removed
[  424.067550][ T5903] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  424.098936][ T6214] team0 (unregistering): Port device team_slave_0 removed
[  424.290554][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.327482][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.368328][ T5903] usb 2-1: USB disconnect, device number 16
[  424.459109][ T9114] fuse: Unknown parameter 'use00000000000000000000'
[  425.003239][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.330850][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.515211][ T8966] team0: Port device team_slave_0 added
[  425.534265][ T8966] team0: Port device team_slave_1 added
[  425.637786][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.648143][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.675198][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.704224][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.711241][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.747934][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.585994][ T8966] hsr_slave_0: entered promiscuous mode
[  426.603999][ T8966] hsr_slave_1: entered promiscuous mode
[  426.622273][ T8966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.678000][ T8966] Cannot create hsr debugfs directory
[  426.697806][   T51] Bluetooth: hci1: ACL packet for unknown connection handle 456
[  427.791336][ T6214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.669946][ T6214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.704724][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  428.715865][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  428.726136][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  428.739859][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  428.748498][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  429.020175][ T6214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.395514][ T6214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.055489][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  430.772949][ T5837] Bluetooth: hci3: command tx timeout
[  430.946578][ T6214] bridge_slave_1: left allmulticast mode
[  430.953682][ T6214] bridge_slave_1: left promiscuous mode
[  430.965225][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.986408][ T6214] bridge_slave_0: left allmulticast mode
[  430.992255][ T6214] bridge_slave_0: left promiscuous mode
[  430.999626][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.572458][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.587956][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.608932][ T6214] bond0 (unregistering): Released all slaves
[  431.799233][ T6214] : left promiscuous mode
[  432.932678][ T5837] Bluetooth: hci3: command tx timeout
[  433.300726][ T9150] chnl_net:caif_netlink_parms(): no params data found
[  433.843770][ T9219] syz.1.659: attempt to access beyond end of device
[  433.843770][ T9219] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  433.858268][ T9219] syz.1.659: attempt to access beyond end of device
[  433.858268][ T9219] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  433.872055][ T9219] Mount JFS Failure: -5
[  434.650087][ T6214] hsr_slave_0: left promiscuous mode
[  434.667456][ T6214] hsr_slave_1: left promiscuous mode
[  434.673843][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.892567][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.012742][ T5837] Bluetooth: hci3: command tx timeout
[  435.023346][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.052594][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.221399][ T9234] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  435.429136][ T6214] veth1_macvtap: left promiscuous mode
[  435.444594][ T6214] veth0_macvtap: left promiscuous mode
[  435.457981][ T6214] veth1_vlan: left promiscuous mode
[  435.482619][ T6214] veth0_vlan: left promiscuous mode
[  437.092776][ T5837] Bluetooth: hci3: command tx timeout
[  437.181076][ T8966] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  437.215815][ T8966] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  437.360645][ T9255] binder: 9251:9255 ioctl c0306201 2000000001c0 returned -22
[  438.330023][ T8966] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  438.386099][ T8966] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  438.966575][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.980540][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.989714][ T9150] bridge_slave_0: entered allmulticast mode
[  438.999890][ T9150] bridge_slave_0: entered promiscuous mode
[  439.008641][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'.
[  439.091743][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.113725][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.148240][ T9150] bridge_slave_1: entered allmulticast mode
[  439.157681][ T9150] bridge_slave_1: entered promiscuous mode
[  439.265098][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.328956][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.549765][ T9150] team0: Port device team_slave_0 added
[  439.600305][ T9150] team0: Port device team_slave_1 added
[  439.816703][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'.
[  439.830017][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.847816][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.942890][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.981767][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.998561][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.077648][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.292056][ T9150] hsr_slave_0: entered promiscuous mode
[  440.317891][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.349700][ T9150] hsr_slave_1: entered promiscuous mode
[  440.696170][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.066905][ T8966] 8021q: adding VLAN 0 to HW filter on device team0
[  441.274349][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.281751][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.550053][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.557307][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.690269][ T9331] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  444.363004][ T9331] usb 2-1: Using ep0 maxpacket: 8
[  444.377512][ T9331] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  444.413448][ T9331] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  444.451876][ T9331] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  444.478462][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.497107][ T9331] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  444.545536][ T9150] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  444.553402][ T9331] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.563751][ T9331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.592753][ T9150] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  444.664643][ T9150] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  444.733328][ T9150] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  444.787277][ T6043] kworker/u8:15 (6043) used greatest stack depth: 19392 bytes left
[  444.824349][ T9331] usb 2-1: GET_CAPABILITIES returned 0
[  444.853854][ T9331] usbtmc 2-1:16.0: can't read capabilities
[  445.028419][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.097287][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.400564][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.497489][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.674523][ T9331] usb 2-1: USB disconnect, device number 17
[  445.692067][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.811161][ T9150] 8021q: adding VLAN 0 to HW filter on device team0
[  445.857180][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.864557][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.908279][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.915730][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.179122][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'.
[  446.187040][ T8966] veth0_vlan: entered promiscuous mode
[  446.245193][ T8966] veth1_vlan: entered promiscuous mode
[  446.383260][ T8966] veth0_macvtap: entered promiscuous mode
[  446.436673][ T8966] veth1_macvtap: entered promiscuous mode
[  447.119335][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.182376][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.270549][ T8966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.313191][ T8966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.349178][ T8966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.359680][ T8966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.631105][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.924439][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.959267][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.102015][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.207529][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.199835][ T9150] veth0_vlan: entered promiscuous mode
[  450.269181][ T9150] veth1_vlan: entered promiscuous mode
[  450.501868][ T9446] syzkaller1: entered promiscuous mode
[  450.543393][ T9446] syzkaller1: entered allmulticast mode
[  450.744081][ T9150] veth0_macvtap: entered promiscuous mode
[  450.795122][ T9150] veth1_macvtap: entered promiscuous mode
[  451.018499][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.083635][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.125436][ T9150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.202690][ T9150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.385332][ T9150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.684326][ T9150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.176699][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.215599][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.350467][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.365551][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.742233][ T9485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.447908][ T9493] binder: BINDER_SET_CONTEXT_MGR already set
[  455.454220][ T9493] binder: 9491:9493 ioctl 4018620d 200000000040 returned -16
[  455.465149][ T9493] binder: 9491:9493 ioctl c0306201 2000000001c0 returned -22
[  455.482581][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  456.543696][ T5923] usb 6-1: Using ep0 maxpacket: 32
[  456.596000][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  456.649579][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  456.697324][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  456.758443][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  456.821356][ T5923] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  456.860198][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.193548][ T5923] usb 6-1: Product: syz
[  457.298040][ T5923] usb 6-1: Manufacturer: syz
[  457.410829][ T5923] usb 6-1: SerialNumber: syz
[  457.524013][ T5923] usb 6-1: config 0 descriptor??
[  457.582974][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8
[  457.630039][ T5190] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  457.702780][    C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  457.773681][ T5190] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  457.838758][ T5923] usb 6-1: USB disconnect, device number 3
[  457.844758][    C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  457.992589][ T1225] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  458.194500][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  458.248374][ T1225] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  458.451305][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.539599][ T1225] usb 1-1: config 0 descriptor??
