last executing test programs:

13m33.091238019s ago: executing program 32 (id=689):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
socket(0x10, 0x803, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xa, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)

13m4.397357823s ago: executing program 5 (id=1071):
openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
r0 = getpgid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x10, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001d, 0xf}, {0x5, 0x2}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x1c, 0x0, @val=@perf_event={0x10000}}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r4, 0x118, 0x4, 0x0, &(0x7f0000000000))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='new ecryp00000000000000000001\x00'], 0x29, 0x0)
r5 = syz_io_uring_setup(0x18f1, &(0x7f0000000240)={0x0, 0xc77c, 0xa6079d7e288c75bc, 0x2, 0xa3}, &(0x7f0000000140), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700)
r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r7, 0x0, 0x0, 0x1001ed)
fallocate(r7, 0x3, 0xf00, 0x10000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
syz_open_procfs(r0, &(0x7f0000000000)='net/igmp6\x00')
sched_setattr(0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00')
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000540)="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", 0x18e}], 0x1)

13m3.339593759s ago: executing program 33 (id=1073):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0xfffffffffffffe2c)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x4a, '\x00', r6, 0x25, r0, 0x8, &(0x7f0000000800)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xb, 0x1, 0xc533}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04300300c100"], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000d1e1ea045c88151fdcb551e997", @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="140004006e6963766630000000000000000000000800050008000000"], 0x38}}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
keyctl$join(0x1, &(0x7f0000003340)={'syz', 0x0})
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

13m3.334672115s ago: executing program 5 (id=1077):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50)
memfd_create(&(0x7f0000000980)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\x18,\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x1a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\xd0\x8f\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\xf6\xd5\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0\a\x0e!\xed\x92\xc9\x03\xa5\xcc!\x83\b\xc7!\xec\xb0\x1d\xe2\xc8\xc8\x11/\x8e\xe8\xf1\xf9o\xca \x04\x98J+\xae$\xaa\x8cH\x05Iv\xfd\xb7|\xce\xdb\xe5\x1e\xdcJ$yH\x05b\xa6A,3K\x0e\xa8E\xf4%\xd2:\xc4\xd2\xd9\f\xf1\xe2F\xc9\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xfa\xc6\xcd\xc8Z\xc7p\xef$\xaa-\xbe\xf6[,`t\xdd\r\x83\xbe9\x86/n\x94\n\xd0\x04\x84k\xf8\x88\xcd\x8db\xd5A\xdb\x189O4\xa1\xa10\x95Tv\fj\x15\x96`\n\xa0\xc7\xf7\xd4\xbaa\xac\x87\x8f\xf2Z\xac\xd0\x86h', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x1, 0x1012)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38)

13m2.825300028s ago: executing program 5 (id=1078):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x54, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)

13m1.589871873s ago: executing program 5 (id=1087):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r7=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r7, r3, 0x5, 0x4, 0x3}, 0x50)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}})
read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014})
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, r3, &(0x7f0000000100)={r2, r3})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]})

13m1.073316736s ago: executing program 5 (id=1092):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000126000/0x3000)=nil, 0x5, 0x0, 0x11})
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x48, 0x14, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "528d9448115377bdc07a09d8d66c433ecfee9bd0e1aca249a744174d0b051595d9f4f2ef6a0c"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "f0d06c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004084}, 0x20044890)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

12m59.851169072s ago: executing program 5 (id=1104):
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f00000000c0)=""/55, 0x37)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=<r3=>0x0)
syz_pidfd_open(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
bind$unix(r4, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

12m59.610948634s ago: executing program 34 (id=1104):
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f00000000c0)=""/55, 0x37)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=<r3=>0x0)
syz_pidfd_open(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
bind$unix(r4, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

12m49.242560984s ago: executing program 6 (id=1075):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='rxrpc_abort\x00', r0, 0x0, 0xff7ffefffffffbff}, 0x18)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r3 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, <r6=>0x0})
syz_open_procfs(r6, &(0x7f0000000040)='net/sctp\x00')
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000)
io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000680)="cd03c46af3d2ed570fcd807d01bdb33af4bb3e22e7e6fed6612a5541034c912d87d394611c4db8a17fd7e3fdae208bd78f2920c01bcb1cdc2dd7348ee05807b589903991600df1b7ca7c927c4b0ea4f178a2f2629b866cc7b5420cd9de2286ae8bec96528beb7f6513b22c4331528c89523ccd9554da5a4275e537ba01fda50e7df60b92a2edf1bde7367678ff555e344129a16df7875099aeb4272603d571d53cbaac74cb4e1643a50fe02cd668d6d96b4ff440c31444a6410aec615613b43f22b2f1710ada38006beb096fd85d8348de52fd2f58ec7c75667c6085346576e15563747852e8", 0xe6, 0x7, 0x0, 0x1}, &(0x7f0000000380))
close(r8)
socket(0x40000000015, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
sendmsg$802154_dgram(r10, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r9], 0x3c}}, 0x10)

12m48.335346732s ago: executing program 6 (id=1182):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r6, r3, 0x5, 0x4, 0x3}, 0x50)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}})
read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014})
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, &(0x7f0000000100)={r2, r3})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]})

12m47.84889992s ago: executing program 6 (id=1186):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c090}, 0x4050844)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'geneve0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x1, [0x4cf]}}) (async)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0x4, r5, 0x80000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x0, 0x1d}, 0x28) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)

12m46.269639848s ago: executing program 6 (id=1198):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setrlimit(0xe, &(0x7f0000000040)={0x5, 0x1})
r1 = getpid()
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
ioperm(0x2, 0x4, 0x2)
ioperm(0x1, 0x7f, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f00000003c0)={0x1})

12m45.76775458s ago: executing program 35 (id=1198):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setrlimit(0xe, &(0x7f0000000040)={0x5, 0x1})
r1 = getpid()
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
ioperm(0x2, 0x4, 0x2)
ioperm(0x1, 0x7f, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f00000003c0)={0x1})

12m33.15537801s ago: executing program 1 (id=1233):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0xb, 0x4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004340)=<r1=>0x0)
stat(&(0x7f0000004380)='./file0\x00', &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getgroups(0x1, &(0x7f0000004440)=[<r3=>0x0])
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
pipe2$9p(&(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x84000)
r8 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x4029410, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@posixacl}], [{@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rootcontext'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@fowner_gt={'fowner>', r8}}]}})
r9 = getgid()
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fcntl$setstatus(r10, 0x4, 0x42c00)
r11 = syz_open_dev$sndpcmp(&(0x7f00000056c0), 0x5, 0x200000)
pipe(&(0x7f0000005700)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005740)={<r14=>0x0}, &(0x7f0000005780)=0xc)
getresuid(&(0x7f00000057c0), &(0x7f0000005800)=<r15=>0x0, &(0x7f0000005840))
fstat(r0, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpid()
sched_setscheduler(r17, 0x1, &(0x7f0000000200)=0x7)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r18=>0x0, <r19=>0x0}, 0x1000)
chown(&(0x7f00000003c0)='./file0\x00', r18, r19)
read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020, 0x0, 0x0, 0x0, <r20=>0x0}, 0x2020)
r21 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007940), 0x410080, 0x0)
r22 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r23 = inotify_init1(0x800)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008c40)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000080)="0e5176d673313b8251156731d104daf35c97f1acc70f36990790db0a090081aefccc9f6d97fa55d04f9b80ec6fb8b9275275bbd39ec49aac6ae9c9106c5475834e048d5a0bc1c67a985726a4b47086b2f1847f591cdba0fb4c148fa717920e31e94731b415bac2761ddb765a3b44b91616ed0e8e8a9f4ed22a6fc2c070757c68cf6b0ffb41ce418c0b76bfc7946682ba89ab19e9cb5de5f8700d46e23fef1c73213994c8f4c0a002d416a4a34fb19fcedb400a5d0a5c6b63916cb1a7f692a4f51a2998f6302d69f56f846d4df2e6fd9e3d3737e2d227a174bd2d4bf916d6d1df49eaef18a5bbd4e0e920", 0xea}, {&(0x7f00000001c0)="4eb6adb6582df77abbff52e98de4da372e3121a0d195bcd3695733c95366b5dca6b2f5b80bc223173eb3a3b10b02b6bc08711ca1f7bf558b0587bd1f1da83774eae966679370e63be8296114eac542bfa33e22a6a75fad272383835f0ee42f94847e7714aa4a6fbf4d9713b4c550ca89015e510e78069fd1676c8e59cb2a32f35b791f7ad4aabc5643697a6987bdfc9255d58f542c03b79ed06f44b0e2197867bd3d5080e22d3a35013fc0b7e988a8578352659d18", 0xb5}], 0x2, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x24040010}}, {{&(0x7f0000002440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000024c0)="4c2d0f75bcffe473e1d2084603d0e9bfd9787d47005446253f336d178dfb069feb62d46f979f43ba73c4b53d7e953b993d50134d9a5b1a10e148feef59a9e64f0959da37cb9e2a89275d206d9b3eca4fd7dfa08b838c7e5241", 0x59}], 0x1, &(0x7f00000025c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r0, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}], 0x78, 0x28000}}, {{&(0x7f0000002640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f00000026c0)="eeab3a744dce5e6afff6bb90d31650f44822970c89a8a17a4746dd2db7f33a9ecaa661dc4d0d36a59ccd57dbbfc5d78d5c890e0eea8017e3509149d599d571d78c83fa70c00f07ee55ed67837deaba9cfe876da327ea1ea3a4e5a718a692cb2eab481f88c0c9530cf49c1aecaa", 0x6d}, {&(0x7f0000002740)="a8b5b08f507b24d381508cfdc962964ca04cf06b01515987884fdbb01b96b5e4bf808548effb690bf69aec4150b070835d6795", 0x33}, {&(0x7f0000002780)="35006bfda2a3102efd63c3f117748b2c51393177c18acf61432378409cefc9ac2c66c3791c805cd98b1bbcd83bc4f26a61f8d7e6272a684801bce035360068722644c9c871de674110d3edf8482a176f0dda70ce2dbcfa", 0x57}, {&(0x7f0000002800)="b84404fedc6006a8dbb5ac9baa90bb58af467f3ae0d1350d6d2404e160e70667b43c8bcd49ccca1020c67a2390be050abb2d7110a0b76462d777be5e", 0x3c}, {&(0x7f0000002840)="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", 0xff}, {&(0x7f0000002940)="a3cb7e3655cdfdc039865d751393dc6575cd2b8f58", 0x15}, {&(0x7f0000002980)="7c19f3c38e4c78085b8da2489c9ef6afd1c2540a4c342bf31e93d94516b34455d4febbd403f8a71ea5f7dee784732004fcee67afd118068ddabe88f6f0c46bbab59a1dd2d7b05e0b0235d4575a80e242608cd4fc11974174a2ae64531fe4fd2de25716d893243094c675787ec94f569cf05b4cd3edae3c894dbdb93f7c4f74c03958d9d55d6457b1e2df44447a2a8c28a4f526357151cf66b886a9f03e5b2c0c7cce547493f085b11834e596f19f38db2b060040a7cb2eded43c7dae9fd117cf86dda6267a557fdff678f6c9abf02361ec02", 0xd2}], 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000000100000001000000249d2863aa8578c39ed2281536e1d6e7929431f770c7c1a3080b5d", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20, 0x40001}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b40)="96dedd59ba0409448a005ecde3ee44303eccee", 0x13}, {&(0x7f0000002b80)="474f4b206a73aa8b96008e107e17c3837ee6fbbf87966d747ea90b1ab3b2233c11b4e8677eecdca50f27d40acf9cdf888c0eb3d48fb697954ce74b98c35a3122aed076b76a652e0af3225193875282fc5c33d177607b73074d139615c4548814dfe21ec7c53f249e502e801e3f76206fb50b684b25a1c3470301f56944da54d87df07aeb28c3969a59a5bb3a4435beb2a8e56c1cc42a32d6d1cf239580b64c22785e86daa42087ea4886966b7cc1964af9e0977169ccaa29f8f174a77df47b7bd37c685c479894f8a10f7e71", 0xcc}, {&(0x7f0000002c80)="bedddf46f423e99999cc85ba686d8bbec925be450069870cd2e7bb6818ea6fee93882d4866e214593e3da59df9ceee032270f50252f1e01b7bd49bf591a3b22cb2d3e7aad44e87f334ec7ed01010bb64bb89553d6e4ecf7e4d287d2dacd9cc932ca4eb54859d7b8cab7224924e5d93945025932356a00eecec624aa7841e21d044b68b36eb8596f586be4df5cdac7a151048d53c2c0503c40fa543c267d7195fd5480ad5", 0xa4}, {&(0x7f00000004c0)="843b529484f96c08fd24685d290d42038948ba2306f157496025f0847d55aab0baeedb0877a5e3e53fee103aea84d349875ec56070d56208956307f16e5298828d56b412832254b35eb9b9d229880873a7cf45b379c393992a6f29745ee7e14b74784e8d6502cac768290f06b61901d8114716cfb8c9b9ce0122349029d4682d14c459ad5f5e94c02f1bf524fd8612774a2d13c7e4e63fe482830edf619ac7aa4add7581c900ce2eabed9fd4d67242a9f6e11d224f2aeb46ebeea1d212cfba56b029ed1086991e7620c8a6b080f3988a0ad6b59556b6a750ed5fd5cea4251965995fbd4441400848d35fac139fd30f739dbbba3c8520007538299cb2ba262b7cb045dd99803301279faae74ded442613", 0x110}], 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="1800000000000000011badb72e8ffa00", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x40, 0x20000000}}, {{&(0x7f0000002e80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f00)="29d244eb0b2d1058e538a3e0ae75f9db964e9032cafb33d30b341fae5cf236ba255e084a11376ff40c11286409467e9efb923a12e9e32655a1f502c2f8336a16caf71924006acc00a163137079eecc54f03fe8fba31f0f795bb2ba63bb90d015389f41081cf1a8e57fa892df75cced320d699c85952e48c40d5f0fbafbd46bb07798a0e404011117cedb56526a5330e1e443cf634a098832345420c1ab14a999329b977ac9c4a5211d49843704fbcc2f", 0xb0}, {&(0x7f0000002fc0)="c2264a2f4332382d4da8f46b630ded7956bc34699868632113b3c9333dbcf350", 0x20}, {&(0x7f0000003000)="33d38f32961bbc35b50918fb6f56be779969728cacc72ba07c2773d7fd0b7c264cb78de5dbcb5de9ff05598d9984153c7fd7012d92bada99f16a107af6115bfd2e2640211742cb6b05982623bccf0fd99c4fbedb9458c406dd774eef81f7", 0x5e}], 0x3, 0x0, 0x0, 0x40000}}, {{&(0x7f00000030c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{&(0x7f00000002c0)="22c043cb150566be05b27bc032a04bfa043233a598b02b6df92fa30a31f88f3b6d81d4321cbf77d71b72345429ac96f62af4fe7721daa46d8acfcabad1386ff749eb8461db3c6e12eb36c331f7d661a471ab067d32a897e1660d3e9aebc2d5a90b70af6f2fe3a46a7e7ee9c76cb2f02ccc1c6d764aea090a98339797f66db859aaec5be91c4f8512e4cf67fd29", 0x8d}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="470ad534649d2e840f5a402866612fd580cabb9e319993d8943578f7ab7a159fa465bb17b88a3bfa45cca50507eef035f71842aa244489f44649e46d5228f788867566e3b6bf96cc", 0x48}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r13, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c0000008a2baa7de690698a8a99e704d7000000635d77d31b9ae3128fbd0aee30cd251b151079bce365769dae71fc4812b7b1f8032db16a6bb2f8af98737dd3aa14cab1372592b50cb4ed7bd730dad6404549ee648c9ae994d5c08760b4fd7835c5ee04445675bbeddfe4846ba0de0b4fcf63d420780317b6021816911c48be70cac1f809398c195d96305c96b814d6d86e2ab9b2ff7d1acb514a503f09db3bec36f2be9fccf416a944f7f7255e8d2f7e3d4a63733bc1c3fa3753a738", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x20000000}}, {{&(0x7f0000004540)=@abs={0x0, 0x0, 0x4622}, 0x6e, &(0x7f0000005680)=[{&(0x7f00000045c0)="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", 0x1000}, {&(0x7f00000055c0)="05c0c96fd972dc1f010d7e51222605cbfc22bc7a8f393b3489f098d3cf22c9c57c0ed0962e38fc258955a3010c521c6495b06abb8091f5bbd2d6a14c781547c3fcf98b755a6214cfbab8f11526af0ffaed5b44224360696c804b3be25dc426dee311acfe71217e894a5b29a00dec0e869750a30001afe7ee78e27f19b6ada5d6d744d8ba0b01564d6deb6ee2c523fba9d4068a9ddc00a774f22a", 0x9a}], 0x2, &(0x7f0000007980)=[@rights={{0x2c, 0x1, 0x1, [r0, r23, r10, r0, r0, r12, r11]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r20}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r21, r22]}}], 0xe0, 0x4000}}, {{&(0x7f0000007a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008c00)=[{&(0x7f0000007b00)="dcabb8a34425b393e26ff1711749c312f12f660f5b3d10a17f924483534efc552be8ebe21d41e573202a14f4d0580726719cd954d60077cba333a9134f7ec3eb7de0b28b85de61875b910cdce4be924a1d2648", 0x53}, {&(0x7f0000007b80)="4d86092b0713028b76", 0x9}, {&(0x7f0000007bc0)="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", 0x1000}, {&(0x7f0000008bc0)="b648efe8c09213de5e4a1cd8580b09bafd7c0b9e37b7a632eb852d1ec1ed9b6c087ce2a4c077899bf45c4c52a32150108bfc562b7733de02873d030ac2c61d", 0x3f}], 0x4, 0x0, 0x0, 0x20000080}}], 0x8, 0x24044004)

12m32.75111039s ago: executing program 1 (id=1235):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x60000}, 0x0)

