last executing test programs:

18m46.794072854s ago: executing program 32 (id=1552):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

18m29.122550829s ago: executing program 33 (id=1574):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
sendfile(r2, r2, 0x0, 0x200000)
ioctl$sock_proto_private(r0, 0x89e1, 0x0)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x2, &(0x7f0000000240)='\x00\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
socket$packet(0x11, 0x2, 0x300)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r5], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000ce6bb90929", @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

18m7.627951203s ago: executing program 34 (id=1604):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x3a)
recvmsg$kcm(r2, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, 0x0, 0x60)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)

18m0.657722266s ago: executing program 35 (id=1616):
socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x20048050)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f", 0xb3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x60044884)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0xfffffff8, &(0x7f00000006c0)="3f235ad9982dbf889d476b2483ecef8972427b85a1470b71f8cc01a3ed7c59947c8884561cefe54b9ce97c2b3280f0dfb5938d8bae63d4383a537cd37fa9ff19d8cabe169481740154cfe476623764d803c2c184872ad860d68f8cc0882c8e1d6d62058894305cb33b101cd3ac88d45d2352c15b1f67139aa4a862b02a91cb151d218adfe5950bdcf584416944f7994d9375d50d")
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

17m54.746032652s ago: executing program 36 (id=1625):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

17m53.256230213s ago: executing program 37 (id=1630):
r0 = open$dir(0x0, 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

16m50.106445107s ago: executing program 7 (id=1714):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280), 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0xffffffffffffff45)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
sendmmsg$unix(r3, 0x0, 0x0, 0x4040880)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r6)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b04"], 0x14}}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r8, 0x0, 0x0, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x408d4)

16m44.531009596s ago: executing program 7 (id=1720):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0)

16m41.608880482s ago: executing program 7 (id=1726):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
sendfile(r1, r1, 0x0, 0x200000)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r3], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1)

16m40.110742703s ago: executing program 7 (id=1727):
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

16m37.159353831s ago: executing program 6 (id=1731):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)

16m36.382250183s ago: executing program 6 (id=1734):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0)

16m35.298745451s ago: executing program 7 (id=1735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

16m35.051575661s ago: executing program 7 (id=1736):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
sendfile(r1, r1, 0x0, 0x200000)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r3], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1)

16m33.918669422s ago: executing program 6 (id=1739):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
writev(r0, 0x0, 0x0)

16m33.094889808s ago: executing program 6 (id=1740):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119)

16m32.221155189s ago: executing program 9 (id=1742):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}})
r1 = open(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000480)=ANY=[@ANYBLOB])
socket$packet(0x11, 0x2, 0x300)
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r5, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
socket$nl_route(0x10, 0x3, 0x0)

16m31.106662799s ago: executing program 6 (id=1744):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

16m30.713387791s ago: executing program 6 (id=1745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)

16m29.738568239s ago: executing program 9 (id=1746):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x6, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000340))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x7, 0x0, 0x317, {{0x2a, 0x4, 0x3, 0x5, 0xa8, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x14, 0x3, [{0x6, 0xe, "d14c095cfa9bbde56915b8e8"}]}, @ssrr={0x89, 0x7, 0xba, [@local]}, @rr={0x7, 0x13, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @ssrr={0x89, 0x17, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0xf, 0x54, [@broadcast, @local, @empty]}, @cipso={0x86, 0x3d, 0x1, [{0x7, 0x2}, {0x6, 0x3, 'o'}, {0x0, 0x7, "d6e213014b"}, {0x0, 0xd, "cc132aa4143f6cef7a191b"}, {0x0, 0x11, "acbabc80460fe3d5abfeba44664b65"}, {0x6, 0xd, "c3daa2b0f2b43143330e1e"}]}]}}}}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4804}, 0x890)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r8 = dup(r7)
sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)

16m28.949079703s ago: executing program 9 (id=1748):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a19", 0x3f}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0)

16m27.24603649s ago: executing program 9 (id=1753):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r2, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0xcaaa256489cf7c0d, 0x10)

16m26.904023268s ago: executing program 9 (id=1754):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

16m26.642609879s ago: executing program 9 (id=1755):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}})
r1 = open(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000480)=ANY=[@ANYBLOB])
socket$packet(0x11, 0x2, 0x300)
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r5, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
socket$nl_route(0x10, 0x3, 0x0)

16m19.950237459s ago: executing program 38 (id=1736):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
sendfile(r1, r1, 0x0, 0x200000)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r3], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1)

16m14.781427386s ago: executing program 39 (id=1745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)

16m11.301902356s ago: executing program 40 (id=1755):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}})
r1 = open(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000480)=ANY=[@ANYBLOB])
socket$packet(0x11, 0x2, 0x300)
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r5, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
socket$nl_route(0x10, 0x3, 0x0)

12m18.390866231s ago: executing program 1 (id=2253):
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

12m18.183483138s ago: executing program 1 (id=2254):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
write(r0, 0x0, 0x0)

12m18.083438826s ago: executing program 1 (id=2255):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x10001, 0x240000)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000039302ce8", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [<r5=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})

12m17.732850244s ago: executing program 1 (id=2258):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
fchdir(r0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x1, 0xe225, 0x2, {0x5, @vbi={0x2, 0x9, 0x101, 0x34343459, [0xa, 0x302], [0x8003, 0x1], 0x108}}})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817"], 0xb0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}})
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x8020008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0xfffffffe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000033a40)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$sock(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
close(0x3)
recvmsg(r5, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)

12m15.154882982s ago: executing program 0 (id=2260):
userfaultfd(0x80001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

12m13.269044765s ago: executing program 0 (id=2261):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x800)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRES64=r5], 0x10)
r6 = syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0)
ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "234408020e90d1beaa82dc1ecf00"})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x28}}, 0x4000054)
r12 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x1b, r12, 0x0)
fsetxattr$system_posix_acl(r12, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
ioctl$TIOCGPGRP(r7, 0x5437, 0x0)

12m12.741042078s ago: executing program 1 (id=2264):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

12m12.433968082s ago: executing program 1 (id=2267):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x7f, {}, {0x2, 0xc, 0xf8, 0x7, 0x6, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1})

12m9.842835572s ago: executing program 0 (id=2272):
fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)

12m9.479414071s ago: executing program 0 (id=2274):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000180))
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$unlink(0x9, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x700, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8000000)

12m8.310006345s ago: executing program 0 (id=2276):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

12m7.939543355s ago: executing program 0 (id=2278):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x6, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000340))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x7, 0x0, 0x317, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x7, 0xba, [@local]}, @rr={0x7, 0xf, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0xb, 0x54, [@broadcast, @local]}, @end, @cipso={0x86, 0x3d, 0x1, [{0x7, 0x2}, {0x6, 0x3, 'o'}, {0x0, 0x7, "d6e213014b"}, {0x0, 0xd, "cc132aa4143f6cef7a191b"}, {0x0, 0x11, "acbabc80460fe3d5abfeba44664b65"}, {0x6, 0xd, "c3daa2b0f2b43143330e1e"}]}]}}}}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4804}, 0x890)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r8 = dup(r7)
sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)

11m56.401361617s ago: executing program 41 (id=2267):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x7f, {}, {0x2, 0xc, 0xf8, 0x7, 0x6, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1})

11m52.8961537s ago: executing program 42 (id=2278):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x6, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000340))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x7, 0x0, 0x317, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x7, 0xba, [@local]}, @rr={0x7, 0xf, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0xb, 0x54, [@broadcast, @local]}, @end, @cipso={0x86, 0x3d, 0x1, [{0x7, 0x2}, {0x6, 0x3, 'o'}, {0x0, 0x7, "d6e213014b"}, {0x0, 0xd, "cc132aa4143f6cef7a191b"}, {0x0, 0x11, "acbabc80460fe3d5abfeba44664b65"}, {0x6, 0xd, "c3daa2b0f2b43143330e1e"}]}]}}}}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4804}, 0x890)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r8 = dup(r7)
sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)

2m50.886378928s ago: executing program 2 (id=3524):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0)
write(r5, &(0x7f00000000c0)="510003000000", 0x6)
listen(r4, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)

2m41.139033935s ago: executing program 2 (id=3548):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

2m41.048113502s ago: executing program 2 (id=3549):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x3, 0xd)
socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

2m39.694707952s ago: executing program 2 (id=3552):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x4000000000000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x8c2b01)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r2, 0x8b1b, &(0x7f0000000040))
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e})

2m38.60291512s ago: executing program 2 (id=3554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x60201, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$kcm(r3, 0x0, 0x88d4)
close(0xffffffffffffffff)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30)

2m38.461944442s ago: executing program 2 (id=3556):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0)
write(r5, &(0x7f00000000c0)="510003000000", 0x6)
listen(r4, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)

2m22.529091068s ago: executing program 43 (id=3556):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0)
write(r5, &(0x7f00000000c0)="510003000000", 0x6)
listen(r4, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)

31.214738719s ago: executing program 8 (id=3884):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
lseek(r1, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3, 0x0, 0x1000000}, 0x38)

26.650408028s ago: executing program 8 (id=3894):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.603342256s ago: executing program 8 (id=3909):
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000)
r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x123, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000018c0)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)

18.34020377s ago: executing program 8 (id=3913):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0xee, 0x80008000, 0x1, 0xe, 0x7, 0x4, 0x0, 0x20000f, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x101, 0xffff, 0x10000001, 0xffffffa7, 0x3, 0x2, 0x2000000, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x7, 0x3, 0x8, 0x2, 0x5]})

17.638842936s ago: executing program 8 (id=3915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)

16.572695092s ago: executing program 8 (id=3919):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x800)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRES64=r4], 0x10)
syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "234408020e90d1beaa82dc1ecf00"})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x28}}, 0x4000054)
r10 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x1b, r10, 0x0)
fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
ioctl$TIOCGPGRP(r5, 0x5437, 0x0)

7.833741908s ago: executing program 3 (id=3938):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)

7.671426201s ago: executing program 4 (id=3939):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010, 0x0, 0x1}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r5, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

6.630582615s ago: executing program 3 (id=3940):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}})
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = open(0x0, 0x64842, 0x0)
socket$inet6(0xa, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0)={0x53f, "80e54e"}, 0x6)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x23, 0x28, 0xfd, 0xe}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0xb, 0x1}, 0x20)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000380)=@buf={0xac, &(0x7f0000000500)="804c1183a4b4b403f4eb259f51cf496f73888eebfc03bb99236884d80981dfa0dbb7aec68e71c7e1ba0407d7174c849d26ec9e8c8f58015773c1b95a48b40f464a351791172320dbaada2dd10e64ad969499e97e0be80ab76c0065ed51da636e75712651ed2c386679dbf373e3a2b5c30d87c33b01da476a3d65eedb63c45acf3f43233a655a924b529261ca4cb366d1cf5455af83867e6f912d001ad702562350ea3713822cd9673cbd5d96"})

6.436156481s ago: executing program 3 (id=3941):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd00", 0x22)

6.050538182s ago: executing program 3 (id=3942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000b200850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0)
rmdir(&(0x7f0000000440)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

5.390256765s ago: executing program 3 (id=3944):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

4.626833317s ago: executing program 5 (id=3945):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

4.406692595s ago: executing program 4 (id=3946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)

4.2204268s ago: executing program 5 (id=3947):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)

3.130014878s ago: executing program 5 (id=3948):
syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c00000000000190780a010101ac1414aa05019078e00000e040000000000000ac1414aa0a010102442c7b51ac1414bb000001ffac1e000100000004000000"], 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x8, 0x200000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080), 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000600), 0xfec8)
recvmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x208a, 0x0)
setreuid(0x0, 0xee01)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="19d448bbaaf3b2a3df9d9a3089c9f69abca08763e33bfdb383fa6163a06ef4a981eeee43d1cd3081275e3a2c9425eec6e47c39748026da39d0ea5d3f295acf8395719fc377692069add654fda8a4a2b85288ed37018b9420114c292d8b71465eaf35f317ac7fdcd8a9a52b42faa7c4827ff02426470aced267fb40a537bc67996f16634ae7f95c0b804e43b45f2ac18b00488823556f902f61b52a521625f39f5d01ff9f4f5be0170aca2bc7fa86baef8c49c4b11b7ad5ce6468530f5ab72833c21ed83803edbfdd"})

3.128401488s ago: executing program 4 (id=3955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)

1.882837928s ago: executing program 4 (id=3949):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}})
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = open(0x0, 0x64842, 0x0)
socket$inet6(0xa, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0)={0x53f, "80e54e"}, 0x6)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x23, 0x28, 0xfd, 0xe}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0xb, 0x1}, 0x20)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000380)=@buf={0xac, &(0x7f0000000500)="804c1183a4b4b403f4eb259f51cf496f73888eebfc03bb99236884d80981dfa0dbb7aec68e71c7e1ba0407d7174c849d26ec9e8c8f58015773c1b95a48b40f464a351791172320dbaada2dd10e64ad969499e97e0be80ab76c0065ed51da636e75712651ed2c386679dbf373e3a2b5c30d87c33b01da476a3d65eedb63c45acf3f43233a655a924b529261ca4cb366d1cf5455af83867e6f912d001ad702562350ea3713822cd9673cbd5d96"})