[  458.570977][ T9508] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  460.723487][ T1225] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  460.753605][ T1225] usb 1-1: USB disconnect, device number 9
[  461.297156][ T9544] fido_id[9544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  462.649167][ T9572] syzkaller1: entered promiscuous mode
[  462.655196][ T9572] syzkaller1: entered allmulticast mode
[  462.802542][ T1225] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  463.037181][ T1225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.133522][ T1225] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  463.398145][ T1225] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  463.478498][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.576504][ T1225] usb 1-1: Product: syz
[  463.611220][ T1225] usb 1-1: Manufacturer: syz
[  463.676677][ T1225] usb 1-1: SerialNumber: syz
[  464.438229][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  464.438251][   T30] audit: type=1326 audit(1755769714.477:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  464.619370][   T30] audit: type=1326 audit(1755769714.517:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  464.665015][   T30] audit: type=1326 audit(1755769714.607:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  464.689682][ T1225] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  464.790384][ T9592] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  464.797129][ T9592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  464.806824][ T9592] vhci_hcd vhci_hcd.0: Device attached
[  465.096817][   T30] audit: type=1326 audit(1755769714.607:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.118901][  T977] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  465.306378][ T1225] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  465.321501][ T1225] usb 1-1: USB disconnect, device number 10
[  465.331619][   T30] audit: type=1326 audit(1755769714.607:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.356763][   T30] audit: type=1326 audit(1755769714.617:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.378303][   T30] audit: type=1326 audit(1755769714.617:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.400303][   T30] audit: type=1326 audit(1755769714.617:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.439831][ T8177] udevd[8177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.476577][   T30] audit: type=1326 audit(1755769714.637:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.544071][   T30] audit: type=1326 audit(1755769714.637:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88478ebe9 code=0x7ffc0000
[  465.778608][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  466.069086][ T9593] vhci_hcd: connection reset by peer
[  466.126718][ T5964] vhci_hcd: stop threads
[  466.181879][ T5964] vhci_hcd: release socket
[  466.215533][ T5964] vhci_hcd: disconnect device
[  466.710322][ T6057] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.994599][ T6057] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.204446][ T6057] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.376356][ T6057] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.849516][ T9632] sctp: [Deprecated]: syz.4.734 (pid 9632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  467.849516][ T9632] Use struct sctp_sack_info instead
[  467.885112][ T9633] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.733'.
[  470.492806][  T977] vhci_hcd: vhci_device speed not set
[  470.927746][ T6057] bridge_slave_1: left allmulticast mode
[  470.949167][ T6057] bridge_slave_1: left promiscuous mode
[  471.009239][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.225058][ T6057] bridge_slave_0: left allmulticast mode
[  471.272499][ T6057] bridge_slave_0: left promiscuous mode
[  471.278448][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.643800][ T9650] syz.5.737: attempt to access beyond end of device
[  471.643800][ T9650] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0
[  471.707057][ T9650] EXT4-fs (nbd5): unable to read superblock
[  471.894211][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  471.903853][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  471.912106][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  471.923221][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  471.954070][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  472.445963][ T9657] xt_TPROXY: Can be used only with -p tcp or -p udp
[  473.358044][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.399309][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.424862][ T6057] bond0 (unregistering): Released all slaves
[  474.080443][   T51] Bluetooth: hci4: command tx timeout
[  475.126537][ T6057] hsr_slave_0: left promiscuous mode
[  475.156967][ T6057] hsr_slave_1: left promiscuous mode
[  475.169401][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.182603][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.196371][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.206888][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.236795][ T6057] veth1_macvtap: left promiscuous mode
[  475.242536][ T6057] veth0_macvtap: left promiscuous mode
[  475.249543][ T6057] veth1_vlan: left promiscuous mode
[  475.255820][ T6057] veth0_vlan: left promiscuous mode
[  476.134403][   T51] Bluetooth: hci4: command tx timeout
[  477.034819][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  477.063210][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  477.073318][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  477.081500][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  477.089318][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  477.267771][ T6057] team0 (unregistering): Port device team_slave_1 removed
[  477.627301][ T6057] team0 (unregistering): Port device team_slave_0 removed
[  478.213127][ T5837] Bluetooth: hci4: command tx timeout
[  479.172824][ T5837] Bluetooth: hci0: command tx timeout
[  480.283388][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'.
[  480.295913][ T5837] Bluetooth: hci4: command tx timeout
[  480.326162][ T9652] chnl_net:caif_netlink_parms(): no params data found
[  480.709910][ T9725] evm: overlay not supported
[  481.350615][ T5837] Bluetooth: hci0: command tx timeout
[  481.865771][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.916085][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.317480][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.386282][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.420615][ T9652] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.431078][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.441850][ T9652] bridge_slave_0: entered allmulticast mode
[  482.473110][ T9652] bridge_slave_0: entered promiscuous mode
[  482.715798][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.729144][ T9749] netlink: 'syz.5.762': attribute type 1 has an invalid length.
[  482.750696][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.768248][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.776887][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.854396][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'.
[  482.873285][ T9652] bridge_slave_1: entered allmulticast mode
[  482.902136][ T9652] bridge_slave_1: entered promiscuous mode
[  483.029534][ T9691] chnl_net:caif_netlink_parms(): no params data found
[  483.156393][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  483.207569][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.308284][ T9652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.416727][ T5837] Bluetooth: hci0: command tx timeout
[  483.495131][ T9652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.684311][ T9652] team0: Port device team_slave_0 added
[  484.256529][ T9652] team0: Port device team_slave_1 added
[  484.567555][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.583408][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.619452][ T9652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.645025][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.660158][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.725031][ T9652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.757153][ T9767] kvm: emulating exchange as write
[  484.782404][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.789633][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.820901][ T9691] bridge_slave_0: entered allmulticast mode
[  484.829657][ T9691] bridge_slave_0: entered promiscuous mode
[  484.926871][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.943941][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.981749][ T9691] bridge_slave_1: entered allmulticast mode
[  485.013670][ T9691] bridge_slave_1: entered promiscuous mode
[  485.493750][ T5837] Bluetooth: hci0: command tx timeout
[  486.925184][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.978638][ T6057] bridge_slave_1: left allmulticast mode
[  487.025714][ T6057] bridge_slave_1: left promiscuous mode
[  487.045691][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.112044][ T6057] bridge_slave_0: left allmulticast mode
[  487.127861][ T6057] bridge_slave_0: left promiscuous mode
[  487.150811][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.691273][ T9798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[  487.728972][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'.
[  488.071155][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.086744][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.099169][ T6057] bond0 (unregistering): Released all slaves
[  488.128671][ T9652] hsr_slave_0: entered promiscuous mode
[  488.137402][ T9652] hsr_slave_1: entered promiscuous mode
[  488.154659][ T9652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  488.169764][ T9652] Cannot create hsr debugfs directory
[  488.231984][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.648260][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.774'.
[  489.125215][ T9691] team0: Port device team_slave_0 added
[  489.320937][ T9691] team0: Port device team_slave_1 added
[  489.557929][ T9814] binder: 9812:9814 ioctl c0306201 2000000001c0 returned -22
[  490.904069][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.914184][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.990917][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.073544][ T6057] hsr_slave_0: left promiscuous mode
[  491.079797][ T6057] hsr_slave_1: left promiscuous mode
[  491.091906][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.128707][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.135448][ T9822] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  491.156879][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.173214][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.199394][ T6057] veth1_macvtap: left promiscuous mode
[  491.210060][ T6057] veth0_macvtap: left promiscuous mode
[  491.217537][ T6057] veth1_vlan: left promiscuous mode
[  491.226283][ T6057] veth0_vlan: left promiscuous mode
[  493.389935][ T6057] team0 (unregistering): Port device team_slave_1 removed
[  493.456441][ T6057] team0 (unregistering): Port device team_slave_0 removed
[  494.141400][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.151057][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.285555][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.560561][ T9691] hsr_slave_0: entered promiscuous mode
[  494.570481][ T9691] hsr_slave_1: entered promiscuous mode
[  494.577123][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.585117][ T9691] Cannot create hsr debugfs directory
[  496.107407][ T9652] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  496.284088][ T9652] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  496.398337][ T9652] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  496.460426][ T9652] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  496.627339][ T9691] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  496.681119][ T9691] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  496.713681][ T9691] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  496.751039][ T9691] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  496.797952][ T9866] fuse: Bad value for 'fd'
[  497.115407][ T9652] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.226293][ T9652] 8021q: adding VLAN 0 to HW filter on device team0
[  497.255788][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.313098][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.320261][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.354223][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.361514][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.440692][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  497.513730][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.520880][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.615659][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.622932][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.626963][ T9652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.766498][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.220543][ T9691] veth0_vlan: entered promiscuous mode
[  501.197139][ T9691] veth1_vlan: entered promiscuous mode
[  501.460058][ T9691] veth0_macvtap: entered promiscuous mode
[  501.517462][ T9691] veth1_macvtap: entered promiscuous mode
[  501.595055][ T9652] veth0_vlan: entered promiscuous mode
[  501.767867][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.812522][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.836899][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.856879][ T9691] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.877703][ T9691] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.972380][ T9691] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.997548][ T9691] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.185401][ T9652] veth1_vlan: entered promiscuous mode
[  502.449919][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.515373][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.633973][ T9652] veth0_macvtap: entered promiscuous mode
[  502.685599][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.701757][ T9652] veth1_macvtap: entered promiscuous mode
[  503.268426][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.391642][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.638590][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'.