12m32.603170748s ago: executing program 1 (id=1237):
syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501009cbd"], 0x0)
pipe(&(0x7f0000000080))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000580)={0xe, <r2=>r1, 0x1})
sendmsg$NL80211_CMD_SET_WIPHY(r2, 0x0, 0x845)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000005c0)=@ethtool_modinfo={0x42, 0x4458, 0x8}})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b3ed03ec7bfba0191cab0788d097eed56afbe923db69efb04418197881157132704176ba3159e322e84a095cb74973f302044a6b56c266c4aae38407da29ef1ce87c4e28fb47751c89858aeb2222be83943199834e594a01e31daf5c242b6108f1d20b36a9cc82823c2781184bfbd7dd93bc7a06b9a0aee848e821efdc2e103903cf0bbf13a93c8f16e9c261577130c2c3b42561f16f873a2401e7ee56ebe397f6db346c67228732398490441e44fdc324d268bfa62577", 0xb7}, {&(0x7f0000000340)="56bf382dab3488e617b247360c62e514ba8239398badd8acab5eced966a218d2726ad3259f90a7da79f152ad8785190e1350f227e6d02254f6cc4c2d468b6cdb503ca834e36a", 0x46}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x84)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00030903000000ebdbdf2507000000", @ANYRES32=r5, @ANYBLOB="090100001803000008000a00", @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x24040105}, 0x50)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe})
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
r7 = syz_io_uring_setup(0x538b, &(0x7f0000000480)={0x0, 0xc7a2, 0x100, 0x2, 0x365}, &(0x7f0000000240), &(0x7f0000000500))
io_uring_enter(r7, 0x2464, 0x6c1a, 0x0, &(0x7f0000000540)={[0x7fff]}, 0x8)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x20, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
close(r6)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r8, 0x5607, 0x1)
keyctl$join(0x1, 0x0)
r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r9, r9, r9}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)

12m29.203895828s ago: executing program 1 (id=1254):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r7, r3, 0x5, 0x4, 0x3}, 0x50)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}})
read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014})
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, r3, &(0x7f0000000100)={r2, r3})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]})

12m29.001736724s ago: executing program 1 (id=1256):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x3c8}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00', r4}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a28d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040)

12m28.73511086s ago: executing program 1 (id=1257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/icmp6\x00')
connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0x59, 0x0})

12m28.615334926s ago: executing program 36 (id=1257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/icmp6\x00')
connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902"], &(0x7f0000000400)={0x0, 0x0, 0x59, 0x0})

1m56.342897906s ago: executing program 8 (id=3788):
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1402200bc2)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c890}, 0x1000000)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000180)={0x8, 0x6, 0x1, 0x42e, 0x10000, 0xc})
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000200)={0xe6b, 0x7, 0x3a})
getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000000140))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f40)=ANY=[@ANYRESHEX=r0], 0x40}}, 0x8000)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)

1m55.921363196s ago: executing program 8 (id=3790):
landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x18, 0x3, 0x2, &(0x7f00000001c0))
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40)
getdents(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023893)

1m54.599147251s ago: executing program 8 (id=3794):
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x7000000}, 0x50)

1m54.506820507s ago: executing program 8 (id=3796):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00')
read$FUSE(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000001114010026bd700000000000080001000100000008000300030000002834c282d9dae132e3a6db8a0554081b359d454bab76244ff7f33b075325ad41fd72dbc58177937edfb85ff12ce10865ab7f72239d4c53401db7ebf33217620effd6524bc9afaa1ba671c5d9bc88c39c2e108dbed7c0fa7b7a8a5fd49ab82b947faf81e39ff565afce8b51a006717f05249ddba29aad9e7b89172217d436d26cd6c01f5ecf50b3592ee466195f4aec662ef587b2604022c1e5da2e6791f0d17dd975920a0db93bdfd0d43fa5a7717b41159500958ec5c30f4723acb3c362"], 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ff0000000002000000000000000000000000689b3d4100"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000002c0)=0x1)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3", 0x3}], 0x1}}], 0x1, 0x404c041)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000400), 0x0}, 0x20)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
chroot(0x0)

1m53.667234472s ago: executing program 8 (id=3798):
mkdir(0x0, 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1e, {0x1e, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000017c0)={0x5, r0, 0x26, {0x80000001, 0x7}, 0x13}, 0x1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1})
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]})
unlink(&(0x7f00000002c0)='./file0\x00')

1m49.966636849s ago: executing program 9 (id=3807):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

1m49.718106264s ago: executing program 9 (id=3809):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x6c}}, 0x983ba23a2c3bec4)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x7f}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
close_range(r4, r4, 0x2)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='wg1\x00', 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540))
r7 = fsmount(r4, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000580)={0x3, 'geneve1\x00', {0x3}, 0xf9})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7)
ioctl$BLKFINISHZONE(r4, 0x40101288, &(0x7f0000000780)={0xffffffffffffffff, 0x7})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r4)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x0, 0xb9, 0xd7, &(0x7f0000000940)="1375f075bc5b858b8a3a3f3bc55df3b61262d38f09b1723c4007084f2656f0b9604d6c18e4e37e39349ce0e3c0966567f66c90308339fbb057984650ddb0adbe3232301c5879d23a98a0ba3a4a7e8c1b00fdfc18791744d538841817f62ebfeb03b7b6fb9792b84dd210bc6df5b87ecf979b00e823abaec12bd31f366c6af11b016cc1cbfd89a3df2b74c787330313a5854376d51662ca4ff345e897df424d69c90203399c83c2da8e86259cd26250f415892a8b3339b380f0", &(0x7f0000000a00)=""/215, 0x8, 0x0, 0x7d, 0xf5, &(0x7f0000000b00)="90fbaf1dbdc594925ca783008b6cd0cf99634a57022035006ead4186b72fb9988d4a8275e156547a88a68de3c292672d7ceb1be825e9e571de027b19170147fdc3eacfef9e504887b1ce4176e74f4654051ca71c18c1d7b98a8d6bd3e814eda087dab91c519252d2e3d756300dcf9c1b7651d1a809df3b4a8260532196", &(0x7f0000000b80)="ec0843005a450f42c200edcda968553d3618da992a4753e4ae7ef95bf678ad22041c79b342e9636bd27af8ee71c0d28b1036b36762bb9ff2e0fc91d3766a5d4596777075520a2b4a918741c2cff59777f80007184513ac080ce746b93184d7180621f0b82d8d89dd9d3637c48ea3572fae88546a1e3b28b2160f486dba9b0df0a74ae841852c1ceb2ecc891400cbb02932ac048cc5f84b5f1d6c0e265a3acfc8b596d56f258f9fdad45127a050869e2db47fc479f723f0d119a4da4175ef96454d60ac41bf6b50cad12613091a009f995b2904128e7308eb2bb2146715dd9c00eda34fb6bbdbec80609ff018b25f247ed1f3806c6d", 0x0, 0x0, 0x80}, 0x50)
ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000001140)={{'\x00', 0x3}, {0x6}, 0xce, 0x0, 0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)="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", 0x1df, 0x0, &(0x7f0000000f80)={0x2, 0x17d, {0x0, 0xc, 0x8a, "0e84a1731737a81c6ab5f892cbc283d4e8326ee408858eebc0c426609428600037586992147b7fb00c2e91bae9dacbc798514004e44fca494e72b37b3063029d1d1e2324e42c79e35d327a22ade427d869bd21a8edba48ad17bdf0fdc11539ef6a1230610f937488d8fc53c228a47c3b9cc1c5f39f06b1a2867e0a261284415d3e6844a0f95fd44ff433", 0xe6, "7cf06501e1a594340514cc1e0e9a508ec060b6f8506f847bc64d95562d3c94e1b87348d62c94c040588c1be06414a4748f144a78a0c0e08fd2c6d92f2b05ee06055a0414650a36f3a4a1e950b12c2cbdcec3f06b2c7d50477af71644505582ab8c488c792d5e0b8a5aad84c74ce5adcab7bd64e5732cd6dfce403733bd59d2cc8fd37f049e3bb547fc3f36a96ce04c9910fb578e1cab0a92e96d173e9e61990c0dca8b98fb8a2e5b6d70a821d7b376fdb29aa41f31fa1501a308ff04a0d48c75aa5bc5457f24e590fbdb8325c1f05ea44a58c846b8d9bdbb0b2566a4be9ab518711ffddb9d21"}, 0x2b, "7f20af8a6832c1afbcfcbc620e7c0a0b1074919afcff00f600b6c081f9fc351ce91842dbe8edf957be6487"}, 0x1b4})
openat(r4, &(0x7f00000011c0)='./file0\x00', 0xc080, 0x22)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xe4, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3b1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x20004804)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00', <r10=>0x0})
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000001480)=<r11=>0x0, &(0x7f00000014c0)=0x4)
getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000001500)={@multicast2, @dev, <r12=>0x0}, &(0x7f0000001540)=0xc)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001a40)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xa8, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000000)

1m49.554521984s ago: executing program 9 (id=3812):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x300, 0x0, 0x6, 0xa00}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x300, 0x0, 0x6, 0xa00}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async)

1m49.460639172s ago: executing program 9 (id=3814):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x191)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2)
shutdown(0xffffffffffffffff, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000780)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x0, 0x3, 0xa}, 0x20)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_setup(0x3ff, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}])

1m48.929490991s ago: executing program 9 (id=3815):
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0x13, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0x1f, 0x4e, [@multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x8, [@loopback, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @remote, @private=0xa010101]}]}}, "3276ba29"}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
futimesat(r8, 0x0, 0x0)
shutdown(r2, 0x1)
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
write$6lowpan_control(r9, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)

1m48.733479968s ago: executing program 8 (id=3816):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

1m48.08141446s ago: executing program 9 (id=3818):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a7"], 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

1m31.740313121s ago: executing program 37 (id=3818):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a7"], 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

1m31.65106252s ago: executing program 38 (id=3816):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

16.43488132s ago: executing program 0 (id=4244):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000072f87c10f00307030100010203010902240001010000000904240202d4dc5d0209050402100000fa000905820240000000008d7eb560e62c3658cdd2f938b51b30ba599385ae5128f325a90a59755e469f9f9398aa9033efd596b3757366367c057a955cded25838524e2ee90bc9389d8fd96dbe3c5f5c952167db3de84f1533967f30f8954ff4c1bd22e108b4a8f0021b4515445c54659017de7bde6b2a6da8782d05f78ad2c968cddd5700187ff8d770074c1e9bb846ab730297e3a55ee462c4da2f3d15846ebf345fda9be9a40bcbe080adc131224249fb8632d127ba35dc7660"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x104, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102376, 0x18fe8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20280, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0xfc}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x2e80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e26, 0x200, @mcast2, 0x2}}}, 0x3a)
socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendto$inet(r6, &(0x7f00000002c0)="a8588d3900e2a77b6aabb9bfa2d35398c170fccc03c55ff83a2210cb05f6e2a9176e0b942a337e323d3d127dfafc74495756c84cfc90754e43e6cfef6d4aab35ca", 0x41, 0x240008d0, &(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000200000000000000000000da73ff5200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7}, 0x0)

15.834608064s ago: executing program 0 (id=4248):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18e1fffffd000000ff950000b248000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[], 0x200000)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
close_range(r2, r3, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, 0x0, &(0x7f0000000200))
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000380)={0x0, 0x20, 0x2, 0x65a, 0x10, 0x140200, 0x2, 0x200, 0x20, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0})

15.203610729s ago: executing program 0 (id=4255):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x810)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3}, 0x8)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'mpc624\x00', [0xa08, 0x3, 0x1, 0x6, 0x0, 0x5, 0x2, 0x7, 0x800, 0xff, 0x2, 0x3, 0x8, 0x2, 0x6, 0x800007, 0x1, 0x200009, 0x43, 0x40000003, 0x89, 0x9, 0xf23, 0x6, 0x1000800b, 0x8, 0x1, 0x6, 0x18, 0x10000, 0xfffffff4]})
ioctl$COMEDI_SETWSUBD(r1, 0x6411) (fail_nth: 2)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4)

14.911059204s ago: executing program 0 (id=4257):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0c1100001a000700000000a92237d84101ca8aa2690000000000fe80000000000000000000000000001be000000200000000000000000000000005000000000000000000000002000b00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000003000000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e000100000000000000000000000008001f0003000000"], 0x10c}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
futex(0x0, 0x80, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x1)
r9 = dup(r2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

14.857889248s ago: executing program 0 (id=4258):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x6, 0x3136564e, 0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x0, 0x6, 0x2}})

14.49482809s ago: executing program 0 (id=4260):
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r1}, 0x38)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x107d}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000d00)=""/4082, 0xff2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1a\vz\x950#(Wy\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1\\\xb5&\xd1\xca\xcb\xc5C\xa6,\xc7~\xa3\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\x03\x00\x00\x00W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x87:me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6<p7\xaaS7\xb4\xcdtd\x81V|\xc6\x99\x81\x80\'\xf8\xb5\xe0{\xb0\x04hVL/\xff\x97\td\xd5\xddc\xc0i5\x9c\x06\x88\x8cb\xfb2\xbf\xa3\xb4\xceF\xd9\xc8\xdf\xfcw\"\xdcv\x8d\x83\x91\xacn[a~\xc8\x9a1\x04\x18\xd2@O\xf3q\xb3\xadj\xb1\x01\xfa\xc4i\'\xa0\x86\x12\xcd3l\x98v;@\x95\xa5\xa8/7\x03\xb2\x88\xa7', 0x2)
fallocate(r4, 0x0, 0x0, 0x200401)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="a0a90ad00ebaf8b371510740c286c344ae20e66c0a292dc44a5e21bc01a8cd13708f8984c6ce727bd81ad637b1d2097bb2d8ce2dfee62b06a9", 0x39)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0x118, 0x31, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff27}}]}]}, 0x118}}, 0x4000000)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x9, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa0, 0x2, [@TCA_MATCHALL_ACT={0x9c, 0x2, [@m_vlan={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xba1}]}, {0x5b, 0x6, "8bfeef927f8d8f2fe22c68dd9b4d6dec5f431b8c4d21696a82417f9a4044cbc9a945c3f1b641d75d7b17c3cc944b6167547a1ed01f29296e07d290207fd2ca1f690d67a15da47915fd304a93ad9befcf991bd1c772eab8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

14.42340876s ago: executing program 39 (id=4260):
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r1}, 0x38)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x107d}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000d00)=""/4082, 0xff2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1a\vz\x950#(Wy\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1\\\xb5&\xd1\xca\xcb\xc5C\xa6,\xc7~\xa3\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\x03\x00\x00\x00W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x87:me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6<p7\xaaS7\xb4\xcdtd\x81V|\xc6\x99\x81\x80\'\xf8\xb5\xe0{\xb0\x04hVL/\xff\x97\td\xd5\xddc\xc0i5\x9c\x06\x88\x8cb\xfb2\xbf\xa3\xb4\xceF\xd9\xc8\xdf\xfcw\"\xdcv\x8d\x83\x91\xacn[a~\xc8\x9a1\x04\x18\xd2@O\xf3q\xb3\xadj\xb1\x01\xfa\xc4i\'\xa0\x86\x12\xcd3l\x98v;@\x95\xa5\xa8/7\x03\xb2\x88\xa7', 0x2)
fallocate(r4, 0x0, 0x0, 0x200401)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="a0a90ad00ebaf8b371510740c286c344ae20e66c0a292dc44a5e21bc01a8cd13708f8984c6ce727bd81ad637b1d2097bb2d8ce2dfee62b06a9", 0x39)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0x118, 0x31, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff27}}]}]}, 0x118}}, 0x4000000)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x9, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa0, 0x2, [@TCA_MATCHALL_ACT={0x9c, 0x2, [@m_vlan={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xba1}]}, {0x5b, 0x6, "8bfeef927f8d8f2fe22c68dd9b4d6dec5f431b8c4d21696a82417f9a4044cbc9a945c3f1b641d75d7b17c3cc944b6167547a1ed01f29296e07d290207fd2ca1f690d67a15da47915fd304a93ad9befcf991bd1c772eab8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

10.0082517s ago: executing program 3 (id=4281):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x9c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0xe, 0x4c, 0xa}}, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x23, 0xf, [@random={0x1, 0x1d, "4e39eb2fa0ebfa37a9e75bb5031cccaaa606f18768168a17a99b757a24"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 64)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_process_fork\x00', r0}, 0x18) (async, rerun: 64)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)

8.803014938s ago: executing program 3 (id=4285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$inet6(0xa, 0x3, 0x5)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
r10 = dup3(r9, r8, 0x0)
sendmmsg$inet6(r10, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000400000000003f0000000b0000000008000000000000140000000000000029000000080000003404000000000000"], 0x30}}], 0x1, 0x810)
epoll_create1(0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0xfd, 0x1, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x24}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x2, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.658109736s ago: executing program 2 (id=4286):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000003c0)="4ef40bd3ab92b592edcd88df282249a0379344aebe1e9d16106c4b1f9b0e0bda89f8eaac42d9f18b521ad3199d09a390172ca08eda3984ea00ec3e8f82dcf4e5b63909519662c0", 0x47}, {&(0x7f0000000480)="8d14f5b217dc709ed9cb518298b951ef091ebeaa14c1ae1445999ffd4dcfbbc3d9f4d6102753cf1a72ae1a13ffa2ed3dcc7a2b2bf1769ef812e53e921dff1c588a99daeb53f8d8c8a98e6ad01f552d120f599d1920bdd8825816f3aa6f5579f28763b712a1f0bc57050979344d5de947a9c27658bb888aeebd8576f25c254ea4bb973d265efffef133b51b35519152d61578fce3fced7451f121", 0x9a}, {&(0x7f0000000580)="a63c5ac7f3677cfa916c9e1b0ed6303ca7dc79cbbf1cd5ea6f10c9b174470ce6f23e6fe7dc301acef3f6763acfd92918cf006665081483143941c89582bf8ef0caa9221c9ae44aac417ffd12f2d504bd62b6674786813c9d9e42a298bda2ae1fa4c880687760d906357ef695ae9614", 0x6f}, {&(0x7f0000000600)="ca7091606f72d05b2df231d92adee6a64c28c3d034fc9560051f362ed8f9158418477670dbfccc58414d551e76d5fc75b3aa62d910b37aab6684f332b679e94e327be7403d56c3edac9422293a488ade077903c4e99f344e9e677ee339f0bfcc1ba1238cfe118b9574b150f1b97d88e9bf27613a29b3dd87fffdde9a2fa015f9", 0x80}, {&(0x7f0000000680)="ef89e3f0e83b99cac22df52dbae3dea1238ca554f079b70d11d9f3070def6225f665961364206d775c06ba12e51a52c972b5a95abe2959d3d4dc1ce4466984c2f2ee6f429120694c3835aecfc25cb5f186b2c77cd1ebf7b5d165fe6366747912c7bc8a3a9479cb74a9ecf6b3832f963436317dcc47eee713f20d1b5837cb527545cd", 0x82}, {&(0x7f0000000280)="8ac940404ca6f75509a999b3a910a963a0dcb04f7640ee52f26bc4d1dc0e868e4ab1610f20634b2f58", 0x29}, {&(0x7f0000000740)="136b13f9f9d0278ea260d6e9b4422d3ecdf56ab3b5b71a56f22bfb83db47709a5719c662c777e5a5c1f49a7ae72638add9aa4e489337077b3108ab83a50f7834b351e1a60822cb64f05b6bc5b53a538c2ba051d69ae43b70b82ebd6d834e266d4281bcb892c9039ae182233fc93d7cba44497ed7498faab7802e6cfa94521a38", 0x80}], 0x8, &(0x7f0000000880)=[{0xd8, 0x10a, 0x401, "222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d41"}, {0x60, 0x10c, 0x4, "b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584"}], 0x138}, 0x4081)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004000000"], 0x48)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