1.211446023s ago: executing program 4 (id=3950):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd0000", 0x23)

1.205002903s ago: executing program 5 (id=3951):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2})
close_range(r0, 0xffffffffffffffff, 0x0)

1.026744667s ago: executing program 5 (id=3952):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000850000000400000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000002480), &(0x7f00000024c0)}, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x22601, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES16=r4, @ANYBLOB="00004d71ef67104901fdcdda60008b00000000b8d86f216de80e8ced85b900002c001280090001b25cc77515bf36f2ba457c28e0e700626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x8040)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0xfffffffc, "94c47900001023660f0000000000005800000000000400", <r9=>0xffffffffffffffff})
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000180), &(0x7f0000000040)=@udp=r5}, 0x20)
r11 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x2e, 0x7, 0x6, 0x7, 0x8, 0x5, 0x8001, [0x0, 0xe]}})

944.211734ms ago: executing program 4 (id=3953):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

43.715287ms ago: executing program 3 (id=3954):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x2, 0x3234564e, 0x3, @discrete={0x1, 0x8}})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5})
syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]})

0s ago: executing program 5 (id=3956):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x401}}, 0x18)
sendto$inet6(r0, &(0x7f0000000080)="011f28e548f164ac574921182ba1db5ffdc3d90651296f587c49455d62d6103805405411fcf988084ab3c6417daf737074332bd70caf9aef8c0060af2693215b0ec826fedbb9db58cf3977bfe79cde84656a4f0fc333882169d081345673afcfd53b87971793ffb623b56ede686d9fd45d0a14c08e7f60fb8e221ecb041a4b2ff39941f3524ab281aeb6332c50aa380ba808ff00bcd8139229e735587dd4cd83e7ecb6c236f2d75fc17043a15275006a58c122da044e0a60b028059f06470af185a299df14d6cf3a7cfe1b66d9c8d72a4c1c8d61625762e397c7788e27ec478fd56699", 0xe3, 0x4004, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x5}, 0x1c)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00082302005d8539856b002645657a95bd", 0x12)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)=ANY=[], 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000"], &(0x7f0000000500)='GPL\x00', 0x4000000a, 0xd1, &(0x7f0000000340)=""/209, 0x0, 0x1}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f")
ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080))
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000814)

kernel console output (not intermixed with test programs):