[  503.659861][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.290488][ T9652] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.310676][ T9652] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.330439][ T9652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.350341][ T9652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.609339][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.639867][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.068275][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.257058][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.809252][T10006] overlayfs: conflicting options: userxattr,redirect_dir=on
[  510.242061][T10037] syz.7.812: attempt to access beyond end of device
[  510.242061][T10037] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  510.255078][T10037] syz.7.812: attempt to access beyond end of device
[  510.255078][T10037] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  510.268005][T10037] Mount JFS Failure: -5
[  512.391908][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  512.391929][   T30] audit: type=1326 audit(1755769762.497:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  512.492388][   T30] audit: type=1326 audit(1755769762.507:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  512.622244][   T30] audit: type=1326 audit(1755769762.507:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  512.697975][   T30] audit: type=1326 audit(1755769762.507:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  512.839689][   T30] audit: type=1326 audit(1755769762.507:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  512.886522][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'.
[  513.233326][  T977] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  513.531615][   T30] audit: type=1326 audit(1755769762.507:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  514.672477][   T30] audit: type=1326 audit(1755769762.507:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  514.712468][   T30] audit: type=1326 audit(1755769762.507:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  514.738139][   T30] audit: type=1326 audit(1755769762.507:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050af8ebe9 code=0x7ffc0000
[  514.762493][   T30] audit: type=1326 audit(1755769762.507:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10049 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f050af8d550 code=0x7ffc0000
[  515.034911][  T977] usb 7-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  515.045542][  T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.109782][  T977] usb 7-1: config 0 descriptor??
[  515.154089][  T977] gspca_main: xirlink-cit-2.14.0 probing 0545:800d
[  515.392265][  T977] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10
[  516.152456][ T5903] usb 7-1: USB disconnect, device number 3
[  516.626142][T10095] netlink: 'syz.4.825': attribute type 29 has an invalid length.
[  516.636035][T10096] netlink: 'syz.4.825': attribute type 29 has an invalid length.
[  517.049888][T10103] syz.7.826: attempt to access beyond end of device
[  517.049888][T10103] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  517.064701][T10103] syz.7.826: attempt to access beyond end of device
[  517.064701][T10103] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  517.078397][T10103] Mount JFS Failure: -5
[  517.756888][ T5923] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  517.942625][ T5923] usb 2-1: device descriptor read/64, error -71
[  518.468341][T10107] Cannot find add_set index 0 as target
[  518.682527][ T5923] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  518.892474][ T5923] usb 2-1: device descriptor read/64, error -71
[  519.015303][ T5923] usb usb2-port1: attempt power cycle
[  519.060987][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'.
[  519.114670][T10115] dummy0: entered promiscuous mode
[  519.288970][T10115] dummy0: left promiscuous mode
[  519.363215][ T5923] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  519.384950][ T5923] usb 2-1: device descriptor read/8, error -71
[  519.622486][ T5923] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  520.086819][ T5923] usb 2-1: device descriptor read/8, error -71
[  520.274351][ T5923] usb usb2-port1: unable to enumerate USB device
[  520.613682][T10130] netlink: 'syz.1.833': attribute type 2 has an invalid length.
[  522.354662][T10161] syz.1.838: attempt to access beyond end of device
[  522.354662][T10161] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  522.368019][T10161] syz.1.838: attempt to access beyond end of device
[  522.368019][T10161] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  522.381088][T10161] Mount JFS Failure: -5
[  523.233318][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  523.233340][   T30] audit: type=1326 audit(1755769773.347:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  523.277286][T10170] sock: sock_timestamping_bind_phc: sock not bind to device
[  523.388081][   T30] audit: type=1326 audit(1755769773.357:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  523.495173][   T30] audit: type=1326 audit(1755769773.467:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  523.514619][T10170] xt_CT: No such helper "pptp"
[  523.533778][T10185] tipc: Started in network mode
[  523.540770][T10185] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711
[  523.559486][   T30] audit: type=1326 audit(1755769773.467:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  523.590147][T10185] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  523.755005][   T30] audit: type=1326 audit(1755769773.467:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  523.798489][   T30] audit: type=1326 audit(1755769773.467:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8db18d550 code=0x7ffc0000
[  523.884065][   T30] audit: type=1326 audit(1755769773.467:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  524.012535][   T30] audit: type=1326 audit(1755769773.467:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  524.107795][   T30] audit: type=1326 audit(1755769773.467:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  524.198333][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'.
[  524.252734][   T30] audit: type=1326 audit(1755769773.467:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10167 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8db18ebe9 code=0x7ffc0000
[  524.714541][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.6.843'.
[  524.755098][T10207] overlayfs: failed to resolve './file1': -2
[  525.366353][T10217] dummy0: entered promiscuous mode
[  525.371970][T10217] vlan2: entered promiscuous mode
[  526.822419][T10243] syz.1.856: attempt to access beyond end of device
[  526.822419][T10243] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  526.835378][T10243] syz.1.856: attempt to access beyond end of device
[  526.835378][T10243] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  526.848312][T10243] Mount JFS Failure: -5
[  527.412570][ T5903] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  527.764104][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  527.792481][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.640026][ T5903] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  528.649920][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.666272][ T5903] usb 6-1: config 0 descriptor??
[  528.686893][ T5903] gspca_main: vc032x-2.14.0 probing 046d:0892
[  528.859477][ T5903] gspca_vc032x: reg_r err -71
[  528.897321][ T5903] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  528.945229][ T5903] usb 6-1: USB disconnect, device number 4
[  530.044593][T10266] trusted_key: encrypted_key: insufficient parameters specified
[  531.955082][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.863'.
[  533.947135][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  533.947158][   T30] audit: type=1326 audit(1755769784.057:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.5.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614778ebe9 code=0x0
[  537.020482][T10346] FAULT_INJECTION: forcing a failure.