7.655490637s ago: executing program 7 (id=4287):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
migrate_pages(r1, 0x2589, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xce0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
get_robust_list(0x0, 0x0, &(0x7f0000000140))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000018c0)={0x8e3, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r6, 0x0, r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.64457869s ago: executing program 3 (id=4288):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

7.641686927s ago: executing program 4 (id=4289):
socket(0x11, 0xa, 0x38)
r0 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0xa)
sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000002400)=@qipcrtr, 0x80, &(0x7f0000002780), 0x0, &(0x7f0000003ac0)=""/222, 0xde}}, {{&(0x7f0000003bc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002800)=""/63, 0x3f}], 0x1, &(0x7f0000003c80)=""/96, 0x60}, 0x200}, {{&(0x7f0000003d00)=@nl=@proc, 0x80, &(0x7f0000002540)=[{&(0x7f0000003d80)=""/207, 0xcf}, {&(0x7f0000003e80)=""/93, 0x5d}, {&(0x7f0000003f00)=""/154, 0x9a}, {&(0x7f0000003fc0)=""/230, 0xe6}, {&(0x7f0000002480)=""/181, 0xb5}], 0x5, &(0x7f00000028c0)=""/4102, 0x1006}, 0xb}], 0x3, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x11e})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0xffffffffffffff69)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000002300)={[0xfffffffffffffffb]}, 0xffffffffffffff67, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f00000022c0))
fsmount(r5, 0x1, 0x9)
prlimit64(0x0, 0xb, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)

6.342899196s ago: executing program 2 (id=4290):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', <r1=>0x0, 0x29, 0x0, 0x6, 0x7f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x383, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) (async)
process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r7, &(0x7f0000001480)=""/4122, 0x101a, 0x99) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES8=r3], &(0x7f0000000440)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000007000000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00'/20, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="02000000000000b3fe465d5e809abfb7f5384f310000000000000000e73c8c05e369e38d3ff01c772eaa1c80effcfe969ff47a37ff0303ea94421f5042872f53bfc8ecf753b3a38971bd337e8784e57049a9415b7c5fdf4266e0c7643a29"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000005000000000000000e000000180100002020734b5af6377af3398d92b4842500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e73000085000000060000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x19, 0x1000, &(0x7f00000024c0)=""/4096, 0x41100, 0x43, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x2}, 0x10, 0x0, r2, 0x3, &(0x7f00000005c0)=[r7, 0xffffffffffffffff, r7, r2, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7, r7, r9], &(0x7f0000000600)=[{0x2, 0x1, 0x1, 0x4}, {0x4, 0x2, 0xa, 0x2}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x7}, 0x94) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
r10 = syz_open_dev$evdev(&(0x7f00000001c0), 0xfefffffffffffff2, 0x8002)
ioctl$EVIOCGID(r10, 0x80084502, &(0x7f0000000300)=""/194) (async, rerun: 32)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)

6.342179003s ago: executing program 7 (id=4291):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40002001, 0x0)

6.341335286s ago: executing program 3 (id=4292):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket(0x1d, 0x2, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18)
pipe(0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471"], 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$P9_RGETLOCK(r8, &(0x7f0000000640)=ANY=[], 0x200002e6)

6.339707008s ago: executing program 4 (id=4293):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x1000)
r0 = memfd_secret(0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x11, r0, 0xffffe000)

4.89506405s ago: executing program 2 (id=4294):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

4.893228319s ago: executing program 7 (id=4295):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x4, 0x14000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x10000008, 0x4)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xff01000000000000)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048894)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x51, 0x9bc6, 0xffff, 0x2, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40040)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x0, 0x3a}, {0x4, 0x80000000, 0x2, 0x4, 0x41f, 0x3, 0x3, 0x40c4}, {0x2, 0x3, 0x5}, 0x9, 0x6e6bbd, 0x3, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x0, 0xa44bb7f30d746999, 0x5, 0x5, 0x6, 0x8}}, 0xe8)
ioctl$TIOCPKT(r0, 0x5420, 0x0)

4.892672666s ago: executing program 4 (id=4296):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d000107100000"], 0x18}}, 0x880)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r6=>0x0, 0xddf}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r6, 0x3}, 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffff77, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x11, 0x1, 0x40}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

3.402987148s ago: executing program 2 (id=4297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x200, 0x20}, 0xc)
accept4$tipc(r2, &(0x7f0000000040)=@id, &(0x7f0000000180)=0x10, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000001a80)={0x6, 'rose0\x00', {0x2}, 0x869})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2})

3.392016114s ago: executing program 7 (id=4298):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x5000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

3.388715121s ago: executing program 4 (id=4299):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000003c0)="4ef40bd3ab92b592edcd88df282249a0379344aebe1e9d16106c4b1f9b0e0bda89f8eaac42d9f18b521ad3199d09a390172ca08eda3984ea00ec3e8f82dcf4e5b63909519662c0", 0x47}, {&(0x7f0000000480)="8d14f5b217dc709ed9cb518298b951ef091ebeaa14c1ae1445999ffd4dcfbbc3d9f4d6102753cf1a72ae1a13ffa2ed3dcc7a2b2bf1769ef812e53e921dff1c588a99daeb53f8d8c8a98e6ad01f552d120f599d1920bdd8825816f3aa6f5579f28763b712a1f0bc57050979344d5de947a9c27658bb888aeebd8576f25c254ea4bb973d265efffef133b51b35519152d61578fce3fced7451f121", 0x9a}, {&(0x7f0000000580)="a63c5ac7f3677cfa916c9e1b0ed6303ca7dc79cbbf1cd5ea6f10c9b174470ce6f23e6fe7dc301acef3f6763acfd92918cf006665081483143941c89582bf8ef0caa9221c9ae44aac417ffd12f2d504bd62b6674786813c9d9e42a298bda2ae1fa4c880687760d906357ef695ae9614", 0x6f}, {&(0x7f0000000600)="ca7091606f72d05b2df231d92adee6a64c28c3d034fc9560051f362ed8f9158418477670dbfccc58414d551e76d5fc75b3aa62d910b37aab6684f332b679e94e327be7403d56c3edac9422293a488ade077903c4e99f344e9e677ee339f0bfcc1ba1238cfe118b9574b150f1b97d88e9bf27613a29b3dd87fffdde9a2fa015f9", 0x80}, {&(0x7f0000000680)="ef89e3f0e83b99cac22df52dbae3dea1238ca554f079b70d11d9f3070def6225f665961364206d775c06ba12e51a52c972b5a95abe2959d3d4dc1ce4466984c2f2ee6f429120694c3835aecfc25cb5f186b2c77cd1ebf7b5d165fe6366747912c7bc8a3a9479cb74a9ecf6b3832f963436317dcc47eee713f20d1b5837cb527545cd", 0x82}, {&(0x7f0000000280)="8ac940404ca6f75509a999b3a910a963a0dcb04f7640ee52f26bc4d1dc0e868e4ab1610f20634b2f58", 0x29}, {&(0x7f0000000740)="136b13f9f9d0278ea260d6e9b4422d3ecdf56ab3b5b71a56f22bfb83db47709a5719c662c777e5a5c1f49a7ae72638add9aa4e489337077b3108ab83a50f7834b351e1a60822cb64f05b6bc5b53a538c2ba051d69ae43b70b82ebd6d834e266d4281bcb892c9039ae182233fc93d7cba44497ed7498faab7802e6cfa94521a38", 0x80}], 0x8, &(0x7f0000000880)=[{0xd8, 0x10a, 0x401, "222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d41"}, {0x60, 0x10c, 0x4, "b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584"}], 0x138}, 0x4081)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004000000"], 0x48)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

1.734649894s ago: executing program 2 (id=4300):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ef6a1b10c016df0571b0000000f1090212000104000000090476020003000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3)
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="20013c0000003c092e1cc46f6e911f52f4654b49f768a4f9b5b98843625f55144abd82e12ed54773538c4f19ca4532aea2262a78d22070ee252ff9b5cc4188535ca9"], &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000000700)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4e, 0x0, 0xa, 0x2, 0x37}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x0, 0x6, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x6, 0xf00, 0x7, [0xc030, 0xff00f0, 0x7e00, 0xfe8030, 0xff3f0f, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0xc, 0x3, 0x0, 0xf8}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x50, 0x8, 0x4, 0x13, "4de83dac", "02c0d747"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x2, 0x8, 0x7, 0xe, 0xe}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000007c0)={0x0, 0x3, 0x8d, "3526a87ad52ccb2f986981985f7e1fd3679e220f852d32c0a8b30c123e2a1d49199bd477fc417ae81a79403cf6bfe14f3372eb1e577d300eb2499d0cec147b13108430e1aa61c7b76304037a2b2a6344f3e3368e9afde0cd626d1817db217855a4da1ff42decde68f8d74f2990a1b8b6031cf6ad1b6575e16667eb75d3ccceef21bd86df3ef407760bd1d1d697"}, &(0x7f0000000880)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x20, 0x86}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x9, 0x1}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "4d8d"}, &(0x7f0000000b00)={0x40, 0xf, 0x2}, 0xfffffffffffffffe, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "26df"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x5}})
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd0000fedbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d4f00000800030002000000"], 0x3c}}, 0x820)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x2, 0x2, 0xff, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x25}, 0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYBLOB="0000000003120100280012800b0001006272"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x2, 0x9, 0xfffffe0f, 0x43, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x8, 0x5, 0x4}})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@loopback, 0x4f, r6})
write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000880)={<r9=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{r9, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001b40)={{r9, 0x8, 0x11, 0xd751, 0x7, 0x6, 0x200004, 0x7, 0x1003, 0xd3f, 0x5, 0x8, 0xfffffffffffffc00, 0x101, 0xffffffffffffff7f}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000d80)={{r9, 0x2, 0x3, 0x4, 0xe703, 0xfffffffffffffffa, 0x401, 0x42, 0x1, 0x2, 0xfffffffb, 0x17, 0xfffffffffffffffb, 0xf, 0x6}, 0x8, [0x0]})
landlock_restrict_self(r8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r10 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x80000)
ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f00000003c0)={0xa, 0x2, 0x0, {0x80000000, 0x1, 0x2, 0x7}})

1.732833343s ago: executing program 7 (id=4301):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
migrate_pages(r1, 0x2589, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xce0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
get_robust_list(0x0, 0x0, &(0x7f0000000140))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000018c0)={0x8e3, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r6, 0x0, r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.731915018s ago: executing program 3 (id=4302):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

1.730196329s ago: executing program 4 (id=4303):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
migrate_pages(r1, 0x2589, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xce0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30)
get_robust_list(0x0, 0x0, &(0x7f0000000140))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000018c0)={0x8e3, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r6, 0x0, r6}, 0x10)

3.209117ms ago: executing program 2 (id=4304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x4010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r9, 0x511, 0x40a7ff, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
listen(r0, 0x8000407)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r10 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x8, 0x1, 0x7, 0x80, 0x8, 0x4, 0xa, 0x6, 0x4, [0x8, 0x1, 0x2, 0x5, 0x1, 0x5, 0x200, 0xff]}})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000080000006b00000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0)
syz_usb_control_io(r11, 0x0, 0x0)

2.280429ms ago: executing program 7 (id=4305):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8d, 0xc8, 0x31, 0x40, 0x830, 0x60, 0x132b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xde, 0x7b}}]}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0x40, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000180)="6314cd093b6b0d9100e3d9ef327f67db53f93f41d173be23515120239cba9221e0782511138f81959536d10fe024e9541323a3d52ce53d4895b4cf2b5e0c62fa542bf107971f2b9d757fef4d00a12de288f2ae89342425408fde967f1ce0a96c7d5ad4f3a9dcf228873e5d30b0f11a035e82db8a97ab36e00c0b8d5fcc52532953e90eb4253f27499bb51c449392", 0x8e}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x4f)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40002001, 0x0)

1.058004ms ago: executing program 3 (id=4306):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0)
r2 = semget(0x1, 0x0, 0x208)
semop(r2, &(0x7f0000000340)=[{0x0, 0x9, 0x2000}, {0x2, 0xf, 0x1000}], 0x2)
semop(r1, &(0x7f0000000280)=[{}], 0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/if_inet6\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, 0x140f, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x3, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x0, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x20008085)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "24d31a04abcb4277062fd2861f1012377b0ef20847ccbfde85f70e8d4da6179f55fe4986bbdd1294be2a2d8e91456c48a5b2e4019b693400bf59303dd67f12be", 0x13}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r6, r6)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x0, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"})
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/229)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000140)=0x54)

0s ago: executing program 4 (id=4307):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

kernel console output (not intermixed with test programs):