1.084512][T16030]    program syz.4.2395 not setting count and/or reply_len properly
[ 1202.224580][T16049] syzkaller0: entered promiscuous mode
[ 1202.259412][T16049] syzkaller0: entered allmulticast mode
[ 1204.425180][T16068] 9pnet_fd: Insufficient options for proto=fd
[ 1204.540571][T16076] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2396'.
[ 1208.191925][T11550] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1208.871354][T11550] usb 9-1: Using ep0 maxpacket: 16
[ 1208.885489][T11550] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1208.965868][T11550] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1209.063416][T11550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.085989][T11550] usb 9-1: Product: syz
[ 1209.092071][T11550] usb 9-1: Manufacturer: syz
[ 1209.096899][T11550] usb 9-1: SerialNumber: syz
[ 1209.112890][T11550] usb 9-1: config 0 descriptor??
[ 1209.130377][T11550] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1209.195247][T11550] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1209.772381][T16111] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1209.802057][T16109] syzkaller0: entered promiscuous mode
[ 1209.823598][T16109] syzkaller0: entered allmulticast mode
[ 1211.529977][ T5886] usb 9-1: USB disconnect, device number 9
[ 1213.769394][T16152] program syz.3.2410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1213.913323][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1214.373355][T16129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1217.731356][T11550] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1217.792665][   T28] audit: type=1326 audit(1756640273.709:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1217.814942][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1218.751290][T11550] usb 9-1: Using ep0 maxpacket: 16
[ 1218.763555][T11550] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1218.764408][T16207] syzkaller0: entered promiscuous mode
[ 1218.781528][T16207] syzkaller0: entered allmulticast mode
[ 1218.829728][T11550] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1218.909619][T11550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.114169][T11550] usb 9-1: Product: syz
[ 1219.400406][T11550] usb 9-1: Manufacturer: syz
[ 1219.415796][T11550] usb 9-1: SerialNumber: syz
[ 1219.453074][T11550] usb 9-1: config 0 descriptor??
[ 1219.480862][T11550] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1219.514620][T11550] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1220.424909][T16217] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1221.712212][ T5903] usb 9-1: USB disconnect, device number 10
[ 1221.832777][T16235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2422'.
[ 1222.290587][T16243] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1222.379352][T16237] input: syz1 as /devices/virtual/input/input15
[ 1223.121515][T16256] sg_write: data in/out 91/42 bytes for SCSI command 0x7-- guessing data in;
[ 1223.121515][T16256]    program syz.8.2426 not setting count and/or reply_len properly
[ 1223.822587][T16258] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1230.639836][   T28] audit: type=1326 audit(1756640286.549:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1234.171362][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1234.371350][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1234.474788][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1234.519558][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1234.555259][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.590678][    T9] usb 4-1: Product: syz
[ 1234.607898][    T9] usb 4-1: Manufacturer: syz
[ 1234.627495][    T9] usb 4-1: SerialNumber: syz
[ 1234.654236][    T9] usb 4-1: config 0 descriptor??
[ 1234.674299][    T9] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1234.694834][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1235.308057][T16372] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1235.764278][T16378] program syz.8.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1236.893490][    T9] usb 4-1: USB disconnect, device number 12
[ 1239.120257][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.126833][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.804264][T16449] 9pnet_fd: Insufficient options for proto=fd
[ 1242.972067][T16460] netlink: 'syz.4.2461': attribute type 1 has an invalid length.
[ 1243.001362][T16460] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2461'.
[ 1243.051701][ T8349] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1243.231560][ T8349] usb 4-1: Using ep0 maxpacket: 16
[ 1243.239156][ T8349] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1243.253906][ T8349] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1243.314476][ T8349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.339892][ T8349] usb 4-1: Product: syz
[ 1243.345106][ T8349] usb 4-1: Manufacturer: syz
[ 1243.349983][ T8349] usb 4-1: SerialNumber: syz
[ 1243.411520][ T8349] usb 4-1: config 0 descriptor??
[ 1243.531616][ T8349] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1243.560237][ T8349] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1244.993570][T16478] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1247.542599][ T5788] usb 4-1: USB disconnect, device number 13
[ 1250.537454][T16530] 9pnet_fd: Insufficient options for proto=fd
[ 1251.403298][T16536] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1254.434699][    T9] IPVS: starting estimator thread 0...
[ 1254.541505][T16553] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1254.991460][T16562] macsec1: entered promiscuous mode
[ 1254.996829][T16562] macsec1: entered allmulticast mode
[ 1257.081319][ T8349] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1257.441381][T16584] 9pnet_fd: Insufficient options for proto=fd
[ 1258.236265][ T8349] usb 3-1: Using ep0 maxpacket: 16
[ 1258.303973][ T8349] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1258.355505][ T8349] usb 3-1: config 0 has no interface number 0
[ 1258.374590][T16591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1258.423050][T16591] tipc: Resetting bearer <eth:syzkaller0>
[ 1258.426623][ T8349] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1258.490945][ T8349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.501665][T16587] tipc: Disabling bearer <eth:syzkaller0>
[ 1258.524036][ T8349] usb 3-1: Product: syz
[ 1258.550335][ T8349] usb 3-1: Manufacturer: syz
[ 1258.561223][ T8349] usb 3-1: SerialNumber: syz
[ 1258.583486][ T8349] usb 3-1: config 0 descriptor??
[ 1258.624050][ T8349] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1258.731376][T11550] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1258.941714][T11550] usb 5-1: Using ep0 maxpacket: 16
[ 1259.088463][T11550] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1259.364629][T11550] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1259.531380][T11550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.575309][T11550] usb 5-1: Product: syz
[ 1259.579548][T11550] usb 5-1: Manufacturer: syz
[ 1259.607555][T11550] usb 5-1: SerialNumber: syz
[ 1259.630272][T11550] usb 5-1: config 0 descriptor??
[ 1259.657874][T11550] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1259.703445][T11550] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1260.468181][T16611] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1260.983660][ T8349] gspca_spca1528: reg_r err -71
[ 1260.988745][ T8349] spca1528: probe of 3-1:0.1 failed with error -71
[ 1261.024434][ T8349] usb 3-1: USB disconnect, device number 7
[ 1261.765611][T11550] usb 5-1: USB disconnect, device number 4
[ 1263.021762][T16645] 9pnet_fd: Insufficient options for proto=fd
[ 1264.543892][T16638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1264.556560][T16638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1265.086567][T16661] tipc: Started in network mode
[ 1265.145271][T16661] tipc: Node identity ae4568330d05, cluster identity 4711
[ 1265.204643][T16661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1265.466404][T16660] tipc: Disabling bearer <eth:syzkaller0>
[ 1271.802868][T16721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1271.867902][T16721] tipc: Resetting bearer <eth:syzkaller0>
[ 1272.013242][ T5101] Bluetooth: hci1: command 0x0406 tx timeout
[ 1272.045390][T16720] tipc: Disabling bearer <eth:syzkaller0>
[ 1276.712528][T16788] binder: 16787:16788 ioctl c0306201 200000000280 returned -11
[ 1277.364036][T16799] 9pnet_fd: Insufficient options for proto=fd
[ 1281.265596][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2525'.
[ 1282.137329][T16826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1282.165819][T16826] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1282.350022][T16826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1282.410737][T16826] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1282.747412][T16847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1282.763342][T16847] tipc: Resetting bearer <eth:syzkaller0>
[ 1282.812151][T16845] tipc: Disabling bearer <eth:syzkaller0>
[ 1282.883539][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1283.111934][ T5886] usb 4-1: Using ep0 maxpacket: 16
[ 1283.144191][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1283.174943][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1283.190472][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.206965][ T5886] usb 4-1: Product: syz
[ 1283.213215][ T5886] usb 4-1: Manufacturer: syz
[ 1283.218012][ T5886] usb 4-1: SerialNumber: syz
[ 1283.235116][ T5886] usb 4-1: config 0 descriptor??
[ 1283.265767][ T5886] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1283.292780][ T5886] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1286.203402][T11087] usb 4-1: USB disconnect, device number 14
[ 1288.972803][T16897] 9pnet_fd: Insufficient options for proto=fd
[ 1292.909625][T16942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1293.843506][T16961] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1295.732489][T16988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1300.503622][T17050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1300.598045][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.606470][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1304.594522][T17104] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1306.410010][T10653] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[ 1306.887715][T10653] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1306.911306][T10653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.931230][T10653] usb 4-1: Product: syz
[ 1306.935474][T10653] usb 4-1: Manufacturer: syz
[ 1306.963549][T10653] usb 4-1: SerialNumber: syz
[ 1306.983332][T10653] usb 4-1: config 0 descriptor??
[ 1307.389340][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'.
[ 1307.501565][T10653] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[ 1307.768754][T10653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1307.803613][T10653] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1307.834489][T10653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.880402][T10653] usb 5-1: config 0 descriptor??
[ 1307.897281][T17141] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1307.952103][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2586'.
[ 1308.075416][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1308.087723][T17157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1308.131528][   T28] audit: type=1326 audit(1756640364.039:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1308.154090][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1308.169580][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1308.177474][T17157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1308.417157][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1308.424973][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1308.433496][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1308.440806][T10653] usbhid 5-1:0.0: can't add hid device: -32
[ 1308.447124][T10653] usbhid: probe of 5-1:0.0 failed with error -32
[ 1308.497493][T10653] usb 5-1: USB disconnect, device number 5
[ 1309.072506][T17165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1312.125459][   T27] usb 4-1: USB disconnect, device number 15
[ 1313.049995][T17228] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1313.184016][   T28] audit: type=1326 audit(1756640369.089:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.8.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1314.834606][T17255] 9pnet_fd: Insufficient options for proto=fd
[ 1316.159477][T10653] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1316.528143][T10653] usb 9-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1316.557800][T10653] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1316.591321][T10653] usb 9-1: Product: syz
[ 1316.595573][T10653] usb 9-1: Manufacturer: syz
[ 1316.645020][T10653] usb 9-1: SerialNumber: syz
[ 1316.654083][T10653] usb 9-1: config 0 descriptor??
[ 1317.066860][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2603'.
[ 1317.366679][T17292] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1317.488562][   T28] audit: type=1326 audit(1756640373.389:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.4.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1317.731851][T14899] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6
[ 1322.367173][T10653] usb 9-1: USB disconnect, device number 11
[ 1322.639957][T17358] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1323.489232][   T28] audit: type=1326 audit(1756640379.339:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1323.869919][T17374] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1325.171499][T10653] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1325.561422][T10653] usb 4-1: Using ep0 maxpacket: 16
[ 1325.585048][T10653] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1325.743673][T10653] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1325.770330][T10653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.799201][T10653] usb 4-1: Product: syz
[ 1325.808408][T10653] usb 4-1: Manufacturer: syz
[ 1325.833619][T10653] usb 4-1: SerialNumber: syz
[ 1325.855054][T10653] usb 4-1: config 0 descriptor??
[ 1325.883581][T10653] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1325.894748][T10653] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1326.506214][T17413] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1327.035260][   T27] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[ 1327.266022][   T27] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1327.297683][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.334667][   T27] usb 5-1: Product: syz
[ 1327.354992][   T27] usb 5-1: Manufacturer: syz
[ 1327.390785][   T27] usb 5-1: SerialNumber: syz
[ 1327.412319][   T27] usb 5-1: config 0 descriptor??
[ 1327.828608][    T9] usb 4-1: USB disconnect, device number 16
[ 1327.835193][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'.
[ 1327.994444][T17434] ref_ctr increment failed for inode: 0x172 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807e005580
[ 1329.998565][   T28] audit: type=1326 audit(1756640385.839:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17445 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1334.087482][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1334.461267][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 1334.469016][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1334.488203][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1334.542326][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.601223][    T9] usb 9-1: Product: syz
[ 1334.605460][    T9] usb 9-1: Manufacturer: syz
[ 1334.610111][    T9] usb 9-1: SerialNumber: syz
[ 1334.702002][    T9] usb 9-1: config 0 descriptor??
[ 1334.720363][    T9] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1334.750377][    T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1334.832073][T11608] usb 5-1: USB disconnect, device number 6
[ 1335.511204][T17508] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1337.385892][T11608] usb 9-1: USB disconnect, device number 12
[ 1337.478341][T17527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1338.163028][T17526] tipc: Disabling bearer <eth:syzkaller0>
[ 1339.321655][T14047] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1339.520665][T14047] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1339.560216][T14047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.598512][T14047] usb 3-1: Product: syz
[ 1339.616173][T14047] usb 3-1: Manufacturer: syz
[ 1339.636278][T14047] usb 3-1: SerialNumber: syz
[ 1339.757628][T14047] usb 3-1: config 0 descriptor??
[ 1341.359468][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'.
[ 1341.399093][T17580] ref_ctr increment failed for inode: 0x1cc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807cf40000
[ 1343.087826][T17598] 9pnet_fd: Insufficient options for proto=fd
[ 1343.811341][T14047] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1344.021282][T14047] usb 9-1: Using ep0 maxpacket: 16
[ 1344.579175][T14047] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1344.613291][T14047] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1344.651188][T14047] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.684819][T14047] usb 9-1: Product: syz
[ 1344.698303][T14047] usb 9-1: Manufacturer: syz
[ 1344.738634][T14047] usb 9-1: SerialNumber: syz
[ 1344.752589][T14047] usb 9-1: config 0 descriptor??
[ 1344.772575][T14047] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1344.805489][T14047] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1345.355884][    T9] usb 3-1: USB disconnect, device number 8
[ 1345.386479][T17618] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1346.865204][    T9] usb 9-1: USB disconnect, device number 13
[ 1347.349669][T17643] 9pnet_fd: Insufficient options for proto=fd
[ 1351.611402][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1351.851284][    T8] usb 3-1: Using ep0 maxpacket: 32
[ 1351.928052][    T8] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1352.319554][T17688] 9pnet_fd: Insufficient options for proto=fd
[ 1352.758109][    T8] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1353.101187][    T8] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1356.137941][T17732] batadv1: left promiscuous mode