[  537.020482][T10346] name failslab, interval 1, probability 0, space 0, times 0
[  537.051277][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.1.876 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  537.051297][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  537.051305][T10346] Call Trace:
[  537.051310][T10346]  <TASK>
[  537.051315][T10346]  dump_stack_lvl+0x189/0x250
[  537.051336][T10346]  ? __pfx____ratelimit+0x10/0x10
[  537.051351][T10346]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.051364][T10346]  ? __pfx__printk+0x10/0x10
[  537.051384][T10346]  ? __pfx___might_resched+0x10/0x10
[  537.051397][T10346]  ? fs_reclaim_acquire+0x7d/0x100
[  537.051415][T10346]  should_fail_ex+0x414/0x560
[  537.051432][T10346]  should_failslab+0xa8/0x100
[  537.051447][T10346]  kmem_cache_alloc_noprof+0x73/0x3c0
[  537.051458][T10346]  ? __kernfs_new_node+0xd7/0x7e0
[  537.051476][T10346]  __kernfs_new_node+0xd7/0x7e0
[  537.051491][T10346]  ? __lock_acquire+0xab9/0xd20
[  537.051508][T10346]  ? __pfx___kernfs_new_node+0x10/0x10
[  537.051523][T10346]  ? kernfs_root+0x1c/0x230
[  537.051541][T10346]  ? kernfs_root+0x1c/0x230
[  537.051554][T10346]  ? kernfs_root+0x1c/0x230
[  537.051566][T10346]  ? kernfs_root+0x1c/0x230
[  537.051582][T10346]  kernfs_new_node+0x102/0x210
[  537.051601][T10346]  __kernfs_create_file+0x4b/0x2e0
[  537.051621][T10346]  sysfs_add_file_mode_ns+0x238/0x300
[  537.051640][T10346]  internal_create_group+0x66d/0x1110
[  537.051665][T10346]  ? __pfx_internal_create_group+0x10/0x10
[  537.051695][T10346]  sysfs_create_groups+0x59/0x120
[  537.051712][T10346]  device_add_attrs+0x1c4/0x5a0
[  537.051733][T10346]  ? __pfx_device_add_attrs+0x10/0x10
[  537.051749][T10346]  ? kobject_put+0x43f/0x480
[  537.051766][T10346]  ? device_add_class_symlinks+0x21f/0x240
[  537.051786][T10346]  device_add+0x496/0xb50
[  537.051802][T10346]  ? device_initialize+0x24b/0x440
[  537.051821][T10346]  wakeup_source_sysfs_add+0x1af/0x280
[  537.051842][T10346]  wakeup_source_register+0x18a/0x380
[  537.051863][T10346]  ep_insert+0xef6/0x19e0
[  537.051885][T10346]  ? __pfx_ep_insert+0x10/0x10
[  537.051896][T10346]  ? __pfx___mutex_lock+0x10/0x10
[  537.051910][T10346]  ? rcu_is_watching+0x15/0xb0
[  537.051929][T10346]  ? bpf_lsm_capable+0x9/0x20
[  537.051950][T10346]  do_epoll_ctl+0x7f4/0xe90
[  537.051968][T10346]  __x64_sys_epoll_ctl+0x163/0x1a0
[  537.051981][T10346]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  537.051992][T10346]  ? rcu_is_watching+0x15/0xb0
[  537.052008][T10346]  ? do_syscall_64+0xbe/0x3b0
[  537.052024][T10346]  do_syscall_64+0xfa/0x3b0
[  537.052036][T10346]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.052048][T10346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.052060][T10346]  ? clear_bhb_loop+0x60/0xb0
[  537.052075][T10346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.052087][T10346] RIP: 0033:0x7fb8db18ebe9
[  537.052099][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  537.052126][T10346] RSP: 002b:00007fb8dc079038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  537.052141][T10346] RAX: ffffffffffffffda RBX: 00007fb8db3b5fa0 RCX: 00007fb8db18ebe9
[  537.052150][T10346] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  537.052157][T10346] RBP: 00007fb8dc079090 R08: 0000000000000000 R09: 0000000000000000
[  537.052165][T10346] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002
[  537.052172][T10346] R13: 00007fb8db3b6038 R14: 00007fb8db3b5fa0 R15: 00007fff6e2e3d18
[  537.052192][T10346]  </TASK>
[  539.042746][T10350] ALSA: mixer_oss: invalid OSS volume ''
[  539.741015][   T30] audit: type=1326 audit(1755769789.857:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10364 comm="syz.6.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdebbd8ebe9 code=0x0
[  539.762046][    C0] vkms_vblank_simulate: vblank timer overrun
[  541.103596][T10378] binder: 10375:10378 ioctl c0306201 2000000001c0 returned -22
[  543.866197][T10409] syz.6.888: attempt to access beyond end of device
[  543.866197][T10409] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[  543.880950][T10409] syz.6.888: attempt to access beyond end of device
[  543.880950][T10409] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[  543.894873][T10409] Mount JFS Failure: -5
[  545.315385][T10425] syz.1.891: attempt to access beyond end of device
[  545.315385][T10425] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  545.330590][T10425] syz.1.891: attempt to access beyond end of device
[  545.330590][T10425] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  545.348932][T10425] Mount JFS Failure: -5
[  546.260974][T10432] binder: 10429:10432 ioctl c0306201 2000000001c0 returned -22
[  546.472723][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  546.945279][ T5923] usb 6-1: Using ep0 maxpacket: 8
[  547.225846][ T5923] usb 6-1: config 0 has no interfaces?
[  547.285023][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  547.316875][ T5923] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  547.361944][ T5923] usb 6-1: Product: syz
[  547.706340][ T5923] usb 6-1: Manufacturer: syz
[  547.952744][ T5923] usb 6-1: SerialNumber: syz
[  547.973694][ T5923] usb 6-1: config 0 descriptor??
[  548.493929][ T9424] usb 6-1: USB disconnect, device number 5
[  550.063217][T10475] syz.5.901: attempt to access beyond end of device
[  550.063217][T10475] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  550.078162][T10475] syz.5.901: attempt to access beyond end of device
[  550.078162][T10475] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  550.092210][T10475] Mount JFS Failure: -5
[  552.081627][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'.
[  552.099071][T10500] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.108611][T10500] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.523326][ T5927] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  555.155958][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  555.168015][ T5927] usb 6-1: Invalid ep0 maxpacket: 64
[  555.643935][ T5927] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  555.813653][ T5927] usb 6-1: Invalid ep0 maxpacket: 64
[  555.845473][ T5927] usb usb6-port1: attempt power cycle
[  556.456527][ T5927] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  556.522788][ T5927] usb 6-1: Invalid ep0 maxpacket: 64
[  556.692609][ T5927] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  556.732215][ T5927] usb 6-1: Invalid ep0 maxpacket: 64
[  556.741929][ T5927] usb usb6-port1: unable to enumerate USB device
[  557.730593][   T30] audit: type=1800 audit(1755769807.837:301): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.925" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  558.182142][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.031631][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.192034][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.363105][T10595] overlay: Bad value for 'redirect_dir'
[  559.572737][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.849712][T10604] Driver unsupported XDP return value 0 on prog  (id 209) dev N/A, expect packet loss!
[  561.027278][   T13] bridge_slave_1: left allmulticast mode
[  561.050939][   T13] bridge_slave_1: left promiscuous mode
[  561.082943][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.130586][   T13] bridge_slave_0: left allmulticast mode
[  561.148088][T10618] sctp: [Deprecated]: syz.4.935 (pid 10618) Use of int in max_burst socket option deprecated.
[  561.148088][T10618] Use struct sctp_assoc_value instead
[  561.163621][   T13] bridge_slave_0: left promiscuous mode
[  561.169734][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.330374][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.936'.
[  561.441237][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  561.454519][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  561.469023][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  561.480775][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  561.493605][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  562.139939][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.158379][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.171146][   T13] bond0 (unregistering): Released all slaves
[  563.539971][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.577573][ T5837] Bluetooth: hci1: command tx timeout
[  565.127367][   T13] hsr_slave_0: left promiscuous mode
[  565.161330][   T13] hsr_slave_1: left promiscuous mode
[  565.193593][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.238426][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.270413][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.299237][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.372148][   T13] veth1_macvtap: left promiscuous mode
[  565.389873][   T13] veth0_macvtap: left promiscuous mode
[  565.409504][   T13] veth1_vlan: left promiscuous mode
[  565.429466][   T13] veth0_vlan: left promiscuous mode
[  565.652535][ T5837] Bluetooth: hci1: command tx timeout
[  566.424114][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  566.449672][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  566.460342][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  566.472889][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  566.494733][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  567.732548][ T5837] Bluetooth: hci1: command tx timeout
[  567.956959][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'.
[  567.970312][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.977976][T10714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.392008][   T13] IPVS: stop unused estimator thread 0...