etooth: MGMT ver 1.23
[  845.027002][   T30] audit: type=1326 audit(1764718769.061:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.054500][T19530] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5)
[  845.065238][   T30] audit: type=1326 audit(1764718769.061:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.117406][ T9048] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  845.125290][ T9048] em28xx 4-1:0.0: dvb set to bulk mode.
[  845.140863][   T30] audit: type=1326 audit(1764718769.080:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.165264][    T9] em28xx 4-1:0.0: Binding DVB extension
[  845.177025][ T9048] usb 4-1: USB disconnect, device number 93
[  845.192943][ T9048] em28xx 4-1:0.0: Disconnecting em28xx
[  845.208549][    T9] em28xx 4-1:0.0: Registering input extension
[  845.226683][ T9048] em28xx 4-1:0.0: Closing input extension
[  845.238019][   T30] audit: type=1326 audit(1764718769.080:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.303882][ T9048] em28xx 4-1:0.0: Freeing device
[  845.319632][   T30] audit: type=1326 audit(1764718769.080:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.344688][   T30] audit: type=1326 audit(1764718769.080:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.375008][   T30] audit: type=1326 audit(1764718769.089:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.402004][   T30] audit: type=1326 audit(1764718769.089:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.427582][   T30] audit: type=1326 audit(1764718769.089:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.451390][   T30] audit: type=1326 audit(1764718769.089:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.475289][   T30] audit: type=1326 audit(1764718769.089:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  845.502254][   T30] audit: type=1326 audit(1764718769.089:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.7.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47bf8f749 code=0x7ffc0000
[  846.226908][ T7503] bond0 (unregistering): Released all slaves
[  846.250902][ T5839] Bluetooth: hci5: command tx timeout
[  846.799713][ T7503] bond1 (unregistering): Released all slaves
[  847.201109][T19550] chnl_net:caif_netlink_parms(): no params data found
[  847.269287][  T932] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  847.277275][ T7306] usb 8-1: USB disconnect, device number 61
[  847.477838][  T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.563218][  T932] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  847.581980][  T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.625463][  T932] usb 4-1: config 0 descriptor??
[  847.744417][T19550] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.782277][T19550] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.789545][T19550] bridge_slave_0: entered allmulticast mode
[  847.832420][T19550] bridge_slave_0: entered promiscuous mode
[  847.860231][T19550] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.888888][T19550] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.896103][T19550] bridge_slave_1: entered allmulticast mode
[  847.933651][T19550] bridge_slave_1: entered promiscuous mode
[  848.039857][T19550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.058660][T19550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.075082][  T932] lenovo 0003:17EF:6047.0031: unknown main item tag 0x2
[  848.122909][  T932] lenovo 0003:17EF:6047.0031: item fetching failed at offset 4/5
[  848.255408][  T932] lenovo 0003:17EF:6047.0031: hid_parse failed
[  848.261896][  T932] lenovo 0003:17EF:6047.0031: probe with driver lenovo failed with error -22
[  848.359162][T19550] team0: Port device team_slave_0 added
[  848.389388][T19550] team0: Port device team_slave_1 added
[  848.464989][ T5839] Bluetooth: hci5: command tx timeout
[  848.679830][T19550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  848.686876][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.721409][T19550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  848.821038][T19550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  848.828229][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.856866][T19550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  848.993252][T19550] hsr_slave_0: entered promiscuous mode
[  849.003907][T19550] hsr_slave_1: entered promiscuous mode
[  849.010356][T19550] debugfs: 'hsr0' already exists in 'hsr'
[  849.016165][T19550] Cannot create hsr debugfs directory
[  850.688052][ T5839] Bluetooth: hci5: command tx timeout
[  850.717861][T10833] usb 4-1: USB disconnect, device number 94
[  850.785812][T19631] netlink: 'syz.7.3635': attribute type 10 has an invalid length.
[  851.009145][T19631] 8021q: adding VLAN 0 to HW filter on device team0
[  851.022410][T19631] bond0: (slave team0): Enslaving as an active interface with an up link
[  851.064463][T19624] ip6_vti0 speed is unknown, defaulting to 1000
[  851.404339][T19638] random: crng reseeded on system resumption
[  851.953587][T19646] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3639'.
[  852.569050][T19550] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  852.577942][T19550] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  852.593939][T19550] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  852.608668][T19550] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  852.791355][T19550] 8021q: adding VLAN 0 to HW filter on device bond0
[  852.818520][T19550] 8021q: adding VLAN 0 to HW filter on device team0
[  852.832074][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.839265][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  852.866864][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.874029][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  852.910948][ T5839] Bluetooth: hci5: command tx timeout
[  853.060602][ T9048] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  854.070092][T19550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  854.215501][ T9048] usb 8-1: Using ep0 maxpacket: 16
[  854.609603][ T9048] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  854.624648][T19550] veth0_vlan: entered promiscuous mode
[  854.631123][ T9048] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  854.646436][T19550] veth1_vlan: entered promiscuous mode
[  854.694018][ T9048] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  854.712242][ T9048] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.722460][ T9048] usb 8-1: Product: syz
[  854.731184][T19550] veth0_macvtap: entered promiscuous mode
[  854.737376][ T9048] usb 8-1: Manufacturer: syz
[  854.742442][ T9048] usb 8-1: SerialNumber: syz
[  854.777281][T19550] veth1_macvtap: entered promiscuous mode
[  854.814749][T19550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.826076][T19550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.841423][T19693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=19693 comm=syz.9.3649
[  854.985765][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  855.009219][T19693] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3649'.
[  855.034748][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  855.034988][T19665] smc: net device bond0 applied user defined pnetid SYZ2
[  855.049695][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  855.088125][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.097955][T19665] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3642'.
[  855.865699][T19696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.874426][T19696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.912830][T19665] smc: removing net device bond0 with user defined pnetid SYZ2
[  855.928157][T19665] bond0 (unregistering): (slave team0): Releasing backup interface
[  855.942931][T19665] bond0 (unregistering): Released all slaves
[  855.995226][ T9048] usb 8-1: 0:2 : does not exist
[  856.006719][ T9048] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5)
[  856.022473][ T9048] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  856.037238][ T9048] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  856.052984][ T9048] usb 8-1: 5:0: failed to get current value for ch 1 (-22)
[  856.111093][T19705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.401609][ T9048] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  856.413324][ T9048] usb 8-1: USB disconnect, device number 62
[  856.433332][T19705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.579091][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.736524][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3657'.
[  857.590204][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.665284][T19728] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3658'.
[  857.688495][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3658'.
[  858.028859][T19736] FAULT_INJECTION: forcing a failure.
[  858.028859][T19736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  858.042359][T19736] CPU: 1 UID: 0 PID: 19736 Comm: syz.7.3659 Not tainted syzkaller #0 PREEMPT(full) 
[  858.042380][T19736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  858.042390][T19736] Call Trace:
[  858.042395][T19736]  <TASK>
[  858.042401][T19736]  dump_stack_lvl+0x16c/0x1f0
[  858.042422][T19736]  should_fail_ex+0x512/0x640
[  858.042449][T19736]  _copy_from_user+0x2e/0xd0
[  858.042474][T19736]  kstrtouint_from_user+0xd6/0x1d0
[  858.042495][T19736]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  858.042521][T19736]  ? lock_acquire+0x179/0x330
[  858.042549][T19736]  proc_fail_nth_write+0x83/0x220
[  858.042577][T19736]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  858.042610][T19736]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  858.042635][T19736]  vfs_write+0x2a0/0x11d0
[  858.042655][T19736]  ? __pfx___mutex_lock+0x10/0x10
[  858.042677][T19736]  ? __pfx_vfs_write+0x10/0x10
[  858.042699][T19736]  ? __fget_files+0x20e/0x3c0
[  858.042728][T19736]  ksys_write+0x12a/0x250
[  858.042742][T19736]  ? __pfx_ksys_write+0x10/0x10
[  858.042762][T19736]  do_syscall_64+0xcd/0xf80
[  858.042777][T19736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.042791][T19736] RIP: 0033:0x7fc47bf8e1ff
[  858.042803][T19736] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  858.042816][T19736] RSP: 002b:00007fc47a1f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  858.042830][T19736] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc47bf8e1ff
[  858.042839][T19736] RDX: 0000000000000001 RSI: 00007fc47a1f60a0 RDI: 0000000000000007
[  858.042847][T19736] RBP: 00007fc47a1f6090 R08: 0000000000000000 R09: 0000000000000000
[  858.042855][T19736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  858.042864][T19736] R13: 00007fc47c1e6218 R14: 00007fc47c1e6180 R15: 00007fff12703e28
[  858.042884][T19736]  </TASK>
[  859.215443][   T30] kauditd_printk_skb: 924 callbacks suppressed
[  859.215580][   T30] audit: type=1400 audit(1764718782.821:1971): avc:  denied  { name_bind } for  pid=19739 comm="syz.0.3660" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  859.305268][T19747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  859.325438][T19748] overlayfs: missing 'workdir'
[  860.701358][T19765] hub 6-0:1.0: USB hub found
[  860.707498][T19765] hub 6-0:1.0: 1 port detected
[  861.539452][ T5823] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  861.719988][ T5823] usb 1-1: Using ep0 maxpacket: 8
[  861.729383][ T5823] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  861.767001][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.870720][T19780] netlink: 'syz.9.3671': attribute type 2 has an invalid length.
[  861.872419][ T5823] usb 1-1: Product: syz
[  861.933816][ T5823] usb 1-1: Manufacturer: syz
[  862.370164][   T30] audit: type=1400 audit(1764718785.777:1972): avc:  denied  { ioctl } for  pid=19779 comm="syz.9.3671" path="socket:[62081]" dev="sockfs" ino=62081 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  862.394846][    C1] vkms_vblank_simulate: vblank timer overrun
[  862.410727][T19787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  862.436230][ T5823] usb 1-1: SerialNumber: syz
[  862.463512][ T5823] usb 1-1: config 0 descriptor??
[  862.801655][ T5823] gspca_main: se401-2.14.0 probing 047d:5003
[  862.917328][T10833] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  863.088314][T10833] usb 8-1: Using ep0 maxpacket: 8
[  863.099306][T19792] fuse: Bad value for 'fd'
[  863.120483][T10833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.161131][   T30] audit: type=1400 audit(1764718786.516:1973): avc:  denied  { ioctl } for  pid=19796 comm="syz.9.3676" path="socket:[62165]" dev="sockfs" ino=62165 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  863.257495][ T5823] gspca_se401: Wrong descriptor type
[  863.269357][T10833] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  863.279422][T10833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.279427][   T30] audit: type=1400 audit(1764718786.544:1974): avc:  denied  { map } for  pid=19796 comm="syz.9.3676" path="socket:[62161]" dev="sockfs" ino=62161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  863.279467][   T30] audit: type=1400 audit(1764718786.544:1975): avc:  denied  { read } for  pid=19796 comm="syz.9.3676" path="socket:[62161]" dev="sockfs" ino=62161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  863.289621][T10833] usb 8-1: Product: syz
[  863.345350][T10833] usb 8-1: Manufacturer: syz
[  863.350028][T10833] usb 8-1: SerialNumber: syz
[  863.360142][T10833] usb 8-1: config 0 descriptor??
[  863.505283][ T6019] usb 1-1: USB disconnect, device number 77
[  863.858452][T10833] usb 8-1: USB disconnect, device number 63
[  863.911540][ T5823] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  864.073270][ T5823] usb 4-1: Using ep0 maxpacket: 32
[  864.079894][ T5823] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  864.088292][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  864.098909][ T5823] usb 4-1: config 0 has no interface number 0
[  864.107403][ T5823] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  864.132213][ T5823] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  864.141523][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.149943][ T5823] usb 4-1: Product: syz
[  864.154144][ T5823] usb 4-1: Manufacturer: syz
[  864.159768][ T5823] usb 4-1: SerialNumber: syz
[  864.248104][ T5823] usb 4-1: config 0 descriptor??
[  864.258967][ T5823] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  864.267517][ T5823] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  864.296349][ T6019] usb 10-1: new full-speed USB device number 47 using dummy_hcd
[  864.725779][ T5823] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  864.733201][ T5823] usbhid 4-1:0.35: couldn't find an input interrupt endpoint
[  864.811026][ T6019] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  864.833355][ T6019] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  864.852036][ T6019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.861855][ T6019] usb 10-1: Product: syz
[  864.867249][ T6019] usb 10-1: Manufacturer: syz
[  864.872124][ T6019] usb 10-1: SerialNumber: syz
[  864.876222][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'.
[  864.913890][ T6019] usb 10-1: config 0 descriptor??
[  865.078128][T19821] netlink: 'syz.0.3684': attribute type 5 has an invalid length.
[  865.257639][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3684'.
[  865.353445][T19827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3677'.
[  865.434203][T19821] geneve2: entered promiscuous mode
[  865.439520][T19821] geneve2: entered allmulticast mode
[  865.446405][ T3512] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  865.455502][ T3512] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  865.464267][ T6019] rc_core: IR keymap rc-streamzap not found
[  865.470163][ T6019] Registered IR keymap rc-empty
[  865.479314][ T3512] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  865.494205][ T6019] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  865.506265][ T3512] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  865.562465][ T6019] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input52
[  865.647479][ T6019] usb 10-1: USB disconnect, device number 47
[  865.647539][    T9] usb 4-1: USB disconnect, device number 95
[  866.020649][T19840] netlink: 'syz.8.3686': attribute type 2 has an invalid length.
[  866.029295][T19840] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3686'.
[  866.173848][T19840] nvme_fabrics: missing parameter 'transport=%s'
[  866.181593][T19840] nvme_fabrics: missing parameter 'nqn=%s'
[  866.325111][T19849] netlink: 'syz.8.3689': attribute type 10 has an invalid length.
[  866.642615][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3689'.
[  866.855026][T19861] netlink: 'syz.0.3691': attribute type 12 has an invalid length.
[  867.375260][T10833] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  867.566205][T10833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  867.576192][T10833] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  867.590790][T19872] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  867.707502][T19853] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  867.718653][T19853] overlayfs: failed to look up (tracing) for ino (-66)
[  867.784855][T10833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.796634][T10833] usb 10-1: config 0 descriptor??
[  868.234570][T10833] lenovo 0003:17EF:6047.0032: item fetching failed at offset 3/5
[  868.243012][T10833] lenovo 0003:17EF:6047.0032: hid_parse failed
[  868.249208][T10833] lenovo 0003:17EF:6047.0032: probe with driver lenovo failed with error -22
[  868.703974][T19877] random: crng reseeded on system resumption
[  869.012349][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  869.023871][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  869.034670][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  869.044908][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  869.052873][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  869.696835][T19888] Bluetooth: hci3: Frame reassembly failed (-84)
[  869.803366][ T3471] Bluetooth: hci3: Frame reassembly failed (-84)
[  870.017369][T19886] ip6_vti0 speed is unknown, defaulting to 1000
[  870.101397][    T9] usb 8-1: new full-speed USB device number 64 using dummy_hcd
[  870.263492][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  870.289896][    T9] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  870.304056][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.320180][    T9] usb 8-1: Product: syz
[  870.324525][    T9] usb 8-1: Manufacturer: syz
[  870.329425][    T9] usb 8-1: SerialNumber: syz
[  870.330302][ T5823] usb 10-1: USB disconnect, device number 48
[  870.341136][    T9] usb 8-1: config 0 descriptor??
[  870.496901][T19903] Bluetooth: hci6: Frame reassembly failed (-84)
[  870.552786][ T5964] Bluetooth: hci6: Frame reassembly failed (-84)
[  870.592653][ T5964] Bluetooth: hci6: Frame reassembly failed (-84)
[  870.860362][    T9] rc_core: IR keymap rc-streamzap not found
[  870.868635][T19886] chnl_net:caif_netlink_parms(): no params data found
[  870.881763][    T9] Registered IR keymap rc-empty
[  870.914139][    T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  870.926265][    T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input53
[  870.960104][    T9] usb 8-1: USB disconnect, device number 64
[  870.989976][T19886] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.997265][T19886] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.005057][T19886] bridge_slave_0: entered allmulticast mode
[  871.012902][T19886] bridge_slave_0: entered promiscuous mode
[  871.021462][T19886] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.028771][T19886] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.040831][T19886] bridge_slave_1: entered allmulticast mode
[  871.051610][T19886] bridge_slave_1: entered promiscuous mode
[  871.078374][T19886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.089794][T19886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.165166][T19886] team0: Port device team_slave_0 added
[  871.173593][T19886] team0: Port device team_slave_1 added
[  871.375560][T19886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.382531][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.537056][T19886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.579727][T19886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.586734][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.612856][T19886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.650133][T19886] hsr_slave_0: entered promiscuous mode
[  871.657180][T19886] hsr_slave_1: entered promiscuous mode
[  871.663662][T19886] debugfs: 'hsr0' already exists in 'hsr'
[  871.669593][T19886] Cannot create hsr debugfs directory
[  871.901154][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  871.983246][ T5829] Bluetooth: hci2: command tx timeout
[  872.027527][T19926] smc: adding net device bond0 with user defined pnetid SYZ2
[  872.038332][T19926] smc: removing net device bond0 with user defined pnetid SYZ2
[  872.046626][T19926] bond0 (unregistering): Released all slaves
[  872.104645][T19886] batman_adv: batadv0: Removing interface: netdevsim0
[  872.167856][T19934] random: crng reseeded on system resumption
[  872.540193][T19886] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  872.549572][ T5823] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[  872.559616][T19886] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  872.570390][T19886] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  872.578138][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3708'.
[  872.591002][T19886] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  872.676325][T19886] 8021q: adding VLAN 0 to HW filter on device bond0
[  872.692037][T19886] 8021q: adding VLAN 0 to HW filter on device team0
[  872.702624][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.709727][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.722196][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.729303][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.732078][ T5823] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  872.752792][T19894] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  872.769630][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.783888][ T5823] usb 9-1: config 0 descriptor??
[  872.799060][T19886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  872.809475][T19886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  873.365354][ T5823] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  873.505628][T19886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.574708][T19886] veth0_vlan: entered promiscuous mode
[  873.584432][ T5823] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2
[  873.596463][T19886] veth1_vlan: entered promiscuous mode
[  873.604049][ T5823] [drm] Initialized udl on minor 2
[  873.649255][T19886] veth0_macvtap: entered promiscuous mode
[  873.658275][T19886] veth1_macvtap: entered promiscuous mode