[ 1356.175689][T17732] macsec1: left promiscuous mode
[ 1356.620923][T17739] syzkaller0: entered promiscuous mode
[ 1356.627744][T17739] syzkaller0: entered allmulticast mode
[ 1357.017177][    T8] usb 3-1: string descriptor 0 read error: -71
[ 1357.051841][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1357.094129][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.143365][    T8] usb 3-1: can't set config #1, error -71
[ 1357.345188][    T8] usb 3-1: USB disconnect, device number 9
[ 1359.013307][T17766] 9pnet_fd: Insufficient options for proto=fd
[ 1359.408444][T17774] syzkaller0: entered promiscuous mode
[ 1359.414485][T17774] syzkaller0: entered allmulticast mode
[ 1359.692660][T17779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'.
[ 1359.706964][   T28] audit: type=1326 audit(1756640415.599:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.4.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1359.842211][T17777] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[ 1362.046395][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.314458][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.511432][T17828] 9pnet_fd: Insufficient options for proto=fd
[ 1364.126024][   T28] audit: type=1326 audit(1756640419.999:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1365.260869][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2705'.
[ 1365.261778][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1365.444743][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2705'.
[ 1365.481338][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1365.506123][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1365.520705][T17838] input: syz0 as /devices/virtual/input/input16
[ 1365.537832][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1365.551302][T17850] input: syz1 as /devices/virtual/input/input17
[ 1365.562588][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.611314][    T9] usb 3-1: Product: syz
[ 1365.618438][    T9] usb 3-1: Manufacturer: syz
[ 1365.632186][    T9] usb 3-1: SerialNumber: syz
[ 1365.657743][    T9] usb 3-1: config 0 descriptor??
[ 1365.680641][    T9] appledisplay 3-1:0.0: Could not find int-in endpoint
[ 1365.717631][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1366.736379][T17863] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1366.792297][T17864] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1366.803237][T17863] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock
[ 1367.759381][T17881] 9pnet_fd: Insufficient options for proto=fd
[ 1367.951859][T17885] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1368.021158][   T27] usb 3-1: USB disconnect, device number 10
[ 1369.111195][   T28] audit: type=1326 audit(1756640425.019:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17877 comm="syz.3.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1369.843859][T17899] syzkaller0: entered promiscuous mode
[ 1369.911451][T17899] syzkaller0: entered allmulticast mode
[ 1370.126873][T17905] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1370.400713][T17910] ref_ctr increment failed for inode: 0x663 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888078785f00
[ 1371.431275][ T5886] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1371.565740][T17930] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1372.421252][ T5886] usb 9-1: Using ep0 maxpacket: 16
[ 1372.433410][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1372.487375][ T5886] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1372.541827][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.611288][ T5886] usb 9-1: Product: syz
[ 1372.619416][ T5886] usb 9-1: Manufacturer: syz
[ 1372.641682][ T5886] usb 9-1: SerialNumber: syz
[ 1372.659593][ T5886] usb 9-1: config 0 descriptor??
[ 1372.686910][ T5886] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1372.702343][ T5886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1372.825584][T17943] 9pnet_fd: Insufficient options for proto=fd
[ 1373.289456][T17948] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1373.551356][   T28] audit: type=1326 audit(1756640429.459:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17938 comm="syz.4.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1373.571742][T17948] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1374.933405][    T9] usb 9-1: USB disconnect, device number 14
[ 1376.660352][T17985] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1377.638185][T17993] 9pnet_fd: Insufficient options for proto=fd
[ 1377.666866][T17992] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1377.829566][   T28] audit: type=1326 audit(1756640433.739:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1377.869861][T17998] syzkaller0: entered promiscuous mode
[ 1377.882106][T17998] syzkaller0: entered allmulticast mode
[ 1378.911376][T10653] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1379.131360][T10653] usb 4-1: Using ep0 maxpacket: 16
[ 1379.138927][T10653] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1379.162761][T10653] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1379.172887][T10653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.193134][T10653] usb 4-1: Product: syz
[ 1379.197365][T10653] usb 4-1: Manufacturer: syz
[ 1379.398453][T10653] usb 4-1: SerialNumber: syz
[ 1379.415088][T10653] usb 4-1: config 0 descriptor??
[ 1379.422666][T10653] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1379.432550][T10653] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1379.994491][T18030] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1380.416822][T18030] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1381.549636][T18040] input: syz1 as /devices/virtual/input/input18
[ 1382.360504][T18055] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1382.413590][T11608] usb 4-1: USB disconnect, device number 17
[ 1382.870898][T18068] 9pnet_fd: Insufficient options for proto=fd
[ 1383.572061][   T28] audit: type=1326 audit(1756640439.489:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1383.631861][   T28] audit: type=1326 audit(1756640439.489:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1383.737656][   T28] audit: type=1326 audit(1756640439.489:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1384.127608][T18085] input: syz1 as /devices/virtual/input/input19
[ 1385.426121][T18107] 9pnet_fd: Insufficient options for proto=fd
[ 1385.461364][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1385.664075][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 1385.674700][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1385.773278][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1385.833196][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.982595][    T9] usb 9-1: Product: syz
[ 1386.033070][    T9] usb 9-1: Manufacturer: syz
[ 1386.072033][    T9] usb 9-1: SerialNumber: syz
[ 1386.191973][   T28] audit: type=1326 audit(1756640442.079:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.3.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1386.312709][    T9] usb 9-1: config 0 descriptor??
[ 1386.373332][    T9] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1386.423415][    T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1386.530699][T18117] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1387.132974][T18129] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[ 1387.562261][T18133] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1388.053337][T18145] 9pnet_fd: Insufficient options for proto=fd
[ 1388.651690][ T5101] Bluetooth: hci4: command 0x1003 tx timeout
[ 1388.659939][T14899] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1389.018059][ T5903] usb 9-1: USB disconnect, device number 15
[ 1391.043569][T18177] 9pnet_fd: Insufficient options for proto=fd
[ 1391.731367][   T28] audit: type=1326 audit(1756640447.639:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18170 comm="syz.3.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1393.516877][T18200] syzkaller0: entered promiscuous mode
[ 1393.532576][T18200] syzkaller0: entered allmulticast mode
[ 1393.981243][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1394.191213][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1394.199677][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1394.249306][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1394.281669][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.435769][    T9] usb 5-1: Product: syz
[ 1394.515892][    T9] usb 5-1: Manufacturer: syz
[ 1394.567735][    T9] usb 5-1: SerialNumber: syz
[ 1395.012684][    T9] usb 5-1: config 0 descriptor??
[ 1395.088681][    T9] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1395.131946][T18225] 9pnet_fd: Insufficient options for proto=fd
[ 1395.921978][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1396.012662][T18229] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1396.141408][   T28] audit: type=1326 audit(1756640451.969:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18220 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1396.163884][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1397.073597][T15479] usb 5-1: USB disconnect, device number 7
[ 1398.659068][T18280] 9pnet_fd: Insufficient options for proto=fd
[ 1399.465466][T11087] IPVS: starting estimator thread 0...
[ 1399.492780][T18287] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1399.500206][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1399.616021][T18288] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1402.911708][T11087] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1403.066267][T18330] syzkaller0: entered promiscuous mode
[ 1403.119032][T18330] syzkaller0: entered allmulticast mode
[ 1403.125954][T11087] usb 5-1: Using ep0 maxpacket: 16
[ 1403.189646][T11087] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1403.404213][T11087] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1403.486561][T11087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.515230][T11087] usb 5-1: Product: syz
[ 1403.531500][T11087] usb 5-1: Manufacturer: syz
[ 1403.551137][T11087] usb 5-1: SerialNumber: syz
[ 1403.630054][T11087] usb 5-1: config 0 descriptor??
[ 1403.662211][T11087] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1403.712651][T11087] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1404.042837][T18345] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1404.197371][T18349] 9pnet_fd: Insufficient options for proto=fd
[ 1404.661488][T15479] usb 5-1: USB disconnect, device number 8
[ 1406.607188][T18381] syzkaller0: entered promiscuous mode
[ 1406.637058][T18381] syzkaller0: entered allmulticast mode
[ 1407.936106][T18396] input: syz1 as /devices/virtual/input/input21
[ 1408.932821][T18407] 9pnet_fd: Insufficient options for proto=fd
[ 1412.171296][   T27] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1412.361232][   T27] usb 9-1: Using ep0 maxpacket: 16
[ 1412.374313][   T27] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1412.392714][   T27] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1412.406766][   T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.415809][   T27] usb 9-1: Product: syz
[ 1412.420103][   T27] usb 9-1: Manufacturer: syz
[ 1412.425429][   T27] usb 9-1: SerialNumber: syz
[ 1412.433169][   T27] usb 9-1: config 0 descriptor??
[ 1412.444966][   T27] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1412.473615][   T27] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1412.709447][T18416] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1413.104837][ T5903] usb 9-1: USB disconnect, device number 16
[ 1413.660890][T18431] 9pnet_fd: Insufficient options for proto=fd
[ 1414.382304][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1415.496757][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1415.606479][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1415.892776][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1415.954609][    T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 1415.978961][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.053020][    T9] usb 5-1: config 0 descriptor??
[ 1417.027621][    T9] usbhid 5-1:0.0: can't add hid device: -71
[ 1417.040950][    T9] usbhid: probe of 5-1:0.0 failed with error -71
[ 1417.221517][    T9] usb 5-1: USB disconnect, device number 9
[ 1417.682973][T18474] input: syz1 as /devices/virtual/input/input22
[ 1418.118539][T18485] 9pnet_fd: Insufficient options for proto=fd
[ 1419.197129][T18498] 9pnet_fd: Insufficient options for proto=fd
[ 1420.230184][T18509] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2832'.
[ 1420.359196][T18509] 0ªX¹¦D: renamed from macvtap0 (while UP)
[ 1420.627247][T18509] 0ªX¹¦D: entered allmulticast mode
[ 1420.632973][T18509] veth0_macvtap: entered allmulticast mode
[ 1422.532145][T18509] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 1423.439641][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.448475][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1425.511386][T18524] Bluetooth: hci0: command 0x0406 tx timeout
[ 1426.541566][T18562] 9pnet_fd: Insufficient options for proto=fd
[ 1430.546481][T18614] 9pnet_fd: Insufficient options for proto=fd
[ 1432.239415][   T28] audit: type=1326 audit(1756640488.139:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.326331][   T28] audit: type=1326 audit(1756640488.139:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.421446][   T28] audit: type=1326 audit(1756640488.139:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.491195][   T28] audit: type=1326 audit(1756640488.139:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.565041][   T28] audit: type=1326 audit(1756640488.139:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.640631][   T28] audit: type=1326 audit(1756640488.139:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.707121][   T28] audit: type=1326 audit(1756640488.149:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.774849][   T28] audit: type=1326 audit(1756640488.189:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.837223][   T28] audit: type=1326 audit(1756640488.389:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1432.906238][   T28] audit: type=1326 audit(1756640488.389:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1433.261741][T18663] 9pnet_fd: Insufficient options for proto=fd
[ 1434.416944][T18683] 9pnet_fd: Insufficient options for proto=fd
[ 1437.201485][ T5886] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1437.421350][ T5886] usb 4-1: device descriptor read/64, error -71
[ 1437.831234][ T5886] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1438.071437][ T5886] usb 4-1: device descriptor read/64, error -71
[ 1438.278543][ T5886] usb usb4-port1: attempt power cycle
[ 1438.321433][T11608] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 1438.513689][T11608] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 1438.534475][T11608] usb 3-1: config 0 has no interface number 0
[ 1438.561640][T11608] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1438.612996][T11608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.670042][T11608] usb 3-1: Product: syz
[ 1438.689215][T11608] usb 3-1: Manufacturer: syz
[ 1438.718961][T11608] usb 3-1: SerialNumber: syz
[ 1438.721718][ T5886] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1438.752143][T11608] usb 3-1: config 0 descriptor??
[ 1439.291330][ T5886] usb 4-1: device descriptor read/8, error -71
[ 1439.647883][T11608] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1439.681946][T11608] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1439.758164][T11608] asix: probe of 3-1:0.251 failed with error -71
[ 1439.809842][T11608] usb 3-1: USB disconnect, device number 11
[ 1439.925521][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 1439.925539][   T28] audit: type=1326 audit(1756640495.829:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18726 comm="syz.8.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1444.411503][T11608] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1445.475019][   T28] audit: type=1326 audit(1756640501.379:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1446.011406][T11608] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1446.061290][T11608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.081915][T11608] usb 9-1: Product: syz
[ 1446.091551][T11608] usb 9-1: Manufacturer: syz
[ 1446.121728][T11608] usb 9-1: SerialNumber: syz
[ 1446.142804][T11608] usb 9-1: config 0 descriptor??
[ 1446.367128][T18808] 9pnet_fd: Insufficient options for proto=fd
[ 1448.897204][T18831] syzkaller0: entered promiscuous mode
[ 1448.930754][T18831] syzkaller0: entered allmulticast mode
[ 1449.235788][   T27] usb 9-1: USB disconnect, device number 17
[ 1449.842216][   T28] audit: type=1326 audit(1756640505.759:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1451.523422][T18868] 9pnet_fd: Insufficient options for proto=fd
[ 1453.240689][T18885] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1453.267150][T18885] syzkaller0: entered promiscuous mode
[ 1453.278370][T18885] syzkaller0: entered allmulticast mode
[ 1453.538806][   T28] audit: type=1326 audit(1756640509.449:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7ffc0000
[ 1453.736983][   T28] audit: type=1326 audit(1756640509.449:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7ffc0000
[ 1454.342111][   T28] audit: type=1326 audit(1756640510.259:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b1518ebe9 code=0x7ffc0000
[ 1454.431822][   T28] audit: type=1326 audit(1756640510.319:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7ffc0000
[ 1454.487463][   T28] audit: type=1326 audit(1756640510.319:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7ffc0000
[ 1454.937244][T18910] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2907'.
[ 1454.946879][T18910] netem: unknown loss type 0
[ 1454.952493][T18910] netem: change failed
[ 1455.843112][   T28] audit: type=1326 audit(1756640511.759:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1456.536171][T18927] 9pnet_fd: Insufficient options for proto=fd
[ 1458.139200][T18940] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1458.188513][T18945] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2914'.
[ 1458.199769][T18945] 0ªX¹¦D: renamed from macvtap0 (while UP)