[  568.613926][ T5837] Bluetooth: hci0: command tx timeout
[  568.725894][T10626] chnl_net:caif_netlink_parms(): no params data found
[  569.138582][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.208218][T10693] chnl_net:caif_netlink_parms(): no params data found
[  569.565206][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.636246][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  569.648398][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  569.657219][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  569.665277][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  569.674550][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  569.812642][   T51] Bluetooth: hci1: command tx timeout
[  570.018126][T10626] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.030633][T10626] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.048813][T10626] bridge_slave_0: entered allmulticast mode
[  570.061559][T10626] bridge_slave_0: entered promiscuous mode
[  570.081172][T10626] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.092145][T10626] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.101007][T10626] bridge_slave_1: entered allmulticast mode
[  570.115386][T10626] bridge_slave_1: entered promiscuous mode
[  570.341131][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.702431][   T51] Bluetooth: hci0: command tx timeout
[  571.663948][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.732564][   T51] Bluetooth: hci3: command tx timeout
[  571.791591][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.806444][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.884165][T10693] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.891472][T10693] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.909153][T10693] bridge_slave_0: entered allmulticast mode
[  571.952163][T10693] bridge_slave_0: entered promiscuous mode
[  572.070590][T10693] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.102592][T10693] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.112973][T10693] bridge_slave_1: entered allmulticast mode
[  572.134882][T10693] bridge_slave_1: entered promiscuous mode
[  572.205307][T10626] team0: Port device team_slave_0 added
[  572.226279][T10626] team0: Port device team_slave_1 added
[  572.773818][   T51] Bluetooth: hci0: command tx timeout
[  573.822739][   T51] Bluetooth: hci3: command tx timeout
[  574.331818][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.354613][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.423768][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.469027][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.620404][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.768294][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.775881][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.810233][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.853465][   T51] Bluetooth: hci0: command tx timeout
[  574.881020][T10809] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  574.960195][T10693] team0: Port device team_slave_0 added
[  574.971307][T10693] team0: Port device team_slave_1 added
[  575.007544][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.014754][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.042488][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.134418][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.149080][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.188207][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.219623][T10626] hsr_slave_0: entered promiscuous mode
[  575.227700][T10626] hsr_slave_1: entered promiscuous mode
[  575.236033][T10626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  575.244011][T10626] Cannot create hsr debugfs directory
[  575.328680][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.507439][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.575898][T10693] hsr_slave_0: entered promiscuous mode
[  575.583673][T10693] hsr_slave_1: entered promiscuous mode
[  575.590300][T10693] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  575.604512][T10693] Cannot create hsr debugfs directory
[  575.650366][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.862082][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.892844][   T51] Bluetooth: hci3: command tx timeout
[  576.424880][T10764] chnl_net:caif_netlink_parms(): no params data found
[  576.577985][T10840] overlayfs: failed to clone upperpath
[  577.073029][T10851] netlink: 228 bytes leftover after parsing attributes in process `syz.4.979'.
[  577.398232][   T13] bridge_slave_1: left allmulticast mode
[  577.461788][   T13] bridge_slave_1: left promiscuous mode
[  578.062989][   T51] Bluetooth: hci3: command tx timeout
[  578.082721][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.136782][   T13] bridge_slave_0: left allmulticast mode
[  578.172647][   T13] bridge_slave_0: left promiscuous mode
[  578.178638][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.222782][   T13] bridge_slave_1: left allmulticast mode
[  578.238753][   T13] bridge_slave_1: left promiscuous mode
[  578.254813][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.281530][   T13] bridge_slave_0: left allmulticast mode
[  578.293460][   T13] bridge_slave_0: left promiscuous mode
[  578.301629][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.694414][   T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  578.703068][   T51] Bluetooth: hci4: Injecting HCI hardware error event
[  578.711824][   T51] Bluetooth: hci4: hardware error 0x00
[  579.861054][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.873784][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.887000][   T13] bond0 (unregistering): Released all slaves
[  580.389167][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.400684][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.411240][   T13] bond0 (unregistering): Released all slaves
[  580.774701][T10764] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.804263][T10764] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.816772][T10764] bridge_slave_0: entered allmulticast mode
[  580.827311][T10764] bridge_slave_0: entered promiscuous mode
[  580.840349][T10764] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.851827][T10764] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.852500][   T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  580.860479][T10764] bridge_slave_1: entered allmulticast mode
[  580.895862][T10764] bridge_slave_1: entered promiscuous mode
[  580.912556][   T13] tipc: Left network mode
[  581.136235][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.150966][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.305839][T10764] team0: Port device team_slave_0 added
[  581.359725][T10764] team0: Port device team_slave_1 added
[  581.469455][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.480356][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.508906][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.580462][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.589330][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.616250][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.669080][   T13] hsr_slave_0: left promiscuous mode
[  581.675661][   T13] hsr_slave_1: left promiscuous mode
[  581.681671][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.690200][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.698432][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.707731][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.720353][   T13] hsr_slave_0: left promiscuous mode
[  581.727112][   T13] hsr_slave_1: left promiscuous mode
[  581.733436][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.740950][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.749486][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.757716][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.811053][   T13] veth1_macvtap: left promiscuous mode
[  581.824257][   T13] veth0_macvtap: left promiscuous mode
[  581.832167][   T13] veth1_vlan: left promiscuous mode
[  581.840515][   T13] veth0_vlan: left promiscuous mode
[  581.889800][   T13] veth1_macvtap: left promiscuous mode
[  581.895997][   T13] veth0_macvtap: left promiscuous mode
[  581.902421][   T13] veth1_vlan: left promiscuous mode
[  581.915135][   T13] veth0_vlan: left promiscuous mode
[  581.945530][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'.
[  581.956675][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  581.966139][T10919] netlink: 'syz.4.989': attribute type 13 has an invalid length.
[  582.590131][   T13] team0 (unregistering): Port device team_slave_1 removed
[  582.644686][   T13] team0 (unregistering): Port device team_slave_0 removed
[  583.580751][   T13] team0 (unregistering): Port device team_slave_1 removed
[  583.628517][   T13] team0 (unregistering): Port device team_slave_0 removed
[  584.330769][T10922] delete_channel: no stack
[  584.356528][T10764] hsr_slave_0: entered promiscuous mode
[  584.392473][T10764] hsr_slave_1: entered promiscuous mode
[  585.485577][T10626] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  585.529157][T10626] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  585.552192][T10626] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  585.598382][T10927] vlan0: entered promiscuous mode
[  585.605432][T10927] dummy0: entered promiscuous mode
[  585.610890][T10927] vlan0: entered allmulticast mode
[  585.616255][T10927] dummy0: entered allmulticast mode
[  585.793591][T10626] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  587.153445][T10693] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  587.174472][T10693] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  587.270764][T10954] overlayfs: failed to clone upperpath
[  587.289737][T10693] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  587.366050][T10693] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  588.066625][T10626] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.228030][T10626] 8021q: adding VLAN 0 to HW filter on device team0
[  588.297082][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.304332][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.424215][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.431391][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.496221][T10693] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.638063][T10693] 8021q: adding VLAN 0 to HW filter on device team0
[  588.713969][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.721411][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.753706][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.760948][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.847374][T10764] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  588.913255][T10764] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  588.961777][T10764] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  588.981841][T10764] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  590.630066][T10764] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.691892][T10626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.740490][T10764] 8021q: adding VLAN 0 to HW filter on device team0
[  590.788257][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.795533][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.010101][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.017309][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.470005][T10626] veth0_vlan: entered promiscuous mode
[  592.288982][T10693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.377038][T10626] veth1_vlan: entered promiscuous mode
[  592.618596][T10626] veth0_macvtap: entered promiscuous mode
[  592.658894][T10626] veth1_macvtap: entered promiscuous mode
[  592.788067][T10626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  592.884366][T10626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  592.923932][T10626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.972379][T10626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.996816][T10626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.047021][T10626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.631344][T10764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.343453][ T6221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.351435][ T6221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.682553][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.690459][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.748551][T10693] veth0_vlan: entered promiscuous mode
[  594.785846][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1011'.
[  594.809466][T10693] veth1_vlan: entered promiscuous mode
[  594.838098][T11055] bridge_slave_1: left allmulticast mode
[  594.866638][T11055] bridge_slave_1: left promiscuous mode
[  594.894564][T11055] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.948776][T11055] bridge_slave_0: left allmulticast mode
[  594.954699][T11055] bridge_slave_0: left promiscuous mode
[  594.967578][T11055] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.184373][T10693] veth0_macvtap: entered promiscuous mode
[  595.228902][T10693] veth1_macvtap: entered promiscuous mode
[  595.281980][T10693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.320680][T10693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.361725][T10693] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.380145][T10693] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.396893][T10693] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.413074][T10693] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.706665][T10764] veth0_vlan: entered promiscuous mode
[  596.707550][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.726109][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.820878][T10764] veth1_vlan: entered promiscuous mode
[  596.840049][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.867114][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.938685][T10764] veth0_macvtap: entered promiscuous mode
[  596.971626][T10764] veth1_macvtap: entered promiscuous mode
[  597.074365][T10764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.112043][T10764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.177914][T10764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.200180][T10764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.220707][T10764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.242474][T10764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.901418][T11077] ALSA: mixer_oss: invalid index 40000
[  599.027346][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.074417][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.282159][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.361600][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.141460][T11136] 9pnet_fd: Insufficient options for proto=fd
[  601.263345][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'.