[  873.681220][T19886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  873.710359][T19886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  873.730344][ T2991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  873.740553][ T2991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  873.749755][ T2991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  873.760526][ T2991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  873.811087][   T48] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  873.854258][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.862274][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.895414][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.904410][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.010290][   T48] usb 10-1: Using ep0 maxpacket: 8
[  874.019155][ T5823] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  874.050439][   T48] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.064906][ T5823] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  874.087206][T19185] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  874.099105][T19185] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  874.112101][ T5823] usb 9-1: USB disconnect, device number 82
[  874.127005][   T48] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  874.179799][   T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.195293][   T48] usb 10-1: Product: syz
[  874.207196][ T5829] Bluetooth: hci2: command tx timeout
[  874.239005][   T48] usb 10-1: Manufacturer: syz
[  874.249820][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'.
[  874.250415][   T48] usb 10-1: SerialNumber: syz
[  874.270828][   T48] usb 10-1: config 0 descriptor??
[  874.497366][T10833] usb 10-1: USB disconnect, device number 49
[  874.835265][T19980] random: crng reseeded on system resumption
[  874.912133][T19185] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  875.072487][T19185] usb 1-1: Using ep0 maxpacket: 8
[  875.168778][T19185] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  875.211986][T19185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.238486][T19185] usb 1-1: Product: syz
[  875.243070][T19185] usb 1-1: Manufacturer: syz
[  875.250688][T19185] usb 1-1: SerialNumber: syz
[  875.281241][T19185] usb 1-1: config 0 descriptor??
[  875.305736][T19185] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  875.645894][   T30] audit: type=1326 audit(1764718798.124:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  875.755255][   T48] usb 8-1: new full-speed USB device number 65 using dummy_hcd
[  875.822642][   T30] audit: type=1326 audit(1764718798.124:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  875.846095][    C1] vkms_vblank_simulate: vblank timer overrun
[  875.873262][T19185] gspca_sonixj: reg_w1 err -110
[  875.879646][T19185] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  875.891492][   T30] audit: type=1326 audit(1764718798.124:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  875.914941][    C1] vkms_vblank_simulate: vblank timer overrun
[  875.930333][   T30] audit: type=1326 audit(1764718798.124:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  875.955464][   T30] audit: type=1326 audit(1764718798.124:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  876.065526][   T30] audit: type=1326 audit(1764718798.124:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72d538df90 code=0x7ffc0000
[  876.090528][   T48] usb 8-1: config 0 has an invalid interface number: 17 but max is 0
[  876.104183][   T48] usb 8-1: config 0 has no interface number 0
[  876.110859][   T30] audit: type=1326 audit(1764718798.124:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  876.157462][   T48] usb 8-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd
[  876.171471][   T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.182085][   T30] audit: type=1326 audit(1764718798.124:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  876.182112][   T30] audit: type=1326 audit(1764718798.124:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  876.182135][   T30] audit: type=1326 audit(1764718798.124:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19974 comm="syz.0.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d538f749 code=0x7ffc0000
[  876.212795][   T48] usb 8-1: Product: syz
[  876.212816][   T48] usb 8-1: Manufacturer: syz
[  876.212829][   T48] usb 8-1: SerialNumber: syz
[  876.214487][   T48] usb 8-1: config 0 descriptor??
[  876.410978][    C1] vkms_vblank_simulate: vblank timer overrun
[  876.442348][ T5829] Bluetooth: hci2: command tx timeout
[  876.450900][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3719'.
[  877.135394][T20007] nvme_fabrics: missing parameter 'transport=%s'
[  877.141917][T20007] nvme_fabrics: missing parameter 'nqn=%s'
[  878.019748][ T9048] usb 1-1: USB disconnect, device number 78
[  878.654617][ T5829] Bluetooth: hci2: command tx timeout
[  879.698463][   T48] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 found
[  879.705408][   T48] usb 8-1: selecting invalid altsetting 5
[  879.716203][   T48] snd_usb_podhd 8-1:0.17: set_interface failed
[  879.722602][   T48] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 now disconnected
[  879.731618][   T48] snd_usb_podhd 8-1:0.17: probe with driver snd_usb_podhd failed with error -22
[  879.742759][   T48] usb 8-1: USB disconnect, device number 65
[  879.905944][T20032] hub 6-0:1.0: USB hub found
[  879.913364][T20032] hub 6-0:1.0: 1 port detected
[  880.486614][T20040] random: crng reseeded on system resumption
[  880.524768][ T9555] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  880.717116][ T9555] usb 10-1: Using ep0 maxpacket: 8
[  880.807900][ T9555] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.841522][ T9555] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  880.861155][T20049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3736'.
[  880.881758][ T9555] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.897232][ T9555] usb 10-1: Product: syz
[  880.901741][ T9555] usb 10-1: Manufacturer: syz
[  880.907043][ T9555] usb 10-1: SerialNumber: syz
[  881.020511][ T9555] usb 10-1: config 0 descriptor??
[  881.520266][    T9] usb 10-1: USB disconnect, device number 50
[  882.483320][T20063] xt_HMARK: proto mask must be zero with L3 mode
[  882.583667][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  882.583701][   T30] audit: type=1400 audit(1764718804.672:2001): avc:  denied  { bind } for  pid=20062 comm="syz.9.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  883.404507][T20072] Bluetooth: hci3: Frame reassembly failed (-84)
[  883.433030][T17721] Bluetooth: hci3: Frame reassembly failed (-84)
[  884.009613][T20075] netlink: 'syz.3.3739': attribute type 1 has an invalid length.
[  884.051454][T20075] input: syz0 as /devices/virtual/input/input54
[  884.895440][T20093] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3749'.
[  884.993707][ T9555] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  885.216670][    T9] IPVS: starting estimator thread 0...
[  885.250126][ T9555] usb 1-1: Using ep0 maxpacket: 8
[  885.257023][ T9555] usb 1-1: unable to get BOS descriptor or descriptor too short
[  885.267415][ T9555] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  885.285636][ T9555] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=44.2b
[  885.294904][ T9555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.302933][ T9555] usb 1-1: Product: syz
[  885.307788][ T9555] usb 1-1: Manufacturer: syz
[  885.312398][ T9555] usb 1-1: SerialNumber: syz
[  885.317195][T20097] IPVS: using max 47 ests per chain, 112800 per kthread
[  885.549318][  T932] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[  885.582299][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  885.762531][ T9555] kvaser_usb 1-1:1.0: error -ENODEV: Cannot get usb endpoint(s)
[  885.795285][  T932] usb 9-1: Using ep0 maxpacket: 8
[  885.804825][  T932] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  885.855997][ T9555] usb 1-1: USB disconnect, device number 79
[  885.868448][  T932] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  885.933797][  T932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.118690][  T932] usb 9-1: Product: syz
[  886.123136][  T932] usb 9-1: Manufacturer: syz
[  886.134362][  T932] usb 9-1: SerialNumber: syz
[  886.165188][  T932] usb 9-1: config 0 descriptor??
[  886.465476][T20109] fuse: Bad value for 'fd'
[  886.479236][ T6453] usb 9-1: USB disconnect, device number 83
[  886.656410][T20118] random: crng reseeded on system resumption
[  887.142287][   T48] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  887.142930][T20130] netlink: 'syz.3.3761': attribute type 2 has an invalid length.
[  887.157935][T20130] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3761'.
[  887.259148][T20127] nvme_fabrics: missing parameter 'transport=%s'
[  887.265585][T20127] nvme_fabrics: missing parameter 'nqn=%s'
[  887.293453][T20134] netlink: 'syz.8.3762': attribute type 21 has an invalid length.
[  887.302588][   T48] usb 1-1: Using ep0 maxpacket: 32
[  887.310127][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3762'.
[  887.314199][   T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  887.322775][T20134] netlink: 'syz.8.3762': attribute type 21 has an invalid length.
[  887.353123][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3762'.
[  887.371162][   T48] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  887.399704][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.425047][   T48] usb 1-1: Product: syz
[  887.438123][   T48] usb 1-1: Manufacturer: syz
[  887.452362][   T48] usb 1-1: SerialNumber: syz
[  887.730677][   T48] usb 1-1: config 0 descriptor??
[  887.743942][   T48] usb 1-1: bad CDC descriptors
[  887.756510][   T48] usb 1-1: unsupported MDLM descriptors
[  888.628658][T20124] overlayfs: failed to resolve './file1': -2
[  888.666386][   T48] usb 1-1: USB disconnect, device number 80
[  888.970367][  T977] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  889.168104][  T977] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  889.177926][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.194063][  T977] usb 4-1: Product: syz
[  889.199151][  T977] usb 4-1: Manufacturer: syz
[  889.207317][  T977] usb 4-1: SerialNumber: syz
[  889.266338][  T977] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  889.301403][ T6453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  890.609544][T20169] Bluetooth: hci3: Frame reassembly failed (-84)
[  891.433072][ T6453] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  891.451904][   T12] Bluetooth: hci3: Frame reassembly failed (-84)
[  891.458345][ T2991] Bluetooth: hci3: Frame reassembly failed (-84)
[  891.472173][ T6453] ath9k_htc: Failed to initialize the device
[  891.898339][ T6453] usb 4-1: ath9k_htc: USB layer deinitialized
[  892.203064][ T9048] usb 4-1: USB disconnect, device number 96
[  892.364499][T20181] netlink: 'syz.7.3773': attribute type 2 has an invalid length.
[  892.372464][T20181] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3773'.
[  892.434475][T10833] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  892.811604][T10833] usb 10-1: Using ep0 maxpacket: 8
[  892.818477][T10833] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.848485][T10833] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  892.851239][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  892.858504][T19894] Bluetooth: hci3: command 0x1003 tx timeout
[  892.969681][T10833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.990339][T10833] usb 10-1: Product: syz
[  893.001602][T10833] usb 10-1: Manufacturer: syz
[  893.011470][T10833] usb 10-1: SerialNumber: syz
[  893.016986][T20189] random: crng reseeded on system resumption
[  893.120139][T20196] hub 6-0:1.0: USB hub found
[  893.125666][T20196] hub 6-0:1.0: 1 port detected
[  893.257868][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  893.552169][T10833] usb 10-1: config 0 descriptor??
[  893.565724][T20179] nvme_fabrics: missing parameter 'transport=%s'
[  893.572504][T20179] nvme_fabrics: missing parameter 'nqn=%s'
[  894.246801][T20203] Bluetooth: hci3: Frame reassembly failed (-84)
[  894.426496][ T3668] Bluetooth: hci3: Frame reassembly failed (-84)
[  894.431813][T10833] usb 10-1: USB disconnect, device number 51
[  895.374101][ T6453] usb 8-1: new full-speed USB device number 66 using dummy_hcd
[  895.744539][ T6453] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  895.766001][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  895.788931][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  895.819908][ T6453] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  895.841098][ T6453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.853366][ T6453] usb 8-1: Product: syz
[  895.858689][ T6453] usb 8-1: Manufacturer: syz
[  895.865180][ T6453] usb 8-1: SerialNumber: syz
[  895.873489][ T6453] usb 8-1: config 0 descriptor??
[  895.886776][ T6453] streamzap 8-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  896.064128][T20227] Invalid source name
[  896.068230][T20227] UBIFS error (pid: 20227): cannot open "./file0", error -22
[  896.079337][T20227] fuse: Bad value for 'fd'
[  896.094919][   T30] audit: type=1400 audit(1764718817.328:2002): avc:  denied  { map } for  pid=20225 comm="syz.8.3787" path="socket:[65704]" dev="sockfs" ino=65704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  896.176158][T10833] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[  896.282817][   T30] audit: type=1400 audit(1764718817.328:2003): avc:  denied  { read } for  pid=20225 comm="syz.8.3787" path="socket:[65704]" dev="sockfs" ino=65704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  896.315635][ T6453] usb 8-1: USB disconnect, device number 66
[  896.529139][T10833] usb 10-1: Using ep0 maxpacket: 32
[  896.571539][T10833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.582968][T10833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.594693][T10833] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  896.614382][T10833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.614722][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  896.630885][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  896.651368][T10833] usb 10-1: config 0 descriptor??
[  896.708946][T10833] hub 10-1:0.0: USB hub found
[  896.996453][T10833] hub 10-1:0.0: 1 port detected
[  897.017828][T20233] netlink: 'syz.0.3789': attribute type 2 has an invalid length.
[  897.025630][T20233] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3789'.
[  897.176281][T20233] nvme_fabrics: missing parameter 'transport=%s'
[  897.182685][T20233] nvme_fabrics: missing parameter 'nqn=%s'
[  898.044404][ T5823] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  898.104372][T10833] hub 10-1:0.0: activate --> -90
[  898.420932][T10833] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[  898.560237][ T5823] usb 4-1: Using ep0 maxpacket: 8
[  898.567465][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.590827][ T5823] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  898.602546][T10833] usb 8-1: Using ep0 maxpacket: 8
[  898.611282][T10833] usb 8-1: config 150 has an invalid interface number: 204 but max is 1
[  898.611800][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.625336][T10833] usb 8-1: config 150 has no interface number 0
[  898.645275][ T5823] usb 4-1: Product: syz
[  898.649463][ T5823] usb 4-1: Manufacturer: syz
[  898.654060][ T5823] usb 4-1: SerialNumber: syz
[  898.681377][ T5823] usb 4-1: config 0 descriptor??
[  898.769371][T10833] usb 8-1: config 150 interface 204 has no altsetting 0
[  898.777625][T10833] usb 8-1: config 150 interface 1 has no altsetting 0
[  898.796326][T10833] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  898.814815][T10833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.824275][T10833] usb 8-1: Product: syz
[  898.828589][T10833] usb 8-1: Manufacturer: syz
[  898.833204][T10833] usb 8-1: SerialNumber: syz
[  898.940477][ T6453] usb 4-1: USB disconnect, device number 97
[  899.063107][T20253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.075668][T20253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.248945][T10833] xr_serial 8-1:150.204: xr_serial converter detected
[  899.261637][ T5995] usb 10-1-port1: cannot reset (err = -71)
[  899.276642][ T5995] usb 10-1-port1: Cannot enable. Maybe the USB cable is bad?
[  899.287469][ T9048] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[  899.296607][T10833] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  899.305218][ T6453] usb 10-1: USB disconnect, device number 52
[  899.312096][ T5995] usb 10-1-port1: cannot disable (err = -71)
[  899.318342][ T5995] usb 10-1-port1: attempt power cycle
[  899.325261][T10833] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  899.346155][T10833] usb 8-1: USB disconnect, device number 67
[  899.353657][T10833] xr_serial 8-1:150.204: device disconnected
[  899.572433][T20274] hub 6-0:1.0: USB hub found
[  899.577751][T20274] hub 6-0:1.0: 1 port detected
[  900.114961][ T9048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.127394][ T9048] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  900.148662][ T9048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.164483][ T9048] usb 9-1: config 0 descriptor??
[  900.186396][T20277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3801'.
[  900.657155][T20288] Bluetooth: hci3: Frame reassembly failed (-84)
[  901.090081][ T3668] Bluetooth: hci3: Frame reassembly failed (-84)
[  901.099724][ T9048] lenovo 0003:17EF:6047.0033: item fetching failed at offset 3/5
[  901.111294][ T9048] lenovo 0003:17EF:6047.0033: hid_parse failed
[  901.122585][ T9048] lenovo 0003:17EF:6047.0033: probe with driver lenovo failed with error -22
[  901.154242][T20293] input: syz1 as /devices/virtual/input/input55
[  902.833521][T20301] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3807'.
[  902.855159][T20301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3807'.
[  902.864281][T19894] Bluetooth: hci3: command 0x1003 tx timeout
[  902.872193][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  903.127925][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3812'.
[  903.141756][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3812'.
[  903.155248][T20314] netlink: 'syz.9.3812': attribute type 19 has an invalid length.
[  903.163491][T20314] netlink: 'syz.9.3812': attribute type 20 has an invalid length.
[  903.448955][T20322] Bluetooth: hci3: Frame reassembly failed (-84)
[  903.620829][   T12] Bluetooth: hci3: Frame reassembly failed (-84)
[  903.911393][   T48] usb 9-1: USB disconnect, device number 84
[  904.048189][ T5995] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[  904.244986][T20330] random: crng reseeded on system resumption
[  904.254336][T20324] netlink: 'syz.9.3815': attribute type 2 has an invalid length.
[  904.262193][T20324] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3815'.
[  904.280147][ T5995] usb 8-1: Using ep0 maxpacket: 8
[  904.286879][ T5995] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  904.300305][ T5995] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  904.313597][ T5995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.331240][ T5995] usb 8-1: Product: syz
[  904.343426][ T5995] usb 8-1: Manufacturer: syz
[  904.355859][ T5995] usb 8-1: SerialNumber: syz
[  904.436106][ T5995] usb 8-1: config 0 descriptor??
[  904.470753][T20324] nvme_fabrics: missing parameter 'transport=%s'
[  904.477168][T20324] nvme_fabrics: missing parameter 'nqn=%s'
[  905.273616][ T5934] usb 8-1: USB disconnect, device number 68
[  905.301221][T20340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3819'.
[  905.314437][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3819'.
[  905.569944][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3820'.
[  905.777477][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  905.785221][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  905.890874][ T6453] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[  906.632708][ T6453] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  906.643171][ T6453] usb 10-1: config 0 has no interfaces?
[  906.650844][ T6453] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  906.668892][ T6453] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.716757][ T6453] usb 10-1: Product: syz
[  906.721028][ T6453] usb 10-1: Manufacturer: syz
[  906.726525][ T6453] usb 10-1: SerialNumber: syz
[  906.739346][ T6453] usb 10-1: config 0 descriptor??
[  906.748662][T20346] fuse: Bad value for 'fd'
[  906.754396][T20346] SELinux:  Context unconfined is not valid (left unmapped).
[  906.764163][   T30] audit: type=1400 audit(1764718827.309:2004): avc:  denied  { relabelto } for  pid=20345 comm="syz.3.3821" name="file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="unconfined"
[  906.812481][   T30] audit: type=1400 audit(1764718827.309:2005): avc:  denied  { associate } for  pid=20345 comm="syz.3.3821" name="file0" dev="tmpfs" ino=114 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined"
[  906.969500][ T6453] usb 10-1: USB disconnect, device number 57
[  907.082473][T20353] Bluetooth: hci3: Frame reassembly failed (-84)
[  907.247099][ T4287] Bluetooth: hci3: Frame reassembly failed (-84)
[  909.534551][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  912.975391][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  921.359638][T20368] Bluetooth: hci3: Frame reassembly failed (-84)
[  921.742152][ T4570] Bluetooth: hci3: Frame reassembly failed (-84)
[  922.388329][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  922.399610][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  922.408433][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  922.416527][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  922.424257][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  922.648839][T20380] hub 6-0:1.0: USB hub found
[  922.654382][T20380] hub 6-0:1.0: 1 port detected
[  923.088837][T20375] ip6_vti0 speed is unknown, defaulting to 1000
[  923.272944][T19894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  923.284509][T19894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  923.293022][T19894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  923.304907][T19894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  923.312590][T19894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  923.368896][T20384] ip6_vti0 speed is unknown, defaulting to 1000
[  923.554451][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  924.141019][T20392] ip6gre1: entered promiscuous mode
[  924.146996][T20392] ip6gre1: entered allmulticast mode
[  924.324331][T20375] chnl_net:caif_netlink_parms(): no params data found
[  924.434916][T20402] Bluetooth: hci3: Frame reassembly failed (-84)
[  924.846305][T19894] Bluetooth: hci6: command tx timeout
[  924.860131][   T30] audit: type=1800 audit(1764718844.239:2006): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3837" name="bus" dev="overlay" ino=144 res=0 errno=0
[  924.867283][ T3668] Bluetooth: hci3: Frame reassembly failed (-84)
[  924.895584][T20401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3837'.