[ 1458.213225][T18945] 0ªX¹¦D: entered allmulticast mode
[ 1458.237377][T18945] veth0_macvtap: entered allmulticast mode
[ 1458.315542][T18945] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 1458.348026][T18940] syzkaller0: entered promiscuous mode
[ 1458.356899][T18940] syzkaller0: entered allmulticast mode
[ 1458.371282][ T5855] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1458.572897][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1458.608955][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.639899][ T5855] usb 4-1: Product: syz
[ 1458.653299][ T5855] usb 4-1: Manufacturer: syz
[ 1458.668062][ T5855] usb 4-1: SerialNumber: syz
[ 1458.752827][ T5855] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1458.828934][T18356] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1459.911459][T18356] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1459.987322][T11608] usb 4-1: USB disconnect, device number 22
[ 1460.016490][T18356] ath9k_htc: Failed to initialize the device
[ 1460.053598][T11608] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1461.701171][   T28] audit: type=1326 audit(1756640517.609:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18973 comm="syz.3.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1462.900941][T18996] 9pnet_fd: Insufficient options for proto=fd
[ 1464.360884][T19003] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2927'.
[ 1464.370520][T19003] netem: unknown loss type 0
[ 1464.376185][T19003] netem: change failed
[ 1469.490705][T19049] 9pnet_fd: Insufficient options for proto=fd
[ 1469.709660][   T28] audit: type=1326 audit(1756640525.559:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19035 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1470.226644][T19064] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2939'.
[ 1470.246985][T19064] 1ªX¹¦D: renamed from 
30ªX¹¦D (while UP)
[ 1470.299431][T19064] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 1470.341223][T10653] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1470.573069][T10653] usb 3-1: Using ep0 maxpacket: 16
[ 1470.584819][T10653] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1470.615211][T10653] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1470.632211][T10653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.644823][T10653] usb 3-1: Product: syz
[ 1470.649491][T10653] usb 3-1: Manufacturer: syz
[ 1470.654983][T10653] usb 3-1: SerialNumber: syz
[ 1470.662833][T10653] usb 3-1: config 0 descriptor??
[ 1470.677328][T10653] appledisplay 3-1:0.0: Could not find int-in endpoint
[ 1470.692791][T10653] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1470.992304][T19083] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock
[ 1471.206448][T10653] usb 3-1: USB disconnect, device number 12
[ 1472.304079][T19105] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2942'.
[ 1472.313719][T19105] netem: unknown loss type 0
[ 1472.318879][T19105] netem: change failed
[ 1473.115150][T15479] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1473.331371][T15479] usb 5-1: Using ep0 maxpacket: 16
[ 1473.348647][T15479] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1473.368248][T15479] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1473.385251][T15479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.411136][T15479] usb 5-1: Product: syz
[ 1473.491527][T15479] usb 5-1: Manufacturer: syz
[ 1473.496197][T15479] usb 5-1: SerialNumber: syz
[ 1473.512373][T15479] usb 5-1: config 0 descriptor??
[ 1473.525114][T15479] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1473.552889][T15479] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1473.653444][T19118] 9pnet_fd: Insufficient options for proto=fd
[ 1474.347989][T19122] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1474.565623][T15479] usb 5-1: USB disconnect, device number 10
[ 1474.606925][T19133] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1475.236384][   T28] audit: type=1326 audit(1756640531.149:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19123 comm="syz.8.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1476.269558][T19166] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1476.316543][   T28] audit: type=1326 audit(1756640532.189:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1476.339216][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1478.599385][T19196] 9pnet_fd: Insufficient options for proto=fd
[ 1480.299693][T11149] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1480.501529][T11149] usb 9-1: Using ep0 maxpacket: 32
[ 1480.545164][T11149] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 1480.554990][T11149] usb 9-1: config 0 has no interface number 0
[ 1480.561454][T11149] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1480.587062][T11149] usb 9-1: config 0 interface 85 has no altsetting 0
[ 1480.655248][T11149] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1480.710361][T11149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.731288][T11149] usb 9-1: Product: syz
[ 1480.735613][T11149] usb 9-1: Manufacturer: syz
[ 1480.740256][T11149] usb 9-1: SerialNumber: syz
[ 1480.778119][T11149] usb 9-1: config 0 descriptor??
[ 1481.794485][T11149] appletouch 9-1:0.85: Geyser mode initialized.
[ 1481.825322][T11149] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input23
[ 1482.051841][T10653] usb 9-1: USB disconnect, device number 18
[ 1482.584946][T10653] appletouch 9-1:0.85: input: appletouch disconnected
[ 1483.030972][T19246] 9pnet_fd: Insufficient options for proto=fd
[ 1484.091170][T11149] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1484.291365][T11149] usb 4-1: Using ep0 maxpacket: 16
[ 1484.311507][T11149] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1484.424785][T11149] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1484.788028][T11149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.859714][T11149] usb 4-1: Product: syz
[ 1484.895182][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1485.032324][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.128041][T11149] usb 4-1: Manufacturer: syz
[ 1485.133270][T11149] usb 4-1: SerialNumber: syz
[ 1485.166750][T11149] usb 4-1: config 0 descriptor??
[ 1485.204303][T11149] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1485.234230][T11149] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1486.165035][T19256] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1486.316545][T10653] usb 4-1: USB disconnect, device number 23
[ 1486.332981][T19289] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2979'.
[ 1486.780992][T19298] 9pnet_fd: Insufficient options for proto=fd
[ 1491.831384][T11149] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1492.031212][T11149] usb 4-1: Using ep0 maxpacket: 16
[ 1492.104477][T11149] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1492.192375][T19348] 9pnet_fd: Insufficient options for proto=fd
[ 1492.249902][T11149] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1492.363231][T11149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.464613][T11149] usb 4-1: Product: syz
[ 1492.504187][T11149] usb 4-1: Manufacturer: syz
[ 1492.547130][T11149] usb 4-1: SerialNumber: syz
[ 1492.642485][T11149] usb 4-1: config 0 descriptor??
[ 1492.668711][T11149] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1492.700333][T11149] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1493.007936][T19356] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1493.130480][T19358] ref_ctr increment failed for inode: 0x7ac offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807d460000
[ 1493.260985][T11608] usb 4-1: USB disconnect, device number 24
[ 1493.308215][T19366] 9pnet_fd: Insufficient options for proto=fd
[ 1494.318410][   T28] audit: type=1326 audit(1756640550.229:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1518ebe9 code=0x7fc00000
[ 1495.824846][T19396] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1496.448906][T19403] 9pnet_fd: Insufficient options for proto=fd
[ 1497.131909][T19404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3005'.
[ 1498.269382][T19421] syzkaller0: entered promiscuous mode
[ 1498.281284][T19421] syzkaller0: entered allmulticast mode
[ 1498.320751][T19424] 9pnet_fd: Insufficient options for proto=fd
[ 1498.681803][T19436] ref_ctr increment failed for inode: 0x3a1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802c6a8000
[ 1499.060685][T19444] 9pnet_fd: Insufficient options for proto=fd
[ 1499.093068][   T28] audit: type=1326 audit(1756640554.999:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.3.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1502.919097][T19485] 9pnet_fd: Insufficient options for proto=fd
[ 1503.759331][T19494] 9pnet_fd: Insufficient options for proto=fd
[ 1504.398920][   T28] audit: type=1326 audit(1756640560.299:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1504.466167][T19512] ref_ctr increment failed for inode: 0x3c0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888064adb900
[ 1506.642358][T19537] syzkaller0: entered promiscuous mode
[ 1506.648044][T19537] syzkaller0: entered allmulticast mode
[ 1507.278906][T19560] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1507.664291][   T28] audit: type=1326 audit(1756640563.579:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19541 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1509.112386][T19571] ref_ctr increment failed for inode: 0x3da offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801786d580
[ 1511.071516][ T5903] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1511.417268][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1511.429421][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1511.439469][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1511.452924][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1511.462204][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.495910][ T5903] usb 5-1: config 0 descriptor??
[ 1511.582078][   T28] audit: type=1326 audit(1756640567.499:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19608 comm="syz.3.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7fc00000
[ 1516.363763][T19664] syzkaller0: entered promiscuous mode
[ 1516.369372][T19664] syzkaller0: entered allmulticast mode
[ 1516.431640][ T5903] usbhid 5-1:0.0: can't add hid device: -71
[ 1516.437710][ T5903] usbhid: probe of 5-1:0.0 failed with error -71
[ 1516.482649][ T5903] usb 5-1: USB disconnect, device number 11
[ 1518.135153][T19691] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1518.324840][   T28] audit: type=1326 audit(1756640574.229:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19676 comm="syz.4.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1518.348779][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1518.532520][   T28] audit: type=1326 audit(1756640574.239:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19676 comm="syz.4.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1518.742835][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3070'.
[ 1519.704358][T19713] syzkaller0: entered promiscuous mode
[ 1519.709901][T19713] syzkaller0: entered allmulticast mode
[ 1522.396075][   T28] audit: type=1326 audit(1756640578.309:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1525.743584][   T28] audit: type=1326 audit(1756640581.660:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.8.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1527.855496][T19817] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1530.968838][T19849] 9pnet_fd: Insufficient options for proto=fd
[ 1531.637559][   T28] audit: type=1326 audit(1756640587.550:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd198ebe9 code=0x7fc00000
[ 1535.976176][   T28] audit: type=1326 audit(1756640591.880:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19897 comm="syz.8.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7fc00000
[ 1535.998851][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1546.421756][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.428106][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.660276][T20010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1546.686174][T20010] tipc: Resetting bearer <eth:syzkaller0>
[ 1546.734234][T20008] tipc: Disabling bearer <eth:syzkaller0>
[ 1549.391136][ T8349] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1549.581540][ T8349] usb 9-1: Using ep0 maxpacket: 16
[ 1549.603567][ T8349] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1549.636659][ T8349] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1549.670234][ T8349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.701984][ T8349] usb 9-1: Product: syz
[ 1549.717817][ T8349] usb 9-1: Manufacturer: syz
[ 1549.732170][ T8349] usb 9-1: SerialNumber: syz
[ 1549.758701][ T8349] usb 9-1: config 0 descriptor??
[ 1549.804715][ T8349] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1549.838555][ T8349] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1550.182157][T20053] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1550.462609][ T8349] usb 9-1: USB disconnect, device number 19
[ 1559.860507][T20180] 9pnet_fd: Insufficient options for proto=fd
[ 1564.091405][T20226] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1564.844097][T20242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1564.866024][T20242] syzkaller0: entered promiscuous mode
[ 1564.885817][T20242] syzkaller0: entered allmulticast mode
[ 1564.940755][T20242] tipc: Resetting bearer <eth:syzkaller0>
[ 1564.957531][T20241] tipc: Resetting bearer <eth:syzkaller0>
[ 1565.264643][T20241] tipc: Disabling bearer <eth:syzkaller0>
[ 1565.556914][T20254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3187'.
[ 1568.979079][T20306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1568.992345][T20306] syzkaller0: entered promiscuous mode
[ 1569.014595][T20306] syzkaller0: entered allmulticast mode
[ 1569.054932][T20306] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.091327][T20304] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.183728][T20304] tipc: Disabling bearer <eth:syzkaller0>
[ 1569.612157][ T5855] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1569.821401][ T5855] usb 9-1: Using ep0 maxpacket: 16
[ 1569.837021][ T5855] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1569.976861][ T5855] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1569.992569][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.000815][ T5855] usb 9-1: Product: syz
[ 1570.005665][ T5855] usb 9-1: Manufacturer: syz
[ 1570.010387][ T5855] usb 9-1: SerialNumber: syz
[ 1570.041959][ T5855] usb 9-1: config 0 descriptor??
[ 1570.104646][ T5855] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1570.120095][ T5855] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1570.476820][T20310] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1570.661940][ T5855] usb 9-1: USB disconnect, device number 20
[ 1570.911133][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1571.293952][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1571.305152][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1571.318676][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1571.327881][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.621376][    T9] usb 3-1: usb_control_msg returned -32
[ 1571.851958][    T9] usbtmc 3-1:16.0: can't read capabilities
[ 1573.571514][    T8] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1573.608666][T20378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1573.617849][T20378] syzkaller0: entered promiscuous mode
[ 1573.629387][T20378] syzkaller0: entered allmulticast mode
[ 1573.665362][T20378] tipc: Resetting bearer <eth:syzkaller0>
[ 1573.689719][T10653] usb 3-1: USB disconnect, device number 13
[ 1573.702727][T20376] tipc: Resetting bearer <eth:syzkaller0>
[ 1573.761152][    T8] usb 9-1: Using ep0 maxpacket: 16
[ 1573.779055][    T8] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1573.823417][    T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1573.851329][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.865934][T20376] tipc: Disabling bearer <eth:syzkaller0>
[ 1573.878900][    T8] usb 9-1: Product: syz
[ 1573.895488][    T8] usb 9-1: Manufacturer: syz
[ 1573.910407][    T8] usb 9-1: SerialNumber: syz
[ 1573.924651][    T8] usb 9-1: config 0 descriptor??
[ 1573.958010][    T8] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1573.975968][    T8] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1574.952128][T20399] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1575.181719][ T5855] usb 9-1: USB disconnect, device number 21
[ 1579.715552][T20467] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1579.938736][T20480] overlayfs: failed to resolve './file1/file0': -2
[ 1579.971226][T15479] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1580.225290][T15479] usb 9-1: Using ep0 maxpacket: 16
[ 1580.357385][T15479] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1580.476672][T15479] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1580.531209][T15479] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.539365][T15479] usb 9-1: Product: syz
[ 1580.671549][T15479] usb 9-1: Manufacturer: syz
[ 1580.676232][T15479] usb 9-1: SerialNumber: syz
[ 1580.722629][T15479] usb 9-1: config 0 descriptor??
[ 1580.864362][T15479] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1581.827969][T15479] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1581.848854][T20491] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1582.232927][T20499] netlink: zone id is out of range
[ 1583.521431][ T5855] usb 9-1: USB disconnect, device number 22
[ 1584.876877][T20535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1584.902110][T20535] syzkaller0: entered promiscuous mode
[ 1584.907751][T20535] syzkaller0: entered allmulticast mode
[ 1584.976676][T20535] tipc: Resetting bearer <eth:syzkaller0>
[ 1585.021304][T20534] tipc: Resetting bearer <eth:syzkaller0>
[ 1585.102265][T20534] tipc: Disabling bearer <eth:syzkaller0>
[ 1585.891318][ T5886] tipc: Node number set to 1131005940
[ 1587.301284][ T5855] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1587.361280][ T5886] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[ 1587.501958][ T5855] usb 9-1: Using ep0 maxpacket: 16