[  601.395118][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'.
[  601.782079][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1026'.
[  602.009814][T11136] ip6gre2: entered allmulticast mode
[  602.208847][T11146] capability: warning: `syz.7.1027' uses 32-bit capabilities (legacy support in use)
[  604.279247][T11178] Bluetooth: MGMT ver 1.23
[  606.292657][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  606.298865][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  607.902405][  T977] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  608.136197][  T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.210060][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1048'.
[  608.228695][  T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.275516][  T977] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  608.326140][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.379919][  T977] usb 6-1: config 0 descriptor??
[  608.398974][T11237] bridge0: entered promiscuous mode
[  608.457413][T11237] bridge0: port 3(macvlan2) entered blocking state
[  608.527465][T11237] bridge0: port 3(macvlan2) entered disabled state
[  608.648305][T11237] macvlan2: entered allmulticast mode
[  608.737739][T11237] bridge0: entered allmulticast mode
[  608.818500][T11237] macvlan2: left allmulticast mode
[  608.844219][T11237] bridge0: left allmulticast mode
[  608.862698][  T977] hid-led 0003:1D34:0004.0004: item fetching failed at offset 0/7
[  608.871705][  T977] hid-led 0003:1D34:0004.0004: probe with driver hid-led failed with error -22
[  608.883176][T11237] bridge0: left promiscuous mode
[  609.525789][T11255] loop9: detected capacity change from 0 to 8
[  609.639621][T10089] Dev loop9: unable to read RDB block 8
[  609.659188][T10089]  loop9: unable to read partition table
[  609.675905][T10089] loop9: partition table beyond EOD, truncated
[  609.734293][T11255] Dev loop9: unable to read RDB block 8
[  609.743933][T11263] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  609.765759][T11255]  loop9: unable to read partition table
[  609.781796][T11255] loop9: partition table beyond EOD, truncated
[  609.811622][T11255] loop_reread_partitions: partition scan of loop9 (�被x�^>�� �) failed (rc=-5)
[  609.812746][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  609.828621][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  610.613770][ T9424] usb 6-1: USB disconnect, device number 10
[  611.317972][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'.
[  611.354421][T11299] binder: BINDER_SET_CONTEXT_MGR already set
[  611.360550][T11299] binder: 11295:11299 ioctl 4018620d 200000000040 returned -16
[  611.424690][T11300] syz.7.1061: attempt to access beyond end of device
[  611.424690][T11300] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  611.438442][T11300] syz.7.1061: attempt to access beyond end of device
[  611.438442][T11300] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  611.452012][T11300] Mount JFS Failure: -5
[  613.428654][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  613.492440][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  614.819084][T11319] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  614.962851][T11316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  615.106350][   T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.418023][   T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.664110][   T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.753684][T11353] FAULT_INJECTION: forcing a failure.
[  615.753684][T11353] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  615.813106][T11353] CPU: 1 UID: 0 PID: 11353 Comm: syz.7.1072 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  615.813137][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  615.813149][T11353] Call Trace:
[  615.813157][T11353]  <TASK>
[  615.813166][T11353]  dump_stack_lvl+0x189/0x250
[  615.813196][T11353]  ? __pfx____ratelimit+0x10/0x10
[  615.813219][T11353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  615.813242][T11353]  ? __pfx__printk+0x10/0x10
[  615.813268][T11353]  ? __might_fault+0xb0/0x130
[  615.813301][T11353]  should_fail_ex+0x414/0x560
[  615.813328][T11353]  _copy_from_iter+0x1db/0x16f0
[  615.813357][T11353]  ? rcu_is_watching+0x15/0xb0
[  615.813378][T11353]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  615.813399][T11353]  ? __pfx__copy_from_iter+0x10/0x10
[  615.813425][T11353]  ? __build_skb_around+0x257/0x3e0
[  615.813457][T11353]  ? netlink_sendmsg+0x642/0xb30
[  615.813484][T11353]  ? skb_put+0x11b/0x210
[  615.813516][T11353]  netlink_sendmsg+0x6b2/0xb30
[  615.813555][T11353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.813593][T11353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  615.813612][T11353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.813641][T11353]  __sock_sendmsg+0x21c/0x270
[  615.813669][T11353]  ____sys_sendmsg+0x505/0x830
[  615.813706][T11353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.813748][T11353]  ? import_iovec+0x74/0xa0
[  615.813780][T11353]  ___sys_sendmsg+0x21f/0x2a0
[  615.813814][T11353]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.813894][T11353]  ? __fget_files+0x2a/0x420
[  615.813915][T11353]  ? __fget_files+0x3a0/0x420
[  615.813949][T11353]  __x64_sys_sendmsg+0x19b/0x260
[  615.813981][T11353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  615.814021][T11353]  ? __pfx_ksys_write+0x10/0x10
[  615.814037][T11353]  ? rcu_is_watching+0x15/0xb0
[  615.814064][T11353]  ? do_syscall_64+0xbe/0x3b0
[  615.814092][T11353]  do_syscall_64+0xfa/0x3b0
[  615.814114][T11353]  ? lockdep_hardirqs_on+0x9c/0x150
[  615.814134][T11353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.814155][T11353]  ? clear_bhb_loop+0x60/0xb0
[  615.814180][T11353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.814199][T11353] RIP: 0033:0x7f21bd38ebe9
[  615.814219][T11353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  615.814236][T11353] RSP: 002b:00007f21be217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.814259][T11353] RAX: ffffffffffffffda RBX: 00007f21bd5b5fa0 RCX: 00007f21bd38ebe9
[  615.814274][T11353] RDX: 000000002004c890 RSI: 0000200000000240 RDI: 0000000000000003
[  615.814287][T11353] RBP: 00007f21be217090 R08: 0000000000000000 R09: 0000000000000000
[  615.814299][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  615.814310][T11353] R13: 00007f21bd5b6038 R14: 00007f21bd5b5fa0 R15: 00007ffec76d5f38
[  615.814344][T11353]  </TASK>
[  616.192397][  T977] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  617.228095][   T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.242522][  T977] usb 2-1: Using ep0 maxpacket: 8
[  617.250701][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  617.262186][  T977] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  617.271610][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.306869][  T977] usb 2-1: config 0 descriptor??
[  617.456531][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'.
[  617.597763][  T977] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  618.214278][T11378] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  618.398927][T11379] netlink: 588 bytes leftover after parsing attributes in process `syz.7.1079'.
[  618.485452][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  618.496387][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  618.507585][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  618.517532][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  618.526710][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  619.747116][ T5923] usb 2-1: USB disconnect, device number 22
[  619.767129][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'.
[  620.611036][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  620.722768][   T51] Bluetooth: hci4: command tx timeout
[  620.756858][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  620.768724][   T49] bond0 (unregistering): Released all slaves
[  620.927710][T11418] syz.5.1086: attempt to access beyond end of device
[  620.927710][T11418] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  620.942881][T11418] syz.5.1086: attempt to access beyond end of device
[  620.942881][T11418] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  620.956762][T11418] Mount JFS Failure: -5
[  622.772389][ T5837] Bluetooth: hci4: command tx timeout
[  623.892410][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  623.892421][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  624.625805][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  624.856162][ T5837] Bluetooth: hci4: command tx timeout
[  624.911245][T11438] netlink: 'syz.1.1092': attribute type 6 has an invalid length.
[  625.043388][T11438] bridge1: entered promiscuous mode
[  625.048823][T11438] bridge1: entered allmulticast mode
[  625.745306][T11443] netlink: 'syz.7.1093': attribute type 10 has an invalid length.
[  625.792682][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1093'.
[  625.867097][   T49] hsr_slave_0: left promiscuous mode
[  625.888766][   T49] hsr_slave_1: left promiscuous mode
[  625.904073][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.911752][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.035566][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.071238][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.159004][T11455] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1098'.