[  924.916137][ T3668] Bluetooth: hci3: Frame reassembly failed (-84)
[  925.003791][T20375] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.011521][T20375] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.018849][T20375] bridge_slave_0: entered allmulticast mode
[  925.027260][T20375] bridge_slave_0: entered promiscuous mode
[  925.046611][T20384] chnl_net:caif_netlink_parms(): no params data found
[  925.071326][T20375] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.079899][T20375] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.087875][T20375] bridge_slave_1: entered allmulticast mode
[  925.097277][T20375] bridge_slave_1: entered promiscuous mode
[  925.201140][T20357] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[  925.380607][T20357] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  925.406299][T20357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.433097][T20357] usb 8-1: config 0 descriptor??
[  925.456634][T20375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  925.466423][T20414] vcan0: tx drop: invalid da for name 0x0000000000ee0000
[  925.476308][T20414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'.
[  925.522599][T19894] Bluetooth: hci0: command tx timeout
[  925.523133][T20375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.627352][T20384] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.712735][T20357] kaweth 8-1:0.0: Firmware present in device.
[  925.712922][T20384] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.728536][T20384] bridge_slave_0: entered allmulticast mode
[  925.741720][T20384] bridge_slave_0: entered promiscuous mode
[  925.937917][T20423] netlink: 'syz.3.3841': attribute type 2 has an invalid length.
[  925.946344][T20357] kaweth 8-1:0.0: Statistics collection: 0
[  925.948068][T20423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3841'.
[  925.964923][T20357] kaweth 8-1:0.0: Multicast filter limit: 0
[  925.971441][T20357] kaweth 8-1:0.0: MTU: 0
[  925.975830][T20357] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00
[  925.975932][T20384] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.990472][T20424] nvme_fabrics: missing parameter 'transport=%s'
[  925.997182][T20424] nvme_fabrics: missing parameter 'nqn=%s'
[  926.004556][T20384] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.011731][T20384] bridge_slave_1: entered allmulticast mode
[  926.018890][T20384] bridge_slave_1: entered promiscuous mode
[  926.027623][T20375] team0: Port device team_slave_0 added
[  926.057247][T20375] team0: Port device team_slave_1 added
[  926.104718][T20384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  926.135222][T20384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  926.149073][T20375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.156742][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.183390][T20375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.214328][T20375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.221755][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.251243][T20375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.300160][T20384] team0: Port device team_slave_0 added
[  926.314859][T20384] team0: Port device team_slave_1 added
[  926.368153][T20384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.418420][T20357] kaweth 8-1:0.0: Error setting SOFS wait
[  926.430710][T20357] kaweth 8-1:0.0: probe with driver kaweth failed with error -5
[  926.451831][T20357] usb 8-1: USB disconnect, device number 69
[  926.463768][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.490092][T20384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.522277][T20375] hsr_slave_0: entered promiscuous mode
[  926.533706][T20375] hsr_slave_1: entered promiscuous mode
[  926.543525][T20375] debugfs: 'hsr0' already exists in 'hsr'
[  926.551743][T20375] Cannot create hsr debugfs directory
[  926.562805][T20384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.570991][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.599728][T20384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.707431][T20384] hsr_slave_0: entered promiscuous mode
[  926.714291][T20384] hsr_slave_1: entered promiscuous mode
[  926.722026][T20384] debugfs: 'hsr0' already exists in 'hsr'
[  926.728014][T20384] Cannot create hsr debugfs directory
[  927.062738][ T5839] Bluetooth: hci3: command 0x1003 tx timeout
[  927.071139][T19894] Bluetooth: hci6: command tx timeout
[  927.076043][T20433] netlink: 165 bytes leftover after parsing attributes in process `syz.7.3843'.
[  927.076744][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  927.745173][ T5829] Bluetooth: hci0: command tx timeout
[  928.244286][T20447] hub 6-0:1.0: USB hub found
[  928.250055][T20447] hub 6-0:1.0: 1 port detected
[  929.069801][T20375] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  929.128286][T20375] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  929.232296][T20375] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  929.258250][ T6453] usb 8-1: new full-speed USB device number 70 using dummy_hcd
[  929.284566][ T5829] Bluetooth: hci6: command tx timeout
[  929.362769][T20375] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  929.492752][ T6453] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  929.504528][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  929.523243][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  929.545535][ T6453] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  929.556736][T20457] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3850'.
[  929.568261][ T6453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.576419][ T6453] usb 8-1: Product: syz
[  929.583102][T20384] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  929.590695][ T6453] usb 8-1: Manufacturer: syz
[  929.610171][ T6453] usb 8-1: SerialNumber: syz
[  929.615738][T20384] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  929.624046][ T6453] usb 8-1: config 0 descriptor??
[  929.640912][ T6453] streamzap 8-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  929.646923][T20384] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  929.791246][T20384] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  929.803772][T20457] nvme_fabrics: missing parameter 'transport=%s'
[  929.810210][T20457] nvme_fabrics: missing parameter 'nqn=%s'
[  930.107774][ T5829] Bluetooth: hci0: command tx timeout
[  930.276854][T20357] usb 8-1: USB disconnect, device number 70
[  930.654236][T20375] 8021q: adding VLAN 0 to HW filter on device bond0
[  930.746269][T20375] 8021q: adding VLAN 0 to HW filter on device team0
[  930.756793][T20475] netlink: 'syz.3.3851': attribute type 2 has an invalid length.
[  930.764850][T20475] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3851'.
[  930.872909][T20486] Bluetooth: hci3: Frame reassembly failed (-84)
[  931.237389][ T3579] Bluetooth: hci3: Frame reassembly failed (-84)
[  931.257029][T20384] 8021q: adding VLAN 0 to HW filter on device bond0
[  931.263870][T20475] nvme_fabrics: missing parameter 'transport=%s'
[  931.270203][T20475] nvme_fabrics: missing parameter 'nqn=%s'
[  931.276432][ T3579] Bluetooth: hci3: Frame reassembly failed (-84)
[  931.298122][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.305242][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.346488][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.353693][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  931.381658][T20384] 8021q: adding VLAN 0 to HW filter on device team0
[  931.407834][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.415024][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.534855][T19894] Bluetooth: hci6: command tx timeout
[  931.752925][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.760098][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  932.289656][T19894] Bluetooth: hci0: command tx timeout
[  932.294877][T20375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  932.460432][T20375] veth0_vlan: entered promiscuous mode
[  932.473253][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  932.528719][T20375] veth1_vlan: entered promiscuous mode
[  933.065725][T20375] veth0_macvtap: entered promiscuous mode
[  933.076966][T20375] veth1_macvtap: entered promiscuous mode
[  933.104460][T20375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  933.134172][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  933.140595][T19894] Bluetooth: hci3: command 0x1003 tx timeout
[  933.228735][T20375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  933.347206][T17721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  933.359697][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.403687][ T3579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.488329][ T3579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.538535][T20523] syz_tun: entered allmulticast mode
[  933.693076][T20523] block device autoloading is deprecated and will be removed.
[  933.702008][    T9] usb 8-1: new full-speed USB device number 71 using dummy_hcd
[  933.816820][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.004284][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  934.264947][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.537091][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  934.554115][    T9] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  934.566618][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.574919][    T9] usb 8-1: Product: syz
[  934.579285][    T9] usb 8-1: Manufacturer: syz
[  934.583851][    T9] usb 8-1: SerialNumber: syz
[  934.606536][    T9] usb 8-1: config 0 descriptor??
[  934.622744][    T9] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  934.652087][T20522] syz_tun: left allmulticast mode
[  934.659132][T20384] veth0_vlan: entered promiscuous mode
[  934.681577][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.691271][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.719310][T20384] veth1_vlan: entered promiscuous mode
[  934.878663][T20384] veth0_macvtap: entered promiscuous mode
[  934.916902][T20384] veth1_macvtap: entered promiscuous mode
[  934.923969][T20521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  934.942340][T20521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  934.953356][T20384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  934.967952][T20384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  934.980449][ T3579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.989801][ T3579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  934.999902][ T3579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  935.010282][ T3579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  935.064137][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  935.072271][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  935.092586][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  935.102249][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  935.207355][ T9555] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  935.218038][    T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  935.378927][    T9] usb 1-1: Using ep0 maxpacket: 16
[  935.385587][ T9555] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  935.385845][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  935.397386][ T9555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  935.406942][ T6453] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  935.418130][ T9555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  935.425667][    T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  935.437039][ T9555] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  935.445432][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.454391][ T9555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.470171][ T9555] usb 3-1: Product: syz
[  935.470889][    T9] usb 1-1: config 0 descriptor??
[  935.474559][ T9555] usb 3-1: Manufacturer: syz
[  935.484120][ T9555] usb 3-1: SerialNumber: syz
[  935.491079][ T9555] usb 3-1: config 0 descriptor??
[  935.498496][ T9555] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  935.619278][ T6453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.629263][ T6453] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  935.638895][ T6453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.649322][ T6453] usb 5-1: config 0 descriptor??
[  935.723795][   T30] audit: type=1400 audit(1764718854.398:2007): avc:  denied  { connect } for  pid=20538 comm="syz.0.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  935.798613][   T30] audit: type=1400 audit(1764718854.417:2008): avc:  denied  { write } for  pid=20538 comm="syz.0.3863" path="socket:[68170]" dev="sockfs" ino=68170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  935.811855][   T48] usb 3-1: USB disconnect, device number 21
[  936.338044][ T6453] lenovo 0003:17EF:6047.0034: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  936.605974][    T9] usb 8-1: USB disconnect, device number 71
[  936.824167][ T6453] lenovo 0003:17EF:6047.0034: Failed to switch middle button: -71
[  936.837497][ T6453] lenovo 0003:17EF:6047.0034: Fn-lock setting failed: -71
[  936.846813][ T6453] lenovo 0003:17EF:6047.0034: Sensitivity setting failed: -71
[  937.781276][ T6453] usb 5-1: USB disconnect, device number 24
[  937.961531][T20571] hub 6-0:1.0: USB hub found
[  937.967592][T20571] hub 6-0:1.0: 1 port detected
[  938.513565][T20573] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.520912][T20573] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.589257][T20573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  938.600320][T20573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  938.690347][ T3940] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.703976][ T3940] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.713021][ T3940] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.723235][ T3940] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.786144][T10833] usb 1-1: USB disconnect, device number 81
[  938.850899][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3873'.
[  939.646045][T20591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3876'.
[  940.220337][T20601] Bluetooth: hci3: Frame reassembly failed (-84)
[  940.266842][T19725] Bluetooth: hci3: Frame reassembly failed (-84)
[  940.879643][T20610] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3883'.
[  940.971368][T20612] binder: BINDER_SET_CONTEXT_MGR already set
[  940.977559][T20612] binder: 20608:20612 ioctl 4018620d 200000004a80 returned -16
[  941.493362][ T9555] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  941.826068][ T9555] usb 5-1: config 0 has an invalid interface number: 17 but max is 0
[  941.837802][ T9555] usb 5-1: config 0 has no interface number 0
[  941.860589][ T9555] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd
[  941.880610][ T9555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.931756][ T9555] usb 5-1: Product: syz
[  941.936941][ T9555] usb 5-1: Manufacturer: syz
[  941.941678][ T9555] usb 5-1: SerialNumber: syz
[  941.958778][ T9555] usb 5-1: config 0 descriptor??
[  942.154284][   T30] audit: type=1400 audit(1764718860.403:2009): avc:  denied  { block_suspend } for  pid=20619 comm="syz.0.3886" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  942.215332][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'.
[  942.277297][ T9555] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 found
[  942.283640][ T9555] usb 5-1: selecting invalid altsetting 5
[  942.483927][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  942.487732][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  942.586081][ T9555] snd_usb_podhd 5-1:0.17: set_interface failed
[  942.592443][ T9555] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 now disconnected
[  942.600370][ T9555] snd_usb_podhd 5-1:0.17: probe with driver snd_usb_podhd failed with error -22
[  942.611415][ T9555] usb 5-1: USB disconnect, device number 25
[  943.807017][T20643] hub 6-0:1.0: USB hub found
[  943.812681][T20643] hub 6-0:1.0: 1 port detected
[  944.947117][   T30] audit: type=1400 audit(1764718863.022:2010): avc:  denied  { write } for  pid=20633 comm="syz.4.3890" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  945.178257][T20656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3894'.
[  945.312819][   T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  945.508154][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  945.554937][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  945.587751][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  945.613289][   T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  945.626062][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.637889][   T10] usb 3-1: Product: syz
[  945.642777][   T10] usb 3-1: Manufacturer: syz
[  945.647694][   T10] usb 3-1: SerialNumber: syz
[  945.663318][   T10] usb 3-1: config 0 descriptor??
[  945.680688][   T10] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  945.902834][   T10] usb 3-1: USB disconnect, device number 22
[  945.921808][   T30] audit: type=1400 audit(1764718863.939:2011): avc:  denied  { append } for  pid=20663 comm="syz.0.3899" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  946.058374][T20666] Bluetooth: hci3: Frame reassembly failed (-84)
[  946.155736][T19725] Bluetooth: hci3: Frame reassembly failed (-84)
[  946.690909][T20679] kAFS: unable to lookup cell '(,'
[  946.764205][ T6453] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  946.785178][T20567] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  946.925836][ T6453] usb 5-1: Using ep0 maxpacket: 8
[  946.935901][ T6453] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  946.944945][ T6453] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  946.955220][ T6453] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  946.965675][ T6453] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  946.976546][ T6453] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  946.989405][T20567] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  946.997468][ T6453] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  947.010696][T20567] usb 1-1: config 0 has no interface number 0
[  947.017120][T20567] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  947.029362][ T6453] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  947.038818][T20567] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  947.051792][ T6453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.061007][T20567] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  947.073129][ T6453] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  947.082409][T20567] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  947.094104][T20567] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  947.102573][T20567] usb 1-1: Product: syz
[  947.107389][T20567] usb 1-1: SerialNumber: syz
[  947.114731][T20567] usb 1-1: config 0 descriptor??
[  947.122263][T20567] cm109 1-1:0.8: invalid payload size 0, expected 4
[  947.130169][T20567] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input57
[  947.358104][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  947.593032][T20567] usb 1-1: USB disconnect, device number 82
[  947.617164][T20567] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  948.165363][T20703] hub 6-0:1.0: USB hub found
[  948.170962][T20703] hub 6-0:1.0: 1 port detected
[  948.346021][ T9555] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  948.367576][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  948.375723][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  948.805775][ T9555] usb 4-1: Using ep0 maxpacket: 8
[  948.984124][ T6453] usb 8-1: new full-speed USB device number 72 using dummy_hcd
[  948.989175][ T9555] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.052442][ T9555] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  949.062978][ T9555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.071260][ T9555] usb 4-1: Product: syz
[  949.206952][T20715] hub 6-0:1.0: USB hub found
[  949.213293][T20715] hub 6-0:1.0: 1 port detected
[  949.994078][T20714] netlink: 'syz.2.3915': attribute type 1 has an invalid length.
[  950.165192][ T9555] usb 4-1: Manufacturer: syz
[  950.166719][ T6453] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  950.169965][ T9555] usb 4-1: SerialNumber: syz
[  950.416772][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  950.436953][   T10] usb 5-1: USB disconnect, device number 26
[  950.527040][ T6453] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  950.555325][ T6453] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  950.572358][ T6453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.591856][ T6453] usb 8-1: Product: syz
[  950.597072][ T9555] usb 4-1: config 0 descriptor??
[  950.600601][ T6453] usb 8-1: Manufacturer: syz
[  950.607932][ T6453] usb 8-1: SerialNumber: syz
[  950.615092][T20726] loop7: detected capacity change from 0 to 2
[  950.629715][ T6453] usb 8-1: config 0 descriptor??
[  950.643319][ T6453] streamzap 8-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  950.697982][T20726] loop7: detected capacity change from 2 to 1
[  950.708597][T20726] Dev loop7: unable to read RDB block 1
[  950.715187][T20726]  loop7: unable to read partition table
[  950.731779][T20726] loop7: partition table beyond EOD, truncated
[  950.738133][T20726] loop_reread_partitions: partition scan of loop7 ((õÉê
—) failed (rc=-5)
[  951.135974][ T5823] usb 8-1: USB disconnect, device number 72
[  951.815382][T20746] Bluetooth: hci3: Frame reassembly failed (-84)
[  951.993598][ T3512] Bluetooth: hci3: Frame reassembly failed (-84)
[  952.280290][ T6453] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  952.650815][ T6453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  952.660039][ T6453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.668261][ T6453] usb 1-1: Product: syz
[  952.672459][ T6453] usb 1-1: Manufacturer: syz
[  952.676627][ T5823] usb 4-1: USB disconnect, device number 98
[  952.696357][ T6453] usb 1-1: SerialNumber: syz
[  952.735168][ T6453] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  952.755215][T20567] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  953.688710][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'.
[  953.697892][T20761] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3929'.
[  954.003405][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  954.010594][T20567] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  954.172475][T20567] ath9k_htc: Failed to initialize the device
[  954.208875][T20567] usb 1-1: ath9k_htc: USB layer deinitialized
[  954.230803][T20772] kAFS: unable to lookup cell '(,'
[  955.833510][ T6453] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  955.935894][   T10] usb 1-1: USB disconnect, device number 83
[  956.064557][ T6453] usb 5-1: Using ep0 maxpacket: 8
[  956.087286][ T6453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  956.678529][ T6453] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  956.689228][ T6453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.699272][ T6453] usb 5-1: Product: syz