[ 1587.522834][ T5855] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1587.544966][ T5855] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1587.559875][ T5886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1587.572790][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.591465][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1587.618083][ T5855] usb 9-1: Product: syz
[ 1587.634564][ T5855] usb 9-1: Manufacturer: syz
[ 1587.639552][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1587.648973][ T5855] usb 9-1: SerialNumber: syz
[ 1587.672116][ T5855] usb 9-1: config 0 descriptor??
[ 1587.687491][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.700153][ T5855] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1587.717015][ T5855] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1587.961743][T20579] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1588.264707][ T5886] usb 4-1: usb_control_msg returned -32
[ 1588.271446][ T5886] usbtmc 4-1:16.0: can't read capabilities
[ 1588.536609][T20562] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1588.651791][T10653] usb 9-1: USB disconnect, device number 23
[ 1589.470397][T20601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1589.479194][T20601] syzkaller0: entered promiscuous mode
[ 1589.492019][T20601] syzkaller0: entered allmulticast mode
[ 1589.526029][T20601] tipc: Resetting bearer <eth:syzkaller0>
[ 1589.539426][T20600] tipc: Resetting bearer <eth:syzkaller0>
[ 1589.712168][T20600] tipc: Disabling bearer <eth:syzkaller0>
[ 1591.838813][ T5855] usb 4-1: USB disconnect, device number 25
[ 1592.415249][T20622] netlink: zone id is out of range
[ 1593.661139][ T5886] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1593.871143][ T5886] usb 4-1: Using ep0 maxpacket: 16
[ 1593.887595][ T5886] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1593.913385][ T5886] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1593.925949][T20647] Bluetooth: MGMT ver 1.22
[ 1593.930709][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.956015][ T5886] usb 4-1: Product: syz
[ 1593.969586][ T5886] usb 4-1: Manufacturer: syz
[ 1593.981773][ T5886] usb 4-1: SerialNumber: syz
[ 1594.012973][ T5886] usb 4-1: config 0 descriptor??
[ 1594.033887][ T5886] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1594.059988][ T5886] usb 4-1: Detected FT232R
[ 1594.247430][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1594.535879][ T5886] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1594.706387][ T5886] usb 4-1: USB disconnect, device number 26
[ 1594.829285][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1594.863462][ T5886] ftdi_sio 4-1:0.0: device disconnected
[ 1596.751243][ T5788] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1596.933790][T20686] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1597.038117][ T5788] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1597.048249][ T5788] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1597.238365][ T5788] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1597.251392][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1597.620274][ T5788] usb 5-1: usb_control_msg returned -32
[ 1597.641217][ T5788] usbtmc 5-1:16.0: can't read capabilities
[ 1599.549267][ T8349] usb 5-1: USB disconnect, device number 12
[ 1600.480052][T20705] netlink: zone id is out of range
[ 1600.841156][ T8349] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1601.056734][ T8349] usb 3-1: Using ep0 maxpacket: 16
[ 1601.381613][ T8349] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1601.575916][ T8349] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1601.811329][ T8349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1601.839845][ T8349] usb 3-1: Product: syz
[ 1601.864925][ T8349] usb 3-1: Manufacturer: syz
[ 1601.869612][ T8349] usb 3-1: SerialNumber: syz
[ 1601.969047][ T8349] usb 3-1: config 0 descriptor??
[ 1601.990373][ T8349] appledisplay 3-1:0.0: Could not find int-in endpoint
[ 1602.022296][ T8349] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1602.454470][T20738] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock
[ 1603.205864][ T5786] usb 3-1: USB disconnect, device number 14
[ 1603.741254][T11149] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1603.993715][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1604.022391][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1604.084120][T11149] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1604.110342][T11149] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1604.119607][T11149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.137046][T11149] usb 4-1: config 0 descriptor??
[ 1604.621249][T11149] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1604.629494][T11149] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1604.637579][T11149] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1604.646681][T11149] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1604.654501][T11149] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1604.673173][T11149] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving
[ 1604.805796][T11149] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1605.145957][T20771] overlayfs: failed to resolve './file1/file0': -2
[ 1605.445587][T20786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1605.455887][T20786] syzkaller0: entered promiscuous mode
[ 1605.465352][T20786] syzkaller0: entered allmulticast mode
[ 1605.536122][T20786] tipc: Resetting bearer <eth:syzkaller0>
[ 1605.565643][T20784] tipc: Resetting bearer <eth:syzkaller0>
[ 1605.658730][T20784] tipc: Disabling bearer <eth:syzkaller0>
[ 1606.082645][ T5786] usb 4-1: reset high-speed USB device number 27 using dummy_hcd
[ 1606.144549][T11149] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1606.253482][ T5786] usb 4-1: device descriptor read/64, error -32
[ 1606.331226][ T5886] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1606.355919][T11149] usb 5-1: Using ep0 maxpacket: 16
[ 1606.371964][T11149] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1606.389731][T11149] usb 5-1: config 0 has no interface number 0
[ 1606.405416][T11149] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1606.416616][T11149] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1606.428307][T11149] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1606.437972][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1606.464978][T11149] usb 5-1: config 0 descriptor??
[ 1606.521601][ T5886] usb 9-1: Using ep0 maxpacket: 16
[ 1606.529595][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1606.543235][ T5786] usb 4-1: reset high-speed USB device number 27 using dummy_hcd
[ 1606.545771][ T5886] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1606.563121][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.574424][ T5886] usb 9-1: Product: syz
[ 1606.578738][ T5886] usb 9-1: Manufacturer: syz
[ 1606.588430][ T5886] usb 9-1: SerialNumber: syz
[ 1606.598437][ T5886] usb 9-1: config 0 descriptor??
[ 1606.613379][ T5886] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1606.628510][ T5886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1606.882294][T20823] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1607.092869][T11149] uclogic 0003:28BD:0071.0023: pen parameters not found
[ 1607.099210][ T5788] usb 9-1: USB disconnect, device number 24
[ 1607.099869][T11149] uclogic 0003:28BD:0071.0023: interface is invalid, ignoring
[ 1607.352827][T11608] usb 5-1: USB disconnect, device number 13
[ 1607.834771][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.841640][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.616167][T20846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1608.624599][T20846] syzkaller0: entered promiscuous mode
[ 1608.630126][T20846] syzkaller0: entered allmulticast mode
[ 1608.650336][    T8] usb 4-1: USB disconnect, device number 27
[ 1609.194192][T20852] tipc: Resetting bearer <eth:syzkaller0>
[ 1609.383642][T20845] tipc: Resetting bearer <eth:syzkaller0>
[ 1609.657747][T20845] tipc: Disabling bearer <eth:syzkaller0>
[ 1610.204076][T20869] comedi comedi0: pcm3724: I/O port conflict (0x8,16)
[ 1616.192365][T20898] syz_tun: entered allmulticast mode
[ 1616.455866][T20897] syz_tun: left allmulticast mode
[ 1616.848294][T20916] comedi comedi0: pcm3724: I/O port conflict (0x8,16)
[ 1617.881255][ T5903] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1618.096798][ T5903] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1618.115757][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.127168][ T5903] usb 5-1: Product: syz
[ 1618.131888][ T5903] usb 5-1: Manufacturer: syz
[ 1618.144116][ T5903] usb 5-1: SerialNumber: syz
[ 1618.378211][T20950] 9pnet_fd: Insufficient options for proto=fd
[ 1619.654918][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[ 1619.731298][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1619.742154][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1619.773853][ T5903] lan78xx: probe of 5-1:1.0 failed with error -32
[ 1619.911172][ T5855] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1620.123168][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1620.151122][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1620.171111][ T5855] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1620.191103][ T5855] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1620.210634][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.242904][ T5855] usb 9-1: config 0 descriptor??
[ 1620.371597][ T5903] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1620.539606][T20984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1620.548602][T20984] syzkaller0: entered promiscuous mode
[ 1620.583523][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1620.602622][T20984] syzkaller0: entered allmulticast mode
[ 1620.613275][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1620.636635][T18356] usb 5-1: USB disconnect, device number 14
[ 1620.673366][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1620.697461][ T5855] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[ 1620.711939][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.727675][T20987] tipc: Resetting bearer <eth:syzkaller0>
[ 1620.749010][ T5855] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[ 1620.782235][ T5855] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[ 1620.790946][T20983] tipc: Resetting bearer <eth:syzkaller0>
[ 1620.794894][ T5855] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[ 1620.843972][ T5855] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[ 1620.853248][ T5855] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving
[ 1620.881939][T20983] tipc: Disabling bearer <eth:syzkaller0>
[ 1620.900555][ T5855] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1620.984645][ T5903] usb 4-1: usb_control_msg returned -32
[ 1621.000587][ T5903] usbtmc 4-1:16.0: can't read capabilities
[ 1622.153184][T11608] usb 9-1: reset high-speed USB device number 25 using dummy_hcd
[ 1622.331948][T11608] usb 9-1: device descriptor read/64, error -32
[ 1622.768519][T11608] usb 9-1: reset high-speed USB device number 25 using dummy_hcd
[ 1622.965425][T21020] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1623.140295][ T5855] usb 4-1: USB disconnect, device number 28
[ 1623.253840][T21028] syz_tun: entered allmulticast mode
[ 1623.297853][T21028] pimreg: entered allmulticast mode
[ 1623.412832][T21027] syz_tun: left allmulticast mode
[ 1623.903669][T21043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1623.951940][T21043] syzkaller0: entered promiscuous mode
[ 1623.967822][T21043] syzkaller0: entered allmulticast mode
[ 1624.065073][T21043] tipc: Resetting bearer <eth:syzkaller0>
[ 1624.087210][T21042] tipc: Resetting bearer <eth:syzkaller0>
[ 1624.112483][ T5788] usb 9-1: USB disconnect, device number 25
[ 1624.165484][T21042] tipc: Disabling bearer <eth:syzkaller0>
[ 1624.279476][T21056] 9pnet_fd: Insufficient options for proto=fd
[ 1626.541174][ T5903] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 1626.733092][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1626.752112][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.799036][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1626.829242][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.078221][ T5903] usb 3-1: usb_control_msg returned -32
[ 1627.094238][ T5903] usbtmc 3-1:16.0: can't read capabilities
[ 1627.659064][ T5903] usb 3-1: USB disconnect, device number 15
[ 1628.666157][T21109] syz_tun: entered allmulticast mode
[ 1628.699860][T21109] pimreg: entered allmulticast mode
[ 1628.731372][T18356] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1628.892829][T21108] syz_tun: left allmulticast mode
[ 1629.038620][T21114] fuse: Bad value for 'fd'
[ 1629.736073][T18356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1629.769858][T18356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1629.785477][T18356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1629.838212][T18356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1629.848358][T21117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1630.004823][T18356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.032411][T21121] syzkaller0: entered promiscuous mode
[ 1630.034456][T18356] usb 3-1: config 0 descriptor??
[ 1630.037957][T21121] syzkaller0: entered allmulticast mode
[ 1630.258314][T21121] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.361841][T21116] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.866723][T21116] tipc: Disabling bearer <eth:syzkaller0>
[ 1631.096541][T18356] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1631.136496][T18356] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1631.156620][T18356] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1631.181650][T18356] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1631.204040][T18356] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[ 1631.232173][T18356] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[ 1631.263701][T18356] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1632.649629][T21150] 9pnet_fd: Insufficient options for proto=fd
[ 1632.691351][ T5786] usb 3-1: reset high-speed USB device number 16 using dummy_hcd
[ 1632.865991][ T5786] usb 3-1: device descriptor read/64, error -32
[ 1633.071340][T18356] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1633.151172][ T5786] usb 3-1: reset high-speed USB device number 16 using dummy_hcd
[ 1633.291977][T18356] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1633.328677][T18356] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1633.373975][T18356] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1633.399267][T18356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.652431][T18356] usb 4-1: usb_control_msg returned -32
[ 1633.658103][T18356] usbtmc 4-1:16.0: can't read capabilities
[ 1634.965309][ T5788] usb 3-1: USB disconnect, device number 16
[ 1635.650556][T21188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1635.671353][T21188] syzkaller0: entered promiscuous mode
[ 1635.702306][T21188] syzkaller0: entered allmulticast mode
[ 1635.844450][T21190] tipc: Resetting bearer <eth:syzkaller0>
[ 1635.934705][ T5788] usb 4-1: USB disconnect, device number 29
[ 1635.963817][T21187] tipc: Resetting bearer <eth:syzkaller0>
[ 1637.359425][T21187] tipc: Disabling bearer <eth:syzkaller0>
[ 1643.285927][T21252] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1644.543250][T21262] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1645.886601][T21285] pimreg: entered allmulticast mode
[ 1650.086589][T21318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1650.163275][T21318] syzkaller0: entered promiscuous mode
[ 1650.168878][T21318] syzkaller0: entered allmulticast mode
[ 1650.179626][   T28] audit: type=1326 audit(1756640706.090:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.225837][   T28] audit: type=1326 audit(1756640706.120:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.279239][   T28] audit: type=1326 audit(1756640706.120:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.307772][T21311] pim6reg: entered allmulticast mode
[ 1650.314282][   T28] audit: type=1326 audit(1756640706.130:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.397954][   T28] audit: type=1326 audit(1756640706.130:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.437436][T21318] tipc: Resetting bearer <eth:syzkaller0>
[ 1650.456427][   T28] audit: type=1326 audit(1756640706.130:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.485224][T21317] tipc: Resetting bearer <eth:syzkaller0>
[ 1650.793953][   T28] audit: type=1326 audit(1756640706.130:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.825575][   T28] audit: type=1326 audit(1756640706.130:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.849309][T21317] tipc: Disabling bearer <eth:syzkaller0>
[ 1650.884544][   T28] audit: type=1326 audit(1756640706.140:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1650.914749][   T28] audit: type=1326 audit(1756640706.140:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.8.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ec18ebe9 code=0x7ffc0000
[ 1654.011747][T21381] 9pnet_fd: Insufficient options for proto=fd
[ 1655.244318][   T28] kauditd_printk_skb: 16 callbacks suppressed
[ 1655.244336][   T28] audit: type=1326 audit(1756640711.160:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1655.451247][   T28] audit: type=1326 audit(1756640711.160:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1655.529812][   T28] audit: type=1326 audit(1756640711.160:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1655.636632][T21385] pim6reg: entered allmulticast mode
[ 1655.651082][   T28] audit: type=1326 audit(1756640711.550:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1655.908271][   T28] audit: type=1326 audit(1756640711.610:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1656.057250][   T28] audit: type=1326 audit(1756640711.610:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6f8ebe9 code=0x7ffc0000
[ 1661.102137][T21486] 9pnet_fd: Insufficient options for proto=fd
[ 1661.514708][T21495] pimreg: left allmulticast mode
[ 1666.865407][T21568] netlink: 'syz.4.3445': attribute type 4 has an invalid length.
[ 1666.881110][T21568] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3445'.
[ 1666.921376][T21568] : renamed from bond0 (while UP)
[ 1667.383347][T21580] 9pnet_fd: Insufficient options for proto=fd