[  626.168457][   T49] veth1_macvtap: left promiscuous mode
[  626.179796][   T49] veth0_macvtap: left promiscuous mode
[  626.932601][ T5837] Bluetooth: hci4: command tx timeout
[  628.380184][   T49] team0 (unregistering): Port device team_slave_1 removed
[  628.506142][   T49] team0 (unregistering): Port device team_slave_0 removed
[  630.619912][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  630.626570][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  631.175745][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.183789][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.518328][T11505] /dev/nbd4: Can't lookup blockdev
[  634.859415][T11381] chnl_net:caif_netlink_parms(): no params data found
[  636.172793][T11381] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.193644][T11381] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.261028][T11381] bridge_slave_0: entered allmulticast mode
[  636.283014][T11381] bridge_slave_0: entered promiscuous mode
[  636.303119][T11381] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.311477][T11381] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.320098][T11381] bridge_slave_1: entered allmulticast mode
[  636.410782][T11381] bridge_slave_1: entered promiscuous mode
[  636.560059][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'.
[  636.797015][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'.
[  636.897006][T11381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.281005][T11381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.306612][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.342615][T11555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.376340][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.384595][T11555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.673842][T11381] team0: Port device team_slave_0 added
[  637.729442][T11381] team0: Port device team_slave_1 added
[  638.797803][T11381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.838641][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.870252][T11381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.938289][T11381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.970721][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  639.136817][T11381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.163255][T11575] input: syz1 as /devices/virtual/input/input12
[  640.461715][T11381] hsr_slave_0: entered promiscuous mode
[  640.621636][T11381] hsr_slave_1: entered promiscuous mode
[  641.107518][T11381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  641.126076][T11381] Cannot create hsr debugfs directory
[  641.432677][T11595] loop6: detected capacity change from 0 to 63
[  641.675801][ T9844] Buffer I/O error on dev loop6, logical block 0, async page read
[  641.730764][ T9844] Buffer I/O error on dev loop6, logical block 0, async page read
[  641.760097][ T9844] Buffer I/O error on dev loop6, logical block 0, async page read
[  641.898313][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'.
[  642.173094][ T9844] Buffer I/O error on dev loop6, logical block 0, async page read
[  642.214897][ T9844] Buffer I/O error on dev loop6, logical block 0, async page read
[  642.695152][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1132'.
[  643.415354][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.442559][T11610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  643.596650][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.625156][T11610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.208242][T11634] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1136'.
[  645.743506][T11381] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  645.775263][T11381] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  645.806573][T11381] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  645.830630][T11381] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  646.866118][T11381] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.973394][T11381] 8021q: adding VLAN 0 to HW filter on device team0
[  647.069580][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.076888][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  647.853638][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.860827][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.231338][T11690] syz.1.1146: attempt to access beyond end of device
[  651.231338][T11690] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  651.246182][T11690] syz.1.1146: attempt to access beyond end of device
[  651.246182][T11690] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  651.259888][T11690] Mount JFS Failure: -5
[  652.567953][T11703] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1150'.
[  652.603424][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1151'.
[  652.655060][T11705] openvswitch: netlink: Flow actions attr not present in new flow.
[  652.768528][T11381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.870509][T11381] veth0_vlan: entered promiscuous mode
[  655.931992][T11381] veth1_vlan: entered promiscuous mode
[  656.085537][T11381] veth0_macvtap: entered promiscuous mode
[  656.122862][T11381] veth1_macvtap: entered promiscuous mode
[  656.181458][T11381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.217630][T11381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.237733][T11381] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.251063][T11381] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.267890][T11381] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.307736][T11381] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.905775][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.196960][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.347945][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.386584][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.054709][T11793] bridge2: entered allmulticast mode
[  665.460824][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'.
[  668.473567][T11886] fuse: Bad value for 'fd'
[  671.342571][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'.
[  671.351809][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.359875][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.378864][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.387629][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  672.156181][T11918] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1202'.
[  674.664250][T11938] syz.5.1204: attempt to access beyond end of device
[  674.664250][T11938] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0
[  675.192548][T11938] EXT4-fs (nbd5): unable to read superblock
[  676.942155][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1213'.
[  678.144532][T11976] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1216'.
[  679.417351][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'.
[  679.835203][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  681.760866][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'.
[  685.101825][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805835b400: rx timeout, send abort
[  685.603063][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055258400: rx timeout, send abort
[  685.611542][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805835b400: abort rx timeout. Force session deactivation
[  686.105109][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  686.111342][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055258400: abort rx timeout. Force session deactivation
[  688.181675][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  688.721061][T12095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1245'.
[  691.711517][T12117] tmpfs: Unknown parameter 'nr_bks'
[  691.902748][T12120] syz.7.1250: attempt to access beyond end of device
[  691.902748][T12120] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  691.917560][T12120] syz.7.1250: attempt to access beyond end of device
[  691.917560][T12120] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  691.931434][T12120] Mount JFS Failure: -5
[  693.497323][T12136] Cannot find add_set index 0 as target
[  693.822477][ T9154] Bluetooth: hci0: command 0x0c1a tx timeout
[  693.829808][ T9154] Bluetooth: hci3: command 0x0406 tx timeout
[  696.908157][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1267'.
[  696.933353][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1267'.
[  697.013185][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  697.513857][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  710.932329][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  710.932364][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  716.892344][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  716.898587][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  716.999129][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'.
[  717.213634][T12364] dlm: no local IP address has been set
[  717.219391][T12364] dlm: cannot start dlm midcomms -107
[  724.711219][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  725.459883][T12437] syz.7.1330: attempt to access beyond end of device
[  725.459883][T12437] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  725.475230][T12437] syz.7.1330: attempt to access beyond end of device
[  725.475230][T12437] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  725.488765][T12437] Mount JFS Failure: -5
[  725.586616][T12431] netdevsim netdevsim4: Direct firmware load for .
[  725.586616][T12431]  failed with error -2
[  725.603264][T12431] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  725.603264][T12431] 
[  726.180097][T12449] syz.7.1331: attempt to access beyond end of device
[  726.180097][T12449] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  726.195321][T12449] syz.7.1331: attempt to access beyond end of device
[  726.195321][T12449] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  726.208474][T12449] Mount JFS Failure: -5
[  731.299091][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'.
[  731.374413][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'.
[  731.400081][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'.
[  731.666529][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1343'.
[  736.475826][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'.
[  737.812363][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  737.897070][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  741.798311][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1372'.
[  741.878386][T12612] netlink: 'syz.6.1375': attribute type 10 has an invalid length.
[  742.007231][T12612] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  742.052433][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  742.052617][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  744.592513][T12139] Bluetooth: hci4: command 0x0406 tx timeout
[  745.172362][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  745.178649][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  747.508440][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  748.488225][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  748.498724][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  750.730870][T12708] syz_tun: entered allmulticast mode
[  750.742824][T12708] dvmrp8: entered allmulticast mode
[  750.835928][T12708] 9pnet_fd: Insufficient options for proto=fd
[  750.875881][T12708] loop2: detected capacity change from 0 to 7
[  750.895324][T12708] Dev loop2: unable to read RDB block 7
[  750.901008][T12708]  loop2: unable to read partition table
[  750.922979][T12708] loop2: partition table beyond EOD, truncated
[  750.950355][T12708] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  750.994552][T12707] syz_tun: left allmulticast mode
[  751.022502][T12707] dvmrp8: left allmulticast mode
[  752.692498][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  752.699603][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  756.493882][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'.
[  757.395505][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f718800: rx timeout, send abort
[  757.903910][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f718800: abort rx timeout. Force session deactivation
[  760.588257][T12800] netlink: 15 bytes leftover after parsing attributes in process `syz.7.1423'.
[  763.592605][T12824] syz.7.1431: attempt to access beyond end of device
[  763.592605][T12824] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[  763.607448][T12824] syz.7.1431: attempt to access beyond end of device
[  763.607448][T12824] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[  763.621194][T12824] Mount JFS Failure: -5
[  766.470489][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'.
[  767.812313][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  767.812425][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  770.925945][T12884] (syz.1.1445,12884,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  770.938131][T12884] (syz.1.1445,12884,0):ocfs2_fill_super:1177 ERROR: status = -22
[  772.023762][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'.