[  956.703522][ T6453] usb 5-1: Manufacturer: syz
[  956.708658][ T6453] usb 5-1: SerialNumber: syz
[  956.781738][T20796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  956.794461][ T6453] usb 5-1: config 0 descriptor??
[  956.821923][T20798] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  956.969290][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3941'.
[  956.983299][T20803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3941'.
[  956.992366][T20803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3941'.
[  957.411022][T20805] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  957.497090][ T6453] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[  957.734031][T20810] Bluetooth: hci3: Frame reassembly failed (-84)
[  957.818141][T19705] Bluetooth: hci3: Frame reassembly failed (-84)
[  958.100630][ T6453] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  958.111682][ T6453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.120326][ T6453] usb 8-1: Product: syz
[  958.124600][ T6453] usb 8-1: Manufacturer: syz
[  958.130154][ T6453] usb 8-1: SerialNumber: syz
[  958.139851][ T6453] usb 8-1: config 0 descriptor??
[  958.149642][ T6453] hub 8-1:0.0: bad descriptor, ignoring hub
[  958.157572][ T6453] hub 8-1:0.0: probe with driver hub failed with error -5
[  958.166807][ T6453] f81232 8-1:0.0: f81534a converter detected
[  958.179690][   T10] usb 5-1: USB disconnect, device number 27
[  958.388051][T20798] IPVS: Error connecting to the multicast addr
[  958.406377][ T6453] usb 8-1: f81534a converter now attached to ttyUSB0
[  958.748182][T20357] usb 8-1: USB disconnect, device number 73
[  958.759730][T20357] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  958.768473][T20357] f81232 8-1:0.0: device disconnected
[  958.796227][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  959.507509][ T6453] usb 8-1: new full-speed USB device number 74 using dummy_hcd
[  959.668914][ T6453] usb 8-1: config 0 has an invalid interface number: 17 but max is 0
[  959.677247][ T6453] usb 8-1: config 0 has no interface number 0
[  959.686034][ T6453] usb 8-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd
[  959.696077][ T6453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.704608][ T6453] usb 8-1: Product: syz
[  959.708924][ T6453] usb 8-1: Manufacturer: syz
[  959.717557][ T6453] usb 8-1: SerialNumber: syz
[  959.723867][ T6453] usb 8-1: config 0 descriptor??
[  959.881195][T20567] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  959.902482][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  959.904022][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  960.000732][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3953'.
[  960.019717][ T6453] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 found
[  960.034174][ T6453] usb 8-1: selecting invalid altsetting 5
[  960.053427][ T6453] snd_usb_podhd 8-1:0.17: set_interface failed
[  960.060197][ T6453] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 now disconnected
[  960.075192][T20567] usb 1-1: too many configurations: 164, using maximum allowed: 8
[  960.084714][ T6453] snd_usb_podhd 8-1:0.17: probe with driver snd_usb_podhd failed with error -22
[  960.105093][T20567] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  960.117488][ T6453] usb 8-1: USB disconnect, device number 74
[  960.125089][T20567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.139213][T20567] usb 1-1: config 0 descriptor??
[  960.508080][T20859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3957'.
[  960.523398][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.547671][T20860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3957'.
[  960.587097][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.600540][T19965] usb 1-1: USB disconnect, device number 84
[  960.934862][T20869] IPv6: syztnl2: Disabled Multicast RS
[  961.581164][T19965] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  961.752309][T19965] usb 1-1: Using ep0 maxpacket: 16
[  961.765185][T19965] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  961.787915][T19965] usb 1-1: config 0 has no interface number 0
[  961.803334][T19965] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  961.880109][T19965] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  961.941916][T19965] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 40993, setting to 1024
[  961.955720][T19965] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  961.964846][T19965] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  961.973351][T19965] usb 1-1: Product: syz
[  962.015129][T19965] usb 1-1: SerialNumber: syz
[  962.050941][T19965] usb 1-1: config 0 descriptor??
[  962.064818][T19965] cm109 1-1:0.8: invalid payload size 1024, expected 4
[  962.138526][T19965] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input58
[  962.212965][T20357] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  962.336016][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  962.489683][T20357] usb 3-1: Using ep0 maxpacket: 8
[  962.521111][T20357] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  962.820622][T20357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.837123][T20357] usb 3-1: Product: syz
[  962.847869][T20357] usb 3-1: Manufacturer: syz
[  962.873732][T20357] usb 3-1: SerialNumber: syz
[  962.882675][T20357] usb 3-1: config 0 descriptor??
[  962.883644][   T10] usb 1-1: USB disconnect, device number 85
[  962.887793][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  962.900540][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  962.918314][T20357] gspca_main: se401-2.14.0 probing 047d:5003
[  962.929678][   T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  963.345618][T19965] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  963.359601][T20357] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  963.370139][T20357] se401 3-1:0.0: probe with driver se401 failed with error -71
[  963.385682][T20357] usb 3-1: USB disconnect, device number 23
[  963.526602][T19965] usb 4-1: Using ep0 maxpacket: 32
[  963.536711][T19965] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  963.558919][T19965] usb 4-1: config 0 has no interface number 0
[  963.588151][T19965] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  963.606026][T19965] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  963.641819][T19965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.650192][T19965] usb 4-1: Product: syz
[  963.654390][T19965] usb 4-1: Manufacturer: syz
[  963.659124][T19965] usb 4-1: SerialNumber: syz
[  963.673252][T19965] usb 4-1: config 0 descriptor??
[  963.698140][T20901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  964.135331][T20913] binder: 20909:20913 ioctl 4018620d 0 returned -22
[  964.169084][T20901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  965.360202][T20923] 9pnet_fd: Insufficient options for proto=fd
[  965.392303][   T30] audit: type=1400 audit(1764718882.142:2012): avc:  denied  { write } for  pid=20900 comm="syz.3.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  965.845278][T19965] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  965.869134][T19965] asix 4-1:0.188: probe with driver asix failed with error -61
[  965.985461][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  966.089807][T20932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3978'.
[  966.156688][   T10] usb 3-1: device descriptor read/64, error -71
[  966.304284][T20939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3984'.
[  966.445405][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  966.605504][   T10] usb 3-1: device descriptor read/64, error -71
[  966.616180][T20357] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  966.727191][   T10] usb usb3-port1: attempt power cycle
[  966.781590][T20357] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  966.795051][T20357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  966.807351][T20357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  966.826396][T20357] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  966.835880][T20357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.845813][T20357] usb 1-1: Product: syz
[  966.849983][T20357] usb 1-1: Manufacturer: syz
[  966.854631][T20357] usb 1-1: SerialNumber: syz
[  966.861473][T20357] usb 1-1: config 0 descriptor??
[  966.893078][T20357] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  967.107986][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  967.121371][T20357] usb 1-1: USB disconnect, device number 86
[  967.152472][   T10] usb 3-1: device descriptor read/8, error -71
[  967.407665][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  967.429470][   T10] usb 3-1: device descriptor read/8, error -71
[  967.546748][   T10] usb usb3-port1: unable to enumerate USB device
[  967.610471][T20970] openvswitch: netlink: Message has 592 unknown bytes.
[  967.618417][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  968.452988][T20985] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4002'.
[  968.529107][   T10] usb 4-1: USB disconnect, device number 99
[  968.566769][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3997'.
[  968.881906][ T6453] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  969.171288][ T6453] usb 5-1: Using ep0 maxpacket: 8
[  969.187792][ T6453] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  969.196965][ T6453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.216743][ T6453] usb 5-1: Product: syz
[  969.223360][ T6453] usb 5-1: Manufacturer: syz
[  969.236432][ T6453] usb 5-1: SerialNumber: syz
[  969.259580][ T6453] usb 5-1: config 0 descriptor??
[  969.279880][ T6453] gspca_main: se401-2.14.0 probing 047d:5003
[  969.939940][T21011] syz.0.4010 (21011): /proc/21009/oom_adj is deprecated, please use /proc/21009/oom_score_adj instead.
[  970.052895][ T6453] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  970.063870][ T6453] se401 5-1:0.0: probe with driver se401 failed with error -71
[  970.079801][ T6453] usb 5-1: USB disconnect, device number 28
[  970.432766][   T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  970.605177][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.638814][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  970.676560][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  970.689181][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  970.705877][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  970.715419][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.929829][   T10] usb 1-1: Product: syz
[  970.934031][   T10] usb 1-1: Manufacturer: syz
[  970.953782][T21030] binder: 21023:21030 ioctl c018620c 2000000002c0 returned -1
[  970.997613][   T10] usb 1-1: SerialNumber: syz
[  971.076502][   T10] usb 1-1: config 0 descriptor??
[  971.082840][   T10] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  971.094160][   T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  971.128619][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  971.255990][T20567] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  971.334445][T19965] usb 1-1: USB disconnect, device number 87
[  971.341242][T19965] garmin_gps 1-1:0.0: device disconnected
[  971.802068][T20567] usb 3-1: Using ep0 maxpacket: 8
[  971.810485][T20567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  971.920640][T20567] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  971.930178][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.938576][T20567] usb 3-1: Product: syz
[  971.944685][T20567] usb 3-1: Manufacturer: syz
[  971.961911][T20567] usb 3-1: SerialNumber: syz
[  971.976220][T20567] usb 3-1: config 0 descriptor??
[  972.079101][   T10] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[  972.634979][   T10] usb 8-1: Using ep0 maxpacket: 8
[  972.647436][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.679473][   T10] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  972.702422][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.728744][   T10] usb 8-1: Product: syz
[  972.742144][   T10] usb 8-1: Manufacturer: syz
[  972.746928][   T10] usb 8-1: SerialNumber: syz
[  972.763315][   T10] usb 8-1: config 0 descriptor??
[  972.795061][T20567] usb 3-1: USB disconnect, device number 28
[  973.073698][   T10] usb 8-1: USB disconnect, device number 75
[  974.570340][T21075] hub 6-0:1.0: USB hub found
[  974.575902][T21075] hub 6-0:1.0: 1 port detected
[  974.939514][T21082] fuse: Unknown parameter ''
[  975.081946][   T30] audit: type=1800 audit(1764718891.206:2013): pid=21087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4035" name="bus" dev="overlay" ino=393 res=0 errno=0
[  975.107444][  T932] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  975.280267][  T932] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[  975.289607][  T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.354935][  T932] usb 3-1: Product: syz
[  975.396468][  T932] usb 3-1: Manufacturer: syz
[  975.438076][  T932] usb 3-1: SerialNumber: syz
[  975.833402][  T932] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  976.062992][   T30] audit: type=1404 audit(1764718892.095:2014): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  976.103434][  T932] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  976.200689][  T932] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  976.221582][   T30] audit: type=1400 audit(1764718892.160:2015): avc:  denied  { execmem } for  pid=21096 comm="syz.7.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  976.337118][   T30] audit: type=1400 audit(1764718892.207:2016): avc:  denied  { write } for  pid=21096 comm="syz.7.4039" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  976.378283][   T30] audit: type=1400 audit(1764718892.254:2017): avc:  denied  { read write } for  pid=19886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  976.402538][    C1] vkms_vblank_simulate: vblank timer overrun
[  976.414257][   T30] audit: type=1400 audit(1764718892.319:2018): avc:  denied  { read append } for  pid=21096 comm="syz.7.4039" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  976.431747][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4041'.
[  976.437883][    C1] vkms_vblank_simulate: vblank timer overrun
[  976.453932][   T30] audit: type=1400 audit(1764718892.347:2019): avc:  denied  { read write } for  pid=20384 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  976.462586][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'.
[  976.478741][   T30] audit: type=1400 audit(1764718892.347:2020): avc:  denied  { read write } for  pid=21096 comm="syz.7.4039" dev="sockfs" ino=69616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  976.516810][   T30] audit: type=1400 audit(1764718892.356:2021): avc:  denied  { read } for  pid=21096 comm="syz.7.4039" dev="sockfs" ino=69616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  976.542160][   T30] audit: type=1400 audit(1764718892.356:2022): avc:  denied  { mounton } for  pid=21096 comm="syz.7.4039" path="/533" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  977.445825][T19894] Bluetooth: hci5: command 0x0406 tx timeout
[  978.018850][T19894] Bluetooth: hci5: unexpected event for opcode 0x2028
[  978.034888][T21141] Bluetooth: hci3: Frame reassembly failed (-84)
[  978.043164][T19725] Bluetooth: hci3: Frame reassembly failed (-84)
[  978.065856][T19725] Bluetooth: hci3: Frame reassembly failed (-84)
[  978.081747][T19965] usb 3-1: USB disconnect, device number 29
[  978.189556][T19965] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  978.209399][T19965] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  978.226911][T19965] visor 3-1:1.0: device disconnected
[  978.720403][T21163] netlink: 'syz.2.4063': attribute type 10 has an invalid length.
[  978.730220][T21163] 8021q: adding VLAN 0 to HW filter on device team0
[  978.738228][T21163] bond0: (slave team0): Enslaving as an active interface with an up link
[  980.175345][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  980.324594][T19894] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  980.335461][T19894] CPU: 0 UID: 0 PID: 19894 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  980.335491][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  980.335506][T19894] Workqueue: hci5 hci_rx_work
[  980.335539][T19894] Call Trace:
[  980.335545][T19894]  <TASK>
[  980.335554][T19894]  dump_stack_lvl+0x16c/0x1f0
[  980.335574][T19894]  sysfs_warn_dup+0x7f/0xa0
[  980.335596][T19894]  sysfs_create_dir_ns+0x24b/0x2b0
[  980.335615][T19894]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  980.335632][T19894]  ? find_held_lock+0x2b/0x80
[  980.335656][T19894]  ? do_raw_spin_unlock+0x172/0x230
[  980.335685][T19894]  kobject_add_internal+0x2c4/0x9b0
[  980.335712][T19894]  kobject_add+0x16e/0x240
[  980.335733][T19894]  ? __pfx_kobject_add+0x10/0x10
[  980.335756][T19894]  ? do_raw_spin_unlock+0x172/0x230
[  980.335784][T19894]  ? kobject_put+0xab/0x590
[  980.335811][T19894]  device_add+0x288/0x1950
[  980.335839][T19894]  ? __pfx_dev_set_name+0x10/0x10
[  980.335874][T19894]  ? __pfx_device_add+0x10/0x10
[  980.335902][T19894]  ? mgmt_send_event_skb+0x2fb/0x460
[  980.335942][T19894]  hci_conn_add_sysfs+0x17e/0x230
[  980.335966][T19894]  le_conn_complete_evt+0x1260/0x2150
[  980.336006][T19894]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  980.336034][T19894]  ? hci_event_packet+0x459/0x11c0
[  980.336072][T19894]  hci_le_conn_complete_evt+0x23c/0x370
[  980.336113][T19894]  hci_le_meta_evt+0x357/0x5e0
[  980.336132][T19894]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  980.336165][T19894]  hci_event_packet+0x685/0x11c0
[  980.336194][T19894]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  980.336214][T19894]  ? __pfx_hci_event_packet+0x10/0x10
[  980.336246][T19894]  ? kcov_remote_start+0x384/0x670
[  980.336265][T19894]  ? lockdep_hardirqs_on+0x7c/0x110
[  980.336292][T19894]  hci_rx_work+0x2c9/0xeb0
[  980.336326][T19894]  process_one_work+0x9ba/0x1b20
[  980.336364][T19894]  ? __pfx_process_one_work+0x10/0x10
[  980.336398][T19894]  ? assign_work+0x1a0/0x250
[  980.336424][T19894]  worker_thread+0x6c8/0xf10
[  980.336457][T19894]  ? __kthread_parkme+0x19e/0x250
[  980.336476][T19894]  ? __pfx_worker_thread+0x10/0x10
[  980.336498][T19894]  kthread+0x3c5/0x780
[  980.336519][T19894]  ? __pfx_kthread+0x10/0x10
[  980.336542][T19894]  ? rcu_is_watching+0x12/0xc0
[  980.336560][T19894]  ? __pfx_kthread+0x10/0x10
[  980.336583][T19894]  ret_from_fork+0x855/0xa50
[  980.336601][T19894]  ? __pfx_ret_from_fork+0x10/0x10
[  980.336620][T19894]  ? __switch_to+0x7af/0x10d0
[  980.336640][T19894]  ? __pfx_kthread+0x10/0x10
[  980.336660][T19894]  ret_from_fork_asm+0x1a/0x30
[  980.336696][T19894]  </TASK>
[  980.336772][T19894] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  980.429666][   T30] kauditd_printk_skb: 232 callbacks suppressed
[  980.429680][   T30] audit: type=1400 audit(1764718896.220:2255): avc:  denied  { create } for  pid=21184 comm="syz.0.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0
[  980.434503][T19894] Bluetooth: hci5: failed to register connection device
[  980.469535][   T30] audit: type=1400 audit(1764718896.248:2256): avc:  denied  { read write } for  pid=19886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  980.749275][   T30] audit: type=1400 audit(1764718896.332:2257): avc:  denied  { create } for  pid=21188 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  980.769672][   T30] audit: type=1400 audit(1764718896.332:2258): avc:  denied  { create } for  pid=21188 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0
[  980.808607][   T30] audit: type=1400 audit(1764718896.332:2259): avc:  denied  { allowed } for  pid=21186 comm="syz.2.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  980.829902][   T30] audit: type=1400 audit(1764718896.454:2260): avc:  denied  { create } for  pid=21186 comm="syz.2.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  980.862275][   T30] audit: type=1400 audit(1764718896.463:2261): avc:  denied  { read write } for  pid=19886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  980.908049][   T30] audit: type=1400 audit(1764718896.510:2262): avc:  denied  { read write } for  pid=19550 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  980.972418][   T30] audit: type=1400 audit(1764718896.566:2263): avc:  denied  { write } for  pid=21196 comm="syz.2.4075" name="mcfilter6" dev="proc" ino=4026534470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  981.017127][   T30] audit: type=1400 audit(1764718896.566:2264): avc:  denied  { create } for  pid=21196 comm="syz.2.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0
[  981.437904][T21215] Bluetooth: hci3: Frame reassembly failed (-84)
[  981.444660][ T3579] Bluetooth: hci3: Frame reassembly failed (-84)
[  981.981579][T21227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4081'.
[  983.100593][T21256] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4096'.
[  983.117754][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4096'.
[  983.399128][T21262] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4099'.
[  983.593898][T19894] Bluetooth: hci3: command 0x1003 tx timeout
[  983.601533][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  983.903840][T21282] kAFS: unable to lookup cell '(,'
[  984.304847][T21296] Bluetooth: hci3: Frame reassembly failed (-84)
[  984.320508][ T1135] Bluetooth: hci3: Frame reassembly failed (-84)
[  984.696460][T19894] Bluetooth: hci5: unexpected event for opcode 0x2028
[  984.716163][T21299] Bluetooth: hci4: Frame reassembly failed (-84)
[  984.725487][T17721] Bluetooth: hci4: Frame reassembly failed (-84)
[  986.052128][   T30] kauditd_printk_skb: 301 callbacks suppressed
[  986.052145][   T30] audit: type=1400 audit(1764718901.477:2566): avc:  denied  { write } for  pid=21338 comm="syz.2.4129" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0
[  986.089074][   T30] audit: type=1400 audit(1764718901.505:2567): avc:  denied  { read write } for  pid=21338 comm="syz.2.4129" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0
[  986.225709][   T30] audit: type=1400 audit(1764718901.542:2568): avc:  denied  { prog_load } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.262403][   T30] audit: type=1400 audit(1764718901.654:2569): avc:  denied  { read write } for  pid=20384 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  986.315065][   T30] audit: type=1400 audit(1764718901.664:2570): avc:  denied  { prog_load } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.357365][   T30] audit: type=1400 audit(1764718901.664:2571): avc:  denied  { create } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0
[  986.377517][   T30] audit: type=1400 audit(1764718901.664:2572): avc:  denied  { prog_load } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.404796][   T30] audit: type=1400 audit(1764718901.664:2573): avc:  denied  { map_create } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.511470][ T5839] Bluetooth: hci3: command 0x1003 tx timeout