[ 1669.221631][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.228186][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.525735][T21611] syz_tun: entered allmulticast mode
[ 1669.555173][T21610] syz_tun: left allmulticast mode
[ 1671.241183][ T5855] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1672.261269][ T5855] usb 9-1: Using ep0 maxpacket: 32
[ 1672.286893][ T5855] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1672.341611][ T5855] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1672.350760][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1672.396834][ T5855] usb 9-1: Product: syz
[ 1672.404677][ T5855] usb 9-1: Manufacturer: syz
[ 1672.409627][ T5855] usb 9-1: SerialNumber: syz
[ 1672.435704][ T5855] usb 9-1: config 0 descriptor??
[ 1672.441690][T21628] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1672.590023][T21655] syz_tun: entered allmulticast mode
[ 1672.621848][T21654] syz_tun: left allmulticast mode
[ 1672.834484][ T5855] usb 9-1: USB disconnect, device number 26
[ 1674.370940][T21676] 9pnet_fd: Insufficient options for proto=fd
[ 1675.986143][T21698] syz_tun: entered allmulticast mode
[ 1675.996091][T21697] syz_tun: left allmulticast mode
[ 1678.579483][T21738] 9pnet_fd: Insufficient options for proto=fd
[ 1682.156833][T21787] syz_tun: entered allmulticast mode
[ 1682.203332][T21785] syz_tun: left allmulticast mode
[ 1683.426316][   T27] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1683.631094][   T27] usb 4-1: Using ep0 maxpacket: 16
[ 1683.638739][   T27] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1683.702750][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1683.731049][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1683.739135][   T27] usb 4-1: Product: syz
[ 1683.761353][   T27] usb 4-1: Manufacturer: syz
[ 1683.766033][   T27] usb 4-1: SerialNumber: syz
[ 1683.798974][   T27] usb 4-1: config 0 descriptor??
[ 1683.833105][   T27] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1683.862012][   T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1684.226400][T21825] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1684.785547][T11608] usb 4-1: USB disconnect, device number 30
[ 1693.689231][T21935] syz_tun: entered allmulticast mode
[ 1693.715487][T21935] pimreg: entered allmulticast mode
[ 1694.357550][T21934] syz_tun: left allmulticast mode
[ 1696.491295][T11608] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1696.701156][T11608] usb 5-1: Using ep0 maxpacket: 16
[ 1696.711328][T11608] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1696.733841][T11608] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1696.749000][T11608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1696.759487][T11608] usb 5-1: Product: syz
[ 1696.764659][T11608] usb 5-1: Manufacturer: syz
[ 1696.769725][T11608] usb 5-1: SerialNumber: syz
[ 1696.785553][T11608] usb 5-1: config 0 descriptor??
[ 1696.865019][T11608] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1696.873747][T11608] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1697.834683][T21962] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1697.880898][T21980] syz_tun: entered allmulticast mode
[ 1697.903675][T21979] syz_tun: left allmulticast mode
[ 1698.032445][T11608] usb 5-1: USB disconnect, device number 15
[ 1700.091239][T11149] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1700.293954][T11149] usb 5-1: Using ep0 maxpacket: 32
[ 1700.337634][T11149] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1700.366544][T11149] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1700.385611][T11149] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1700.411132][T11149] usb 5-1: Product: syz
[ 1700.431309][T11149] usb 5-1: Manufacturer: syz
[ 1700.441397][T11149] usb 5-1: SerialNumber: syz
[ 1700.455116][T11149] usb 5-1: config 0 descriptor??
[ 1700.466158][T22002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1700.972581][T22019] pimreg: entered allmulticast mode
[ 1700.998645][ T5903] usb 5-1: USB disconnect, device number 16
[ 1701.741161][ T5903] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1702.111308][ T5903] usb 9-1: Using ep0 maxpacket: 16
[ 1702.133577][ T5903] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1702.166957][ T5903] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1702.176944][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.195395][ T5903] usb 9-1: Product: syz
[ 1702.200059][ T5903] usb 9-1: Manufacturer: syz
[ 1702.225742][ T5903] usb 9-1: SerialNumber: syz
[ 1702.269250][ T5903] usb 9-1: config 0 descriptor??
[ 1702.278238][ T5903] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1702.296846][ T5903] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1702.889035][T22028] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1703.426243][ T5886] usb 9-1: USB disconnect, device number 27
[ 1707.941295][ T5788] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1708.131095][ T5788] usb 4-1: Using ep0 maxpacket: 16
[ 1708.138734][ T5788] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1708.153556][ T5788] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1708.173283][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.197705][ T5788] usb 4-1: Product: syz
[ 1708.208888][ T5788] usb 4-1: Manufacturer: syz
[ 1708.245636][ T5788] usb 4-1: SerialNumber: syz
[ 1708.282190][ T5788] usb 4-1: config 0 descriptor??
[ 1708.308836][ T5788] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1708.336174][ T5788] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1709.231184][T22101] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1709.570909][T18356] usb 4-1: USB disconnect, device number 31
[ 1710.693156][T22133] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1711.384041][T22157] syz_tun: entered allmulticast mode
[ 1715.301036][ T8349] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1715.701051][ T8349] usb 5-1: Using ep0 maxpacket: 16
[ 1715.754701][ T8349] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1715.807134][ T8349] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1715.820685][ T8349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1715.849252][ T8349] usb 5-1: Product: syz
[ 1715.868931][ T8349] usb 5-1: Manufacturer: syz
[ 1715.874875][ T8349] usb 5-1: SerialNumber: syz
[ 1715.925110][ T8349] usb 5-1: config 0 descriptor??
[ 1715.963104][ T8349] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1715.995313][ T8349] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1716.339559][T22195] syz_tun: entered allmulticast mode
[ 1716.390177][T22196] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1716.641889][T22200] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1716.849795][T15479] usb 5-1: USB disconnect, device number 17
[ 1720.962398][T18524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1720.974721][T18524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1720.983527][T18524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1721.026863][T18524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1721.036225][T18524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1721.044999][T18524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1721.070226][T14899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1721.126795][T14899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1721.135089][T14899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1721.143882][T14899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1721.153547][T14899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1721.161441][T14899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1722.239102][T22259] chnl_net:caif_netlink_parms(): no params data found
[ 1723.191489][T18524] Bluetooth: hci4: command tx timeout
[ 1723.985446][T22259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1724.331293][T22259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1724.501382][T22259] bridge_slave_0: entered allmulticast mode
[ 1724.509001][T22259] bridge_slave_0: entered promiscuous mode
[ 1724.533568][T22259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1724.540861][T22259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.548381][T22259] bridge_slave_1: entered allmulticast mode
[ 1724.579013][T22259] bridge_slave_1: entered promiscuous mode
[ 1724.730624][T22259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1724.773286][T22259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1725.206325][ T7943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1725.281296][T18524] Bluetooth: hci4: command tx timeout
[ 1725.309890][T22259] team0: Port device team_slave_0 added
[ 1725.326759][T22259] team0: Port device team_slave_1 added
[ 1725.421851][T22259] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1725.446619][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1725.521558][T22259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1725.579165][ T7943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1725.606944][T22259] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1725.614289][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1725.650548][T22259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1725.668091][T15479] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1725.740064][ T7943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.054247][T15479] usb 5-1: Using ep0 maxpacket: 32
[ 1726.087547][T15479] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1726.691423][T15479] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1726.715519][T15479] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1726.738690][T15479] usb 5-1: Product: syz
[ 1726.743805][ T7943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.759335][T15479] usb 5-1: Manufacturer: syz
[ 1726.764484][T15479] usb 5-1: SerialNumber: syz
[ 1726.784650][T15479] usb 5-1: config 0 descriptor??
[ 1726.790825][T22335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1726.805842][T22259] hsr_slave_0: entered promiscuous mode
[ 1726.820840][T22259] hsr_slave_1: entered promiscuous mode
[ 1726.831399][T22259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1726.839171][T22259] Cannot create hsr debugfs directory
[ 1727.176145][T14047] usb 5-1: USB disconnect, device number 18
[ 1727.362590][T18524] Bluetooth: hci4: command tx timeout
[ 1727.411781][T22367] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1728.761799][ T7943] tipc: Left network mode
[ 1729.461455][T18524] Bluetooth: hci4: command tx timeout
[ 1730.641776][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.648356][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1736.113777][ T7943] hsr_slave_0: left promiscuous mode
[ 1736.151045][ T7943] hsr_slave_1: left promiscuous mode
[ 1736.930717][ T7943] bridge_slave_1: left allmulticast mode
[ 1737.061483][ T7943] bridge_slave_1: left promiscuous mode
[ 1737.068676][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1737.097234][ T7943] bridge_slave_0: left allmulticast mode
[ 1737.114240][ T7943] bridge_slave_0: left promiscuous mode
[ 1737.123617][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1737.364991][ T7943] veth1_macvtap: left promiscuous mode
[ 1737.377908][ T7943] veth0_macvtap: left promiscuous mode
[ 1737.389678][ T7943] veth1_vlan: left promiscuous mode
[ 1737.401735][ T7943] veth0_vlan: left promiscuous mode
[ 1738.154631][ T7943] pimreg (unregistering): left allmulticast mode
[ 1738.816929][ T7943] team0 (unregistering): Port device team_slave_1 removed
[ 1738.885251][ T7943] team0 (unregistering): Port device team_slave_0 removed
[ 1738.955931][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1739.023485][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1739.726862][ T7943] bond0 (unregistering): Released all slaves
[ 1739.813506][T22259] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1739.921645][T22497] syz_tun: entered allmulticast mode
[ 1739.928279][T22497] syz_tun: left allmulticast mode
[ 1740.021397][T22259] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1740.054672][T22259] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1740.102059][T22259] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1741.239822][T22259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1741.338777][T22259] 8021q: adding VLAN 0 to HW filter on device team0
[ 1741.592448][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1741.599831][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1741.658997][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1741.666306][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1741.698979][ T7943] IPVS: stop unused estimator thread 0...
[ 1741.971092][ T5788] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1742.249832][ T5788] usb 4-1: Using ep0 maxpacket: 32
[ 1742.331122][ T5788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1742.570108][ T5788] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1742.589417][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1743.189238][ T5788] usb 4-1: Product: syz
[ 1743.231360][ T5788] usb 4-1: Manufacturer: syz
[ 1743.236035][ T5788] usb 4-1: SerialNumber: syz
[ 1743.394262][ T5788] usb 4-1: config 0 descriptor??
[ 1743.441454][T22539] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1743.568032][T22259] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1744.349775][ T5788] usb 4-1: USB disconnect, device number 32
[ 1746.655977][T22259] veth0_vlan: entered promiscuous mode
[ 1746.758200][T22259] veth1_vlan: entered promiscuous mode
[ 1746.984460][T22259] veth0_macvtap: entered promiscuous mode
[ 1747.024813][T22259] veth1_macvtap: entered promiscuous mode
[ 1747.083744][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1747.125835][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1747.148794][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1747.167084][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1747.193975][T22259] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1747.290623][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1747.373187][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1747.397245][T22616] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1747.434866][T22259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1747.476050][T22259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1747.510228][T22259] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1747.604149][T22259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1747.645862][T22259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1747.721171][T22259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1747.759517][T22259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1748.124961][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1748.207605][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1748.405480][ T7943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1748.454715][ T7943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1748.621180][T11608] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1749.011189][T11608] usb 9-1: Using ep0 maxpacket: 32
[ 1749.044896][T11608] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1749.336813][T11608] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1749.558359][T11608] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1749.655209][T11608] usb 9-1: Product: syz
[ 1749.705725][T11608] usb 9-1: Manufacturer: syz
[ 1749.710397][T11608] usb 9-1: SerialNumber: syz
[ 1749.738772][T11608] usb 9-1: config 0 descriptor??
[ 1749.846055][T22634] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1750.233229][T11608] usb 9-1: USB disconnect, device number 28
[ 1752.837095][T22702] netlink: 'syz.5.3674': attribute type 1 has an invalid length.
[ 1752.845349][T22702] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3674'.
[ 1753.472307][T22715] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1753.622260][T22719] syz_tun: entered allmulticast mode
[ 1753.640848][T22718] syz_tun: left allmulticast mode
[ 1753.751739][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1754.634489][ T5886] usb 6-1: Using ep0 maxpacket: 16
[ 1754.648900][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1754.676367][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1754.693024][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.717869][ T5886] usb 6-1: Product: syz
[ 1754.740030][ T5886] usb 6-1: Manufacturer: syz
[ 1754.751035][ T5886] usb 6-1: SerialNumber: syz
[ 1755.026285][ T5886] usb 6-1: config 0 descriptor??
[ 1755.050567][ T5886] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1755.080285][ T5886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1755.301090][ T5855] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1755.472385][T22743] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock
[ 1755.629011][ T5855] usb 4-1: Using ep0 maxpacket: 32
[ 1755.664142][ T5855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1755.679532][T14047] usb 6-1: USB disconnect, device number 2
[ 1755.731828][ T5855] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1755.744969][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1755.758441][ T5855] usb 4-1: Product: syz
[ 1755.776179][ T5855] usb 4-1: Manufacturer: syz
[ 1755.786304][ T5855] usb 4-1: SerialNumber: syz
[ 1755.803704][ T5855] usb 4-1: config 0 descriptor??
[ 1755.824153][T22735] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1756.182958][T11608] usb 4-1: USB disconnect, device number 33
[ 1758.451521][T22807] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1758.961082][ T5788] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1759.161014][ T5788] usb 4-1: Using ep0 maxpacket: 16
[ 1759.199394][ T5788] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1759.233540][ T5788] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1759.261047][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.281012][ T5788] usb 4-1: Product: syz
[ 1759.285750][ T5788] usb 4-1: Manufacturer: syz
[ 1759.312657][ T5788] usb 4-1: SerialNumber: syz
[ 1759.340148][ T5788] usb 4-1: config 0 descriptor??
[ 1759.369805][ T5788] appledisplay 4-1:0.0: Could not find int-in endpoint
[ 1759.404473][ T5788] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1759.850068][T22830] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock
[ 1760.127591][ T5788] usb 4-1: USB disconnect, device number 34