[  774.057486][T12921] syz.6.1458: attempt to access beyond end of device
[  774.057486][T12921] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[  774.072761][T12921] syz.6.1458: attempt to access beyond end of device
[  774.072761][T12921] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[  774.086461][T12921] Mount JFS Failure: -5
[  774.842961][T12923] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  774.894766][T12924] xt_NFQUEUE: number of total queues is 0
[  775.092856][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  775.095634][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  775.953081][T12938] 
[  775.955468][T12938] ======================================================
[  775.962502][T12938] WARNING: possible circular locking dependency detected
[  775.969526][T12938] 6.16.0-syzkaller #0 Not tainted
[  775.974542][T12938] ------------------------------------------------------
[  775.981546][T12938] syz.1.1460/12938 is trying to acquire lock:
[  775.987609][T12938] ffff888025802188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  775.998660][T12938] 
[  775.998660][T12938] but task is already holding lock:
[  776.006046][T12938] ffff888025802230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[  776.015171][T12938] 
[  776.015171][T12938] which lock already depends on the new lock.
[  776.015171][T12938] 
[  776.025589][T12938] 
[  776.025589][T12938] the existing dependency chain (in reverse order) is:
[  776.034612][T12938] 
[  776.034612][T12938] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  776.042436][T12938]        lock_acquire+0x120/0x360
[  776.047460][T12938]        __mutex_lock+0x182/0xe80
[  776.052504][T12938]        refcount_dec_and_mutex_lock+0x30/0xa0
[  776.058670][T12938]        nbd_config_put+0x2c/0x790
[  776.063883][T12938]        nbd_release+0xfe/0x140
[  776.068840][T12938]        bdev_release+0x533/0x650
[  776.073888][T12938]        blkdev_release+0x15/0x20
[  776.078927][T12938]        __fput+0x449/0xa70
[  776.083437][T12938]        fput_close_sync+0x119/0x200
[  776.088813][T12938]        __x64_sys_close+0x7f/0x110
[  776.094020][T12938]        do_syscall_64+0xfa/0x3b0
[  776.099047][T12938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.105463][T12938] 
[  776.105463][T12938] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  776.113300][T12938]        lock_acquire+0x120/0x360
[  776.118364][T12938]        __mutex_lock+0x182/0xe80
[  776.123522][T12938]        __del_gendisk+0x129/0x9e0
[  776.128684][T12938]        del_gendisk+0xe8/0x160
[  776.133581][T12938]        loop_remove+0x42/0xc0
[  776.138486][T12938]        loop_control_ioctl+0x4ac/0x5a0
[  776.144074][T12938]        __se_sys_ioctl+0xfc/0x170
[  776.149259][T12938]        do_syscall_64+0xfa/0x3b0
[  776.154335][T12938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.160791][T12938] 
[  776.160791][T12938] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  776.169264][T12938]        validate_chain+0xb9b/0x2140
[  776.174592][T12938]        __lock_acquire+0xab9/0xd20
[  776.179806][T12938]        lock_acquire+0x120/0x360
[  776.184910][T12938]        down_write+0x96/0x1f0
[  776.189849][T12938]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  776.196095][T12938]        nbd_start_device+0x16c/0xac0
[  776.201486][T12938]        nbd_ioctl+0x636/0xeb0
[  776.206276][T12938]        blkdev_ioctl+0x5a8/0x6d0
[  776.211304][T12938]        __se_sys_ioctl+0xfc/0x170
[  776.216517][T12938]        do_syscall_64+0xfa/0x3b0
[  776.221624][T12938]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.228056][T12938] 
[  776.228056][T12938] other info that might help us debug this:
[  776.228056][T12938] 
[  776.238294][T12938] Chain exists of:
[  776.238294][T12938]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  776.238294][T12938] 
[  776.252468][T12938]  Possible unsafe locking scenario:
[  776.252468][T12938] 
[  776.259962][T12938]        CPU0                    CPU1
[  776.265353][T12938]        ----                    ----
[  776.270729][T12938]   lock(&nbd->config_lock);
[  776.275525][T12938]                                lock(&disk->open_mutex);
[  776.282823][T12938]                                lock(&nbd->config_lock);
[  776.289931][T12938]   lock(&set->update_nr_hwq_lock);
[  776.295218][T12938] 
[  776.295218][T12938]  *** DEADLOCK ***
[  776.295218][T12938] 
[  776.303358][T12938] 1 lock held by syz.1.1460/12938:
[  776.308486][T12938]  #0: ffff888025802230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[  776.317823][T12938] 
[  776.317823][T12938] stack backtrace:
[  776.323729][T12938] CPU: 1 UID: 0 PID: 12938 Comm: syz.1.1460 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  776.323747][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  776.323755][T12938] Call Trace:
[  776.323763][T12938]  <TASK>
[  776.323770][T12938]  dump_stack_lvl+0x189/0x250
[  776.323789][T12938]  ? __pfx_dump_stack_lvl+0x10/0x10
[  776.323802][T12938]  ? __pfx__printk+0x10/0x10
[  776.323817][T12938]  ? print_lock_name+0xde/0x100
[  776.323832][T12938]  print_circular_bug+0x2ee/0x310
[  776.323848][T12938]  check_noncircular+0x134/0x160
[  776.323864][T12938]  validate_chain+0xb9b/0x2140
[  776.323877][T12938]  ? trace_sched_exit_tp+0x38/0x120
[  776.323894][T12938]  ? __schedule+0x16c8/0x4c90
[  776.323910][T12938]  __lock_acquire+0xab9/0xd20
[  776.323923][T12938]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  776.323939][T12938]  lock_acquire+0x120/0x360
[  776.323949][T12938]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  776.323965][T12938]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  776.323985][T12938]  down_write+0x96/0x1f0
[  776.323998][T12938]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  776.324013][T12938]  ? __pfx_down_write+0x10/0x10
[  776.324026][T12938]  ? rcu_is_watching+0x15/0xb0
[  776.324043][T12938]  ? __mutex_lock+0xa6d/0xe80
[  776.324057][T12938]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  776.324080][T12938]  ? nbd_ioctl+0x131/0xeb0
[  776.324096][T12938]  ? __pfx___mutex_lock+0x10/0x10
[  776.324110][T12938]  nbd_start_device+0x16c/0xac0
[  776.324126][T12938]  ? security_capable+0x7e/0x2e0
[  776.324142][T12938]  nbd_ioctl+0x636/0xeb0
[  776.324159][T12938]  ? __pfx_nbd_ioctl+0x10/0x10
[  776.324174][T12938]  ? smack_file_ioctl+0x24a/0x340
[  776.324185][T12938]  ? __pfx_smack_file_ioctl+0x10/0x10
[  776.324196][T12938]  ? __pfx_nbd_ioctl+0x10/0x10
[  776.324211][T12938]  blkdev_ioctl+0x5a8/0x6d0
[  776.324226][T12938]  ? __pfx_blkdev_ioctl+0x10/0x10
[  776.324238][T12938]  ? __fget_files+0x2a/0x420
[  776.324252][T12938]  ? bpf_lsm_file_ioctl+0x9/0x20
[  776.324266][T12938]  ? __pfx_blkdev_ioctl+0x10/0x10
[  776.324279][T12938]  __se_sys_ioctl+0xfc/0x170
[  776.324297][T12938]  do_syscall_64+0xfa/0x3b0
[  776.324310][T12938]  ? lockdep_hardirqs_on+0x9c/0x150
[  776.324322][T12938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.324334][T12938]  ? clear_bhb_loop+0x60/0xb0
[  776.324346][T12938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.324358][T12938] RIP: 0033:0x7faa1db8ebe9
[  776.324371][T12938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  776.324382][T12938] RSP: 002b:00007faa1ea9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  776.324397][T12938] RAX: ffffffffffffffda RBX: 00007faa1ddb6180 RCX: 00007faa1db8ebe9
[  776.324407][T12938] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007
[  776.324414][T12938] RBP: 00007faa1dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  776.324422][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  776.324430][T12938] R13: 00007faa1ddb6218 R14: 00007faa1ddb6180 R15: 00007ffdb6ef31f8
[  776.324442][T12938]  </TASK>
[  776.856883][   T51] block nbd1: Receive control failed (result -107)
[  776.980870][T12938] block nbd1: shutting down sockets