[  986.522083][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  986.695780][   T30] audit: type=1400 audit(1764718901.664:2574): avc:  denied  { prog_load } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.737510][   T30] audit: type=1400 audit(1764718901.664:2575): avc:  denied  { map_create } for  pid=21340 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  986.884829][T21362] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4135'.
[  986.929174][T19894] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  986.935543][ T5829] Bluetooth: hci4: command 0x1003 tx timeout
[  987.397204][T21385] Bluetooth: hci3: Frame reassembly failed (-84)
[  987.404028][ T2991] Bluetooth: hci3: Frame reassembly failed (-84)
[  987.412624][ T2991] Bluetooth: hci3: Frame reassembly failed (-84)
[  987.747736][T21399] Bluetooth: hci4: Frame reassembly failed (-84)
[  987.758347][T17721] Bluetooth: hci4: Frame reassembly failed (-84)
[  989.580053][ T5839] Bluetooth: hci3: command 0x1003 tx timeout
[  989.580362][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  989.778860][T21442] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4162'.
[  989.807134][T21441] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4162'.
[  989.925545][ T5829] Bluetooth: hci4: command 0x1003 tx timeout
[  989.933083][T19894] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  990.504869][T21468] Bluetooth: hci3: Frame reassembly failed (-84)
[  990.512311][ T3579] Bluetooth: hci3: Frame reassembly failed (-84)
[  990.518736][T17721] Bluetooth: hci3: Frame reassembly failed (-84)
[  990.823709][ T5829] Bluetooth: hci5: unexpected event for opcode 0x2028
[  990.836997][T21474] Bluetooth: hci4: Frame reassembly failed (-84)
[  990.846579][T17721] Bluetooth: hci4: Frame reassembly failed (-84)
[  991.358487][T21494] Cannot find add_set index 1 as target
[  991.554322][   T30] kauditd_printk_skb: 299 callbacks suppressed
[  991.554339][   T30] audit: type=1400 audit(1764718906.612:2875): avc:  denied  { read } for  pid=21492 comm="syz.4.4183" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  991.584309][T21496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4183'.
[  991.595002][   T30] audit: type=1400 audit(1764718906.649:2876): avc:  denied  { create } for  pid=21492 comm="syz.4.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  991.760896][   T30] audit: type=1400 audit(1764718906.818:2877): avc:  denied  { map_create } for  pid=21497 comm="syz.2.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  991.793504][   T30] audit: type=1400 audit(1764718906.846:2878): avc:  denied  { create } for  pid=21497 comm="syz.2.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[  991.888831][   T30] audit: type=1400 audit(1764718906.930:2879): avc:  denied  { prog_load } for  pid=21497 comm="syz.2.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  991.928979][   T30] audit: type=1400 audit(1764718906.939:2880): avc:  denied  { module_request } for  pid=21497 comm="syz.2.4184" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  991.952213][   T30] audit: type=1400 audit(1764718906.939:2881): avc:  denied  { sys_module } for  pid=21497 comm="syz.2.4184" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  991.974134][   T30] audit: type=1400 audit(1764718906.995:2882): avc:  denied  { read } for  pid=21499 comm="syz.2.4185" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  991.995916][   T30] audit: type=1400 audit(1764718907.014:2883): avc:  denied  { create } for  pid=21499 comm="syz.2.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  992.018099][   T30] audit: type=1400 audit(1764718907.052:2884): avc:  denied  { create } for  pid=21499 comm="syz.2.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  992.283061][T21502] erspan0: entered promiscuous mode
[  992.288559][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  992.658801][ T5839] Bluetooth: hci3: command 0x1003 tx timeout
[  992.664395][T19894] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  993.001321][T19894] Bluetooth: hci4: command 0x1003 tx timeout
[  993.001831][ T5829] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  993.694980][   T13] Bluetooth: hci3: Frame reassembly failed (-84)
[  995.020041][T19894] Bluetooth: min 0 < 6
[  995.133308][T21607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4229'.
[  995.142567][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'.
[  995.152734][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'.
[  995.908578][T19894] Bluetooth: hci3: command 0x1003 tx timeout
[  995.908598][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  996.910207][   T30] kauditd_printk_skb: 298 callbacks suppressed
[  996.910228][   T30] audit: type=1400 audit(1764718911.626:3183): avc:  denied  { read write } for  pid=307 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  997.016326][   T30] audit: type=1400 audit(1764718911.710:3184): avc:  denied  { prog_load } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.048604][   T30] audit: type=1400 audit(1764718911.757:3185): avc:  denied  { prog_load } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.048743][   T30] audit: type=1400 audit(1764718911.757:3186): avc:  denied  { prog_load } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.048898][   T30] audit: type=1400 audit(1764718911.757:3187): avc:  denied  { create } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0
[  997.049097][   T30] audit: type=1400 audit(1764718911.757:3188): avc:  denied  { prog_load } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.049269][   T30] audit: type=1400 audit(1764718911.757:3189): avc:  denied  { map_create } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.049403][   T30] audit: type=1400 audit(1764718911.757:3190): avc:  denied  { prog_load } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.049567][   T30] audit: type=1400 audit(1764718911.757:3191): avc:  denied  { map_create } for  pid=21652 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  997.052955][   T30] audit: type=1400 audit(1764718911.757:3192): avc:  denied  { write } for  pid=21652 comm="syz.7.4249" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0
[  997.179762][    C1] vkms_vblank_simulate: vblank timer overrun
[  997.191642][ T5829] Bluetooth: hci6: command tx timeout
[  997.324467][T21660] Bluetooth: hci3: Frame reassembly failed (-84)
[  997.476608][T21671] FAULT_INJECTION: forcing a failure.
[  997.476608][T21671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  997.492763][T21671] CPU: 0 UID: 0 PID: 21671 Comm: syz.0.4255 Not tainted syzkaller #0 PREEMPT(full) 
[  997.492789][T21671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  997.492800][T21671] Call Trace:
[  997.492806][T21671]  <TASK>
[  997.492812][T21671]  dump_stack_lvl+0x16c/0x1f0
[  997.492834][T21671]  should_fail_ex+0x512/0x640
[  997.492864][T21671]  _copy_from_user+0x2e/0xd0
[  997.492889][T21671]  kstrtouint_from_user+0xd6/0x1d0
[  997.492910][T21671]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  997.492936][T21671]  ? lock_acquire+0x179/0x330
[  997.492963][T21671]  proc_fail_nth_write+0x83/0x220
[  997.492991][T21671]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  997.493024][T21671]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  997.493048][T21671]  vfs_write+0x2a0/0x11d0
[  997.493068][T21671]  ? __pfx___mutex_lock+0x10/0x10
[  997.493089][T21671]  ? __pfx_vfs_write+0x10/0x10
[  997.493113][T21671]  ? __fget_files+0x20e/0x3c0
[  997.493141][T21671]  ksys_write+0x12a/0x250
[  997.493158][T21671]  ? __pfx_ksys_write+0x10/0x10
[  997.493177][T21671]  ? fdget+0x187/0x210
[  997.493198][T21671]  do_syscall_64+0xcd/0xf80
[  997.493215][T21671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.493230][T21671] RIP: 0033:0x7f72d538e1ff
[  997.493243][T21671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  997.493257][T21671] RSP: 002b:00007f72d6170030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  997.493272][T21671] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f72d538e1ff
[  997.493283][T21671] RDX: 0000000000000001 RSI: 00007f72d61700a0 RDI: 0000000000000003
[  997.493292][T21671] RBP: 00007f72d6170090 R08: 0000000000000000 R09: 0000000000000000
[  997.493302][T21671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  997.493310][T21671] R13: 00007f72d55e6038 R14: 00007f72d55e5fa0 R15: 00007ffd9bb3f308
[  997.493334][T21671]  </TASK>
[  997.997555][T21679] trusted_key: encrypted_key: insufficient parameters specified
[  999.305324][T21693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4266'.
[  999.315835][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4266'.
[  999.500546][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1001.716824][T21721] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1001.724568][T19894] Bluetooth: hci3: sending frame failed (-49)
[ 1001.731595][T21725] FAULT_INJECTION: forcing a failure.
[ 1001.731595][T21725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1001.737634][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -49
[ 1001.750838][T21725] CPU: 0 UID: 0 PID: 21725 Comm: syz.7.4276 Not tainted syzkaller #0 PREEMPT(full) 
[ 1001.750859][T21725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1001.750869][T21725] Call Trace:
[ 1001.750874][T21725]  <TASK>
[ 1001.750881][T21725]  dump_stack_lvl+0x16c/0x1f0
[ 1001.750901][T21725]  should_fail_ex+0x512/0x640
[ 1001.750926][T21725]  _copy_from_user+0x2e/0xd0
[ 1001.750950][T21725]  snd_seq_write+0x3ed/0x6d0
[ 1001.750974][T21725]  ? __pfx_snd_seq_write+0x10/0x10
[ 1001.750993][T21725]  ? bpf_lsm_file_permission+0x9/0x10
[ 1001.751042][T21725]  ? security_file_permission+0x71/0x210
[ 1001.751066][T21725]  ? rw_verify_area+0xcf/0x6c0
[ 1001.751091][T21725]  ? __pfx_snd_seq_write+0x10/0x10
[ 1001.751109][T21725]  vfs_write+0x2a0/0x11d0
[ 1001.751131][T21725]  ? __pfx_vfs_write+0x10/0x10
[ 1001.751146][T21725]  ? find_held_lock+0x2b/0x80
[ 1001.751163][T21725]  ? __fget_files+0x204/0x3c0
[ 1001.751187][T21725]  ? __fget_files+0x20e/0x3c0
[ 1001.751213][T21725]  ksys_write+0x1f8/0x250
[ 1001.751229][T21725]  ? __pfx_ksys_write+0x10/0x10
[ 1001.751254][T21725]  do_syscall_64+0xcd/0xf80
[ 1001.751272][T21725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.751294][T21725] RIP: 0033:0x7fc47bf8f749
[ 1001.751307][T21725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.751322][T21725] RSP: 002b:00007fc47cd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1001.751337][T21725] RAX: ffffffffffffffda RBX: 00007fc47c1e5fa0 RCX: 00007fc47bf8f749
[ 1001.751347][T21725] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003
[ 1001.751356][T21725] RBP: 00007fc47cd71090 R08: 0000000000000000 R09: 0000000000000000
[ 1001.751365][T21725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1001.751374][T21725] R13: 00007fc47c1e6038 R14: 00007fc47c1e5fa0 R15: 00007fff12703e28
[ 1001.751396][T21725]  </TASK>
[ 1002.677545][   T30] kauditd_printk_skb: 136 callbacks suppressed
[ 1002.677560][   T30] audit: type=1400 audit(1764718917.023:3329): avc:  denied  { execmem } for  pid=21727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1002.739762][   T30] audit: type=1400 audit(1764718917.023:3330): avc:  denied  { prog_load } for  pid=21728 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1002.772206][   T30] audit: type=1400 audit(1764718917.023:3331): avc:  denied  { read } for  pid=21728 comm="syz.2.4279" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1002.910294][   T30] audit: type=1400 audit(1764718917.023:3332): avc:  denied  { read } for  pid=21728 comm="syz.2.4279" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=0
[ 1002.964016][   T30] audit: type=1400 audit(1764718917.023:3333): avc:  denied  { create } for  pid=21728 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1002.985763][   T30] audit: type=1400 audit(1764718917.023:3334): avc:  denied  { read } for  pid=21728 comm="syz.2.4279" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1003.017757][   T30] audit: type=1400 audit(1764718917.023:3335): avc:  denied  { create } for  pid=21728 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1003.053729][   T30] audit: type=1400 audit(1764718917.023:3336): avc:  denied  { create } for  pid=21728 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0
[ 1003.073600][   T30] audit: type=1400 audit(1764718917.023:3337): avc:  denied  { read } for  pid=21728 comm="syz.2.4279" dev="nsfs" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1003.095556][   T30] audit: type=1400 audit(1764718917.023:3338): avc:  denied  { create } for  pid=21728 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1004.220598][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4284'.
[ 1004.803149][T19894] Bluetooth: hci2: command 0x0406 tx timeout
[ 1007.780457][T21779] ip6_vti0 speed is unknown, defaulting to 1000
[ 1008.066571][   T30] kauditd_printk_skb: 100 callbacks suppressed
[ 1008.066587][   T30] audit: type=1400 audit(1764718922.065:3439): avc:  denied  { read } for  pid=21776 comm="syz.4.4296" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[ 1008.098513][T21783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4296'.
[ 1008.138569][   T30] audit: type=1400 audit(1764718922.065:3440): avc:  denied  { create } for  pid=21776 comm="syz.4.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1008.177040][   T30] audit: type=1400 audit(1764718922.112:3441): avc:  denied  { create } for  pid=21777 comm="syz.7.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0
[ 1008.282321][   T30] audit: type=1400 audit(1764718922.261:3442): avc:  denied  { read write } for  pid=307 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1008.695046][   T30] audit: type=1400 audit(1764718922.654:3443): avc:  denied  { read write } for  pid=20384 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1009.263698][   T30] audit: type=1400 audit(1764718923.187:3444): avc:  denied  { execmem } for  pid=21786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1009.308118][   T30] audit: type=1400 audit(1764718923.206:3445): avc:  denied  { create } for  pid=21787 comm="syz.2.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[ 1009.328670][   T30] audit: type=1400 audit(1764718923.206:3446): avc:  denied  { create } for  pid=21787 comm="syz.2.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[ 1009.349503][   T30] audit: type=1400 audit(1764718923.206:3447): avc:  denied  { prog_load } for  pid=21787 comm="syz.2.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1009.369040][   T30] audit: type=1400 audit(1764718923.234:3448): avc:  denied  { prog_load } for  pid=21790 comm="syz.4.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1010.958774][T21796] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4300'.
[ 1013.528058][   T31] INFO: task kworker/u8:22:7503 blocked for more than 143 seconds.
[ 1013.537903][   T31]       Not tainted syzkaller #0
[ 1013.543025][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1013.551742][   T31] task:kworker/u8:22   state:D stack:24088 pid:7503  tgid:7503  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1013.563986][   T31] Workqueue: netns cleanup_net
[ 1013.568761][   T31] Call Trace:
[ 1013.572369][   T31]  <TASK>
[ 1013.575298][   T31]  ? __schedule+0x1149/0x5de0
[ 1013.580040][   T31]  __schedule+0x11c9/0x5de0
[ 1013.584567][   T31]  ? __pfx___schedule+0x10/0x10
[ 1013.589420][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1013.594936][   T31]  ? find_held_lock+0x2b/0x80
[ 1013.599649][   T31]  ? schedule+0x2d7/0x3a0
[ 1013.604990][   T31]  schedule+0xe7/0x3a0
[ 1013.609306][   T31]  afs_cell_purge+0x41f/0x4f0
[ 1013.614325][   T31]  ? __try_to_del_timer_sync+0x110/0x170
[ 1013.616661][   T30] kauditd_printk_skb: 63 callbacks suppressed
[ 1013.616673][   T30] audit: type=1400 audit(1764718927.256:3512): avc:  denied  { read write } for  pid=20384 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1013.619976][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[ 1013.656996][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 1013.662534][   T31]  ? __timer_delete_sync+0x108/0x1b0
[ 1013.667930][   T31]  ? __pfx_afs_net_exit+0x10/0x10
[ 1013.672990][   T31]  afs_net_exit+0x83/0x140
[ 1013.677518][   T31]  ops_undo_list+0x2ee/0xab0
[ 1013.682162][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1013.687875][   T31]  ? cleanup_net+0x347/0x830
[ 1013.692474][   T31]  ? idr_destroy+0x62/0x2e0
[ 1013.696995][   T31]  cleanup_net+0x41b/0x830
[ 1013.701508][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1013.706450][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1013.711297][   T31]  process_one_work+0x9ba/0x1b20
[ 1013.716259][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1013.722161][   T31]  ? assign_work+0x1a0/0x250
[ 1013.726758][   T31]  worker_thread+0x6c8/0xf10
[ 1013.731386][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1013.736404][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1013.741602][   T31]  kthread+0x3c5/0x780
[ 1013.745670][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.750257][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1013.755314][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.759895][   T31]  ret_from_fork+0x855/0xa50
[ 1013.764543][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1013.769652][   T31]  ? __switch_to+0x7af/0x10d0
[ 1013.774493][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.779100][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1013.784760][   T31]  </TASK>
[ 1013.787861][   T31] 
[ 1013.787861][   T31] Showing all locks held in the system:
[ 1013.795809][   T31] 1 lock held by khungtaskd/31:
[ 1013.800649][   T31]  #0: ffffffff8e3c87a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1013.810788][   T31] 2 locks held by getty/5579:
[ 1013.815754][   T31]  #0: ffff8880357e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1013.825520][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1013.835906][   T31] 3 locks held by kworker/u8:22/7503:
[ 1013.841316][   T31]  #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[ 1013.851912][   T31]  #1: ffffc90003eefc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[ 1013.861919][   T31]  #2: ffffffff900fc6f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830
[ 1013.871959][   T31] 5 locks held by kworker/0:3/10833:
[ 1013.877281][   T31]  #0: ffff8880b843a818 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 1013.887467][   T31]  #1: ffff8880b84242c8 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1c55/0x5de0
[ 1013.896191][   T31]  #2: ffff8881432a5078 (&group->avgs_lock){+.+.}-{4:4}, at: psi_avgs_work+0x84/0x200
[ 1013.905817][   T31]  #3: ffff8880b8425f98 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[ 1013.915379][   T31]  #4: ffffffff9ad714f8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[ 1013.925992][   T31] 
[ 1013.928314][   T31] =============================================
[ 1013.928314][   T31] 
[ 1013.936743][   T31] NMI backtrace for cpu 1
[ 1013.936757][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1013.936775][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1013.936784][   T31] Call Trace:
[ 1013.936789][   T31]  <TASK>
[ 1013.936796][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1013.936815][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1013.936837][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1013.936854][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1013.936877][   T31]  watchdog+0xf14/0x1140
[ 1013.936897][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1013.936913][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1013.936929][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1013.936948][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1013.936963][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1013.936977][   T31]  kthread+0x3c5/0x780
[ 1013.936994][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.937012][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1013.937026][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.937043][   T31]  ret_from_fork+0x855/0xa50
[ 1013.937058][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1013.937073][   T31]  ? __switch_to+0x7af/0x10d0
[ 1013.937090][   T31]  ? __pfx_kthread+0x10/0x10
[ 1013.937108][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1013.937136][   T31]  </TASK>
[ 1013.937143][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1014.067955][    C0] NMI backtrace for cpu 0
[ 1014.067969][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1014.067984][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1014.067992][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1014.068010][    C0] Code: e5 76 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 56 2c 00 fb f4 <e9> 8c 27 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1014.068023][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1014.068034][    C0] RAX: 0000000004e91ad3 RBX: 0000000000000000 RCX: ffffffff8b5df429
[ 1014.068043][    C0] RDX: 0000000000000000 RSI: ffffffff8daa1838 RDI: ffffffff8bf1b880
[ 1014.068051][    C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed10170866e5
[ 1014.068059][    C0] R10: ffff8880b843372b R11: 00000000ffffffff R12: 0000000000000000
[ 1014.068068][    C0] R13: ffffffff8e097a80 R14: ffffffff908599d0 R15: 0000000000000000
[ 1014.068076][    C0] FS:  0000000000000000(0000) GS:ffff8881249a3000(0000) knlGS:0000000000000000
[ 1014.068090][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1014.068106][    C0] CR2: 00007f6d939b7198 CR3: 0000000055b1c000 CR4: 00000000003526f0
[ 1014.068114][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1014.068122][    C0] DR3: 0000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1014.068130][    C0] Call Trace:
[ 1014.068135][    C0]  <TASK>
[ 1014.068139][    C0]  default_idle+0x13/0x20
[ 1014.068153][    C0]  default_idle_call+0x6c/0xb0
[ 1014.068167][    C0]  do_idle+0x38d/0x500
[ 1014.068181][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1014.068195][    C0]  cpu_startup_entry+0x4f/0x60
[ 1014.068207][    C0]  rest_init+0x16b/0x2b0
[ 1014.068222][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1014.068236][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1014.068251][    C0]  start_kernel+0x3f6/0x4d0
[ 1014.068264][    C0]  x86_64_start_reservations+0x18/0x30
[ 1014.068279][    C0]  x86_64_start_kernel+0x130/0x190
[ 1014.068293][    C0]  common_startup_64+0x13e/0x148
[ 1014.068312][    C0]  </TASK>
[ 1014.492310][   T30] audit: type=1400 audit(1764718928.079:3513): avc:  denied  { write } for  pid=5806 comm="syz-executor" path="pipe:[3826]" dev="pipefs" ino=3826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[ 1014.530342][   T30] audit: type=1400 audit(1764718928.079:3514): avc:  denied  { write } for  pid=5806 comm="syz-executor" path="pipe:[3826]" dev="pipefs" ino=3826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[ 1014.554236][   T30] audit: type=1400 audit(1764718928.079:3515): avc:  denied  { write } for  pid=5806 comm="syz-executor" path="pipe:[3826]" dev="pipefs" ino=3826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[ 1014.578103][   T30] audit: type=1400 audit(1764718928.107:3516): avc:  denied  { execmem } for  pid=21817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0