[ 1760.861075][ T5788] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1761.161430][ T5788] usb 5-1: Using ep0 maxpacket: 32
[ 1761.193240][ T5788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1761.237037][ T5788] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1761.263663][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1761.290049][ T5788] usb 5-1: Product: syz
[ 1761.300523][ T5788] usb 5-1: Manufacturer: syz
[ 1761.310311][ T5788] usb 5-1: SerialNumber: syz
[ 1761.341814][ T5788] usb 5-1: config 0 descriptor??
[ 1761.353386][T22844] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1762.187054][ T5788] usb 5-1: USB disconnect, device number 19
[ 1764.302852][T22909] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1764.748424][T22917] syz_tun: entered allmulticast mode
[ 1764.760681][T22916] syz_tun: left allmulticast mode
[ 1766.162348][T22942] 9pnet_fd: Insufficient options for proto=fd
[ 1773.464757][T22981] 9pnet_fd: Insufficient options for proto=fd
[ 1777.323174][T23007] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1780.694089][T23042] 9pnet_fd: Insufficient options for proto=fd
[ 1783.911639][T23080] syz_tun: entered allmulticast mode
[ 1784.346114][T23086] 9pnet_fd: Insufficient options for proto=fd
[ 1789.595275][T23144] 9pnet_fd: Insufficient options for proto=fd
[ 1790.513652][T23150] syz_tun: entered allmulticast mode
[ 1790.558282][T23150] pimreg: entered allmulticast mode
[ 1790.621697][T23147] syz_tun: left allmulticast mode
[ 1790.901172][    T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1791.091237][    T8] usb 5-1: Using ep0 maxpacket: 16
[ 1791.120659][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1791.158181][    T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1791.168096][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.191333][    T8] usb 5-1: Product: syz
[ 1791.204190][    T8] usb 5-1: Manufacturer: syz
[ 1791.216128][    T8] usb 5-1: SerialNumber: syz
[ 1791.239671][    T8] usb 5-1: config 0 descriptor??
[ 1791.257524][    T8] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1791.277336][    T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1791.596195][T23185] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1791.885153][T14047] usb 5-1: USB disconnect, device number 20
[ 1792.078612][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.085513][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.637497][T23203] 9pnet_fd: Insufficient options for proto=fd
[ 1795.985979][    T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1796.191687][    T8] usb 5-1: Using ep0 maxpacket: 16
[ 1796.217723][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1796.257427][    T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1796.275642][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.327151][    T8] usb 5-1: Product: syz
[ 1796.371332][T23255] 9pnet_fd: Insufficient options for proto=fd
[ 1796.444235][    T8] usb 5-1: Manufacturer: syz
[ 1797.034321][    T8] usb 5-1: SerialNumber: syz
[ 1797.042716][    T8] usb 5-1: config 0 descriptor??
[ 1797.052970][    T8] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1797.061350][    T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1797.686943][T23241] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[ 1797.789183][    T8] usb 5-1: USB disconnect, device number 21
[ 1800.578265][T23304] 9pnet_fd: Insufficient options for proto=fd
[ 1803.690455][T23351] 9pnet_fd: Insufficient options for proto=fd
[ 1806.371726][T23386] syz_tun: entered allmulticast mode
[ 1806.404898][T23384] syz_tun: left allmulticast mode
[ 1807.291037][T15479] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1807.378210][T23403] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1807.526106][T15479] usb 9-1: Using ep0 maxpacket: 16
[ 1807.547602][T15479] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1807.601157][T15479] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1807.681093][T15479] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1807.829606][T15479] usb 9-1: Product: syz
[ 1807.850975][T15479] usb 9-1: Manufacturer: syz
[ 1807.996467][T15479] usb 9-1: SerialNumber: syz
[ 1808.025177][T15479] usb 9-1: config 0 descriptor??
[ 1808.042972][T15479] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1808.075533][T15479] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1808.320805][T23409] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1808.709209][ T5855] usb 9-1: USB disconnect, device number 29
[ 1815.679914][T23485] input: syz1 as /devices/virtual/input/input24
[ 1815.752019][T23486] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[ 1820.458499][T23557] fuse: Bad value for 'fd'
[ 1821.192354][T23559] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1823.238303][T23603] fuse: Unknown parameter '0x0000000000000008'
[ 1824.421289][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1825.031037][    T8] usb 6-1: Using ep0 maxpacket: 16
[ 1825.039425][    T8] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1825.063949][    T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1825.081070][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.147863][    T8] usb 6-1: Product: syz
[ 1825.155248][    T8] usb 6-1: Manufacturer: syz
[ 1825.185661][    T8] usb 6-1: SerialNumber: syz
[ 1825.201680][    T8] usb 6-1: config 0 descriptor??
[ 1825.224111][    T8] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1825.248076][    T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1826.171597][T23610] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock
[ 1826.371788][    T8] usb 6-1: USB disconnect, device number 3
[ 1828.141185][T23661] fuse: Unknown parameter '0x0000000000000008'
[ 1829.905223][T23674] 9pnet_fd: Insufficient options for proto=fd
[ 1831.041117][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1831.241417][ T5886] usb 6-1: Using ep0 maxpacket: 16
[ 1831.389588][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1831.438125][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1831.461307][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.469679][ T5886] usb 6-1: Product: syz
[ 1831.498664][ T5886] usb 6-1: Manufacturer: syz
[ 1831.531094][ T5886] usb 6-1: SerialNumber: syz
[ 1831.547043][ T5886] usb 6-1: config 0 descriptor??
[ 1831.576708][ T5886] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1831.598956][ T5886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1832.437131][T23706] fuse: Unknown parameter '0x0000000000000008'
[ 1832.697278][T23707] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock
[ 1832.931330][T15479] usb 6-1: USB disconnect, device number 4
[ 1833.411543][T23721] genirq: Flags mismatch irq 5. 00000000 (pcl818) vs. 00000000 (pcl812)
[ 1834.526152][T23729] 9pnet_fd: Insufficient options for proto=fd
[ 1836.705484][T23756] fuse: Unknown parameter '0x0000000000000008'
[ 1837.973866][T23758] syz_tun: entered allmulticast mode
[ 1838.005687][T23757] syz_tun: left allmulticast mode
[ 1838.573512][T23775] 9pnet_fd: Insufficient options for proto=fd
[ 1839.331092][ T5855] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1839.550992][ T5855] usb 6-1: Using ep0 maxpacket: 16
[ 1839.553338][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1839.607495][ T5855] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1839.640074][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1839.668117][ T5855] usb 6-1: Product: syz
[ 1839.679659][ T5855] usb 6-1: Manufacturer: syz
[ 1839.701461][ T5855] usb 6-1: SerialNumber: syz
[ 1839.725960][ T5855] usb 6-1: config 0 descriptor??
[ 1839.760641][ T5855] appledisplay 6-1:0.0: Could not find int-in endpoint
[ 1839.789294][ T5855] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1840.042791][T23797] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock
[ 1840.334427][T23801] fuse: Unknown parameter '0x0000000000000008'
[ 1841.153028][ T5788] usb 6-1: USB disconnect, device number 5
[ 1843.071422][T23823] 9pnet_fd: Insufficient options for proto=fd
[ 1843.787138][T23831] comedi comedi0: rti800: I/O port conflict (0xee,16)
[ 1844.213871][T23833] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1844.469369][T23836] syz_tun: entered allmulticast mode
[ 1844.506653][T23835] syz_tun: left allmulticast mode
[ 1844.786514][T23842] fuse: Unknown parameter '0x0000000000000008'
[ 1845.621101][T18524] Bluetooth: hci4: command 0x0406 tx timeout
[ 1845.881433][    T8] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1846.123080][    T8] usb 9-1: Using ep0 maxpacket: 16
[ 1846.203869][    T8] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[ 1846.520462][T14047] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1846.536603][    T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1846.618925][T23864] 9pnet_fd: Insufficient options for proto=fd
[ 1846.741772][T14047] usb 4-1: Using ep0 maxpacket: 32
[ 1846.837829][T14047] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1847.043937][T14047] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1847.071735][T14047] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1847.192723][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1847.201214][    T8] usb 9-1: Product: syz
[ 1847.205445][    T8] usb 9-1: Manufacturer: syz
[ 1847.210087][    T8] usb 9-1: SerialNumber: syz
[ 1847.211622][T14047] usb 4-1: Product: syz
[ 1847.229925][T14047] usb 4-1: Manufacturer: syz
[ 1847.234904][    T8] usb 9-1: config 0 descriptor??
[ 1847.246110][    T8] appledisplay 9-1:0.0: Could not find int-in endpoint
[ 1847.262472][    T8] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1847.272275][T14047] usb 4-1: SerialNumber: syz
[ 1847.289048][T14047] usb 4-1: config 0 descriptor??
[ 1847.304933][T23844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1847.879332][T23876] 9pnet_fd: Insufficient options for proto=fd
[ 1848.188765][T23877] erofs: (device nbd8): erofs_read_superblock: cannot find valid erofs superblock
[ 1848.492045][ T5886] usb 4-1: USB disconnect, device number 35
[ 1849.025116][ T5886] usb 9-1: USB disconnect, device number 30
[ 1850.725502][T23908] fuse: Unknown parameter 'fd0x0000000000000008'
[ 1852.598035][T23927] 9pnet_fd: Insufficient options for proto=fd
[ 1853.494607][T23824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1853.505924][T23824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1853.520922][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.527913][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.538454][T11535] syz_tun (unregistering): left allmulticast mode
[ 1853.545593][T23824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1853.590498][T23824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1853.605358][T23824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1853.615938][T23824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1853.651251][   T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1853.901269][   T27] usb 6-1: Using ep0 maxpacket: 32
[ 1853.974447][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1854.036789][   T27] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1854.046652][   T27] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1854.057342][   T27] usb 6-1: Product: syz
[ 1854.061984][   T27] usb 6-1: Manufacturer: syz
[ 1854.069412][   T27] usb 6-1: SerialNumber: syz
[ 1854.097552][   T27] usb 6-1: config 0 descriptor??
[ 1854.134436][T23937] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1854.441955][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1854.755271][T23954] fuse: Unknown parameter 'fd0x0000000000000008'
[ 1855.308042][    T8] usb 6-1: USB disconnect, device number 6
[ 1855.421878][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1855.627056][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1855.751609][T23824] Bluetooth: hci0: command tx timeout
[ 1855.803598][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1856.337201][T23942] chnl_net:caif_netlink_parms(): no params data found
[ 1856.733517][T23980] 9pnet_fd: Insufficient options for proto=fd
[ 1857.454002][   T11] tipc: Left network mode
[ 1857.614135][T23942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1857.627971][T23942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1857.640807][T23942] bridge_slave_0: entered allmulticast mode
[ 1857.658200][T23942] bridge_slave_0: entered promiscuous mode
[ 1857.717985][T23987] syz_tun: entered allmulticast mode
[ 1857.724893][T23942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1857.739559][T23942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1857.748574][T23942] bridge_slave_1: entered allmulticast mode
[ 1857.757585][T23942] bridge_slave_1: entered promiscuous mode
[ 1857.788066][T23983] syz_tun: left allmulticast mode
[ 1857.841117][T23824] Bluetooth: hci0: command tx timeout
[ 1857.841322][    T8] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[ 1857.877144][T23942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1857.920062][T23942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1858.158454][T23942] team0: Port device team_slave_0 added
[ 1858.168641][T23942] team0: Port device team_slave_1 added
[ 1858.248463][T23999] fuse: Unknown parameter 'fd0x0000000000000008'
[ 1858.916410][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1858.941731][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1858.960669][T23942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1858.970985][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1858.980089][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.991288][T23942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1859.049014][T23942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1859.921066][T23824] Bluetooth: hci0: command tx timeout
[ 1860.131574][    T8] usb 4-1: usb_control_msg returned -32
[ 1860.222731][    T8] usbtmc 4-1:16.0: can't read capabilities
[ 1860.435494][T23942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1860.606568][T23942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1860.671437][T23942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1860.894894][T23942] hsr_slave_0: entered promiscuous mode
[ 1860.912848][T23942] hsr_slave_1: entered promiscuous mode
[ 1861.375812][T24032] 9pnet_fd: Insufficient options for proto=fd
[ 1861.987757][T11608] usb 4-1: USB disconnect, device number 36
[ 1862.002047][T23824] Bluetooth: hci0: command tx timeout
[ 1862.105447][T24037] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[ 1862.117318][T24037] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[ 1862.125787][T24037] CPU: 1 PID: 24037 Comm: syz.3.3954 Not tainted syzkaller #0
[ 1862.133286][T24037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1862.143532][T24037] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1862.149311][T24037] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 0b e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 0b e0 f9 4d 8b 24 24 48 83 c3
[ 1862.168962][T24037] RSP: 0018:ffffc90004f9fa80 EFLAGS: 00010206
[ 1862.175083][T24037] RAX: 0000000000000005 RBX: ffff888078354800 RCX: 0000000000080000
[ 1862.183183][T24037] RDX: ffffc9001231a000 RSI: 00000000000007c2 RDI: 00000000000007c3
[ 1862.191202][T24037] RBP: 0000000000000001 R08: ffff88814c52992f R09: 1ffff110298a5325
[ 1862.199392][T24037] R10: dffffc0000000000 R11: ffffed10298a5326 R12: 0000000000000028
[ 1862.207402][T24037] R13: dffffc0000000000 R14: ffff88814c529800 R15: dffffc0000000000
[ 1862.215481][T24037] FS:  00007f1de7d506c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1862.224518][T24037] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1862.231120][T24037] CR2: 000000110c302448 CR3: 0000000060a8c000 CR4: 00000000003506e0
[ 1862.239110][T24037] Call Trace:
[ 1862.242401][T24037]  <TASK>
[ 1862.245345][T24037]  pcl818_detach+0x66/0xd0
[ 1862.249789][T24037]  comedi_device_detach_locked+0x172/0x710
[ 1862.255667][T24037]  comedi_unlocked_ioctl+0xccc/0xfe0
[ 1862.260976][T24037]  ? comedi_poll+0x8c0/0x8c0
[ 1862.265614][T24037]  ? __fget_files+0x28/0x4d0
[ 1862.270225][T24037]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1862.275259][T24037]  ? security_file_ioctl+0x80/0xa0
[ 1862.280388][T24037]  ? comedi_poll+0x8c0/0x8c0
[ 1862.285000][T24037]  __se_sys_ioctl+0xfd/0x170
[ 1862.289618][T24037]  do_syscall_64+0x55/0xb0
[ 1862.294052][T24037]  ? clear_bhb_loop+0x40/0x90
[ 1862.298746][T24037]  ? clear_bhb_loop+0x40/0x90
[ 1862.303440][T24037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1862.309530][T24037] RIP: 0033:0x7f1de6f8ebe9
[ 1862.313974][T24037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1862.333813][T24037] RSP: 002b:00007f1de7d50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1862.342252][T24037] RAX: ffffffffffffffda RBX: 00007f1de71c5fa0 RCX: 00007f1de6f8ebe9
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1862.350238][T24037] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[ 1862.358221][T24037] RBP: 00007f1de7011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1862.366203][T24037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1862.374209][T24037] R13: 00007f1de71c6038 R14: 00007f1de71c5fa0 R15: 00007ffe0cd41e38
[ 1862.382203][T24037]  </TASK>
[ 1862.385243][T24037] Modules linked in:
[ 1862.390143][T24037] ---[ end trace 0000000000000000 ]---
[ 1862.416092][T24037] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1862.612107][T24037] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 0b e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 0b e0 f9 4d 8b 24 24 48 83 c3
[ 1863.451272][T24037] RSP: 0018:ffffc90004f9fa80 EFLAGS: 00010206
[ 1863.457563][T24037] RAX: 0000000000000005 RBX: ffff888078354800 RCX: 0000000000080000
[ 1863.481036][T24037] RDX: ffffc9001231a000 RSI: 00000000000007c2 RDI: 00000000000007c3
[ 1863.489108][T24037] RBP: 0000000000000001 R08: ffff88814c52992f R09: 1ffff110298a5325
[ 1863.525829][T24037] R10: dffffc0000000000 R11: ffffed10298a5326 R12: 0000000000000028
[ 1863.550972][T24037] R13: dffffc0000000000 R14: ffff88814c529800 R15: dffffc0000000000
[ 1863.559043][T24037] FS:  00007f1de7d506c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1863.591100][T24037] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1863.597762][T24037] CR2: 00007fbab8207000 CR3: 0000000060a8c000 CR4: 00000000003506e0
[ 1863.620339][T24037] Kernel panic - not syncing: Fatal exception
[ 1863.626628][T24037] Kernel Offset: disabled
[ 1863.630957][T24037] Rebooting in 86400 seconds..