last executing test programs:

54m31.627253221s ago: executing program 32 (id=174):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x180)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)

51m47.470446143s ago: executing program 33 (id=668):
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x2, 0x0)

49m18.08359622s ago: executing program 34 (id=1086):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x0)

48m9.849893581s ago: executing program 35 (id=1236):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x21, 0x2, 0x2)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000001000/0x3000)=nil, 0x1000, 0x1, 0x10, r1, 0x82000000)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0xad59)
select(0xff9e, &(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000880)={0x0, 0xea60})
socket(0x10, 0x3, 0x0)

47m47.073170579s ago: executing program 36 (id=1275):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1402200bc2)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001800ac1414aa08001900ffffffff14001f00fe8000000000000000e91cd52200"], 0x58}}, 0x0)

47m5.649616416s ago: executing program 37 (id=1336):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

47m0.198192941s ago: executing program 38 (id=1343):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x1}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)

46m5.344206875s ago: executing program 39 (id=1399):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000380)={[{@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@utf8}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@uni_xlate}, {@fat=@nocase}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlate}]}, 0x26, 0x341, &(0x7f0000000880)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000001380)={0x4, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)

44m9.867086026s ago: executing program 40 (id=1480):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)

41m48.512460884s ago: executing program 41 (id=1602):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x3b3e6000)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)

41m43.823363759s ago: executing program 42 (id=1613):
epoll_create1(0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0)

40m31.937471117s ago: executing program 43 (id=1733):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x79)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

40m30.650438253s ago: executing program 44 (id=1735):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

40m15.279155355s ago: executing program 45 (id=1756):
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x17)

39m58.038104076s ago: executing program 46 (id=1777):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00')
read$FUSE(r2, &(0x7f0000001e80)={0x2020}, 0x2062)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x482142, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080), 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700))
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
recvmsg$unix(r4, 0x0, 0x20)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000040))

39m50.407393236s ago: executing program 47 (id=1782):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0)

37m34.858960974s ago: executing program 48 (id=1817):
listen(0xffffffffffffffff, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1fd, 0x16, 0x2, 0x100, &(0x7f0000000440)="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"})

37m28.187163813s ago: executing program 49 (id=1822):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004200)=""/102392, 0x18ff8)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10)

36m33.868829639s ago: executing program 50 (id=1870):
creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141)
io_setup(0x206, &(0x7f0000000200))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x2)
sendmsg$nl_route(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000)
stat(0x0, &(0x7f0000000980))
gettid()
inotify_init()

36m25.852613671s ago: executing program 51 (id=1876):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0xfff, {{0xa, 0x4e20, 0x7, @empty, 0x1}}, 0x0, 0x9, [{{0xa, 0x4e21, 0x4, @local, 0x58000}}, {{0xa, 0x4e24, 0x2, @mcast1, 0x258}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1}}, {{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x3}}, {{0xa, 0x4e24, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {{0xa, 0x4e24, 0x5fd5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaf}}, {{0xa, 0x4e23, 0x7, @loopback, 0x3}}, {{0xa, 0x4e23, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}}]}, 0x510)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xb, 0x3a, '\\x0\x01\xe29\x00\x00\x00\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

36m19.619354588s ago: executing program 52 (id=1880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setfsgid(0xee00)
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

35m30.977890955s ago: executing program 53 (id=1921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x20040000})
io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

35m29.15407337s ago: executing program 54 (id=1923):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82)
fanotify_init(0x81, 0x40000)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c040)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsopen(&(0x7f00000004c0)='befs\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000400)=@v2={0x5, 0x0, 0x13, 0x27, 0xbb, "0ba5c863c0883a0cdfb1700639193cac15414c3f531bd3e279c42cba750065e5e55f7975dc269cf01642213cfbd4b033602997efcc22676c34f12cace90f569c0f780f979f7426a578dde181f97b903139e155767278bc3cbc6e4e01c4c7b0321046d783dde6559cc59f81e26d49654f92ad7df7223a590e1b22a02774c85c0128c135424fa8f0b600571aa0e7a73a052a98aec2dafe3731330e97f7c3175662db0a9415c2d189ffe1579c0541dc362c90ee0dc64698b0cc9ffcbb"}, 0xc4, 0x2)
close(0x3)

34m21.364598142s ago: executing program 55 (id=1926):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f)

33m47.853739629s ago: executing program 56 (id=1970):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

32m45.027218307s ago: executing program 57 (id=2075):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

31m35.222132283s ago: executing program 58 (id=2196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)

30m57.119972499s ago: executing program 59 (id=2264):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000009000000000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0x0, 0x0}, 0x10)
keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', 0x0)
sendto$inet(r1, 0x0, 0x0, 0x8000, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
ioctl$TCFLSH(r1, 0x540b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000004240))
r5 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
read$FUSE(r3, 0x0, 0x0)
close(0x3)

30m26.352439391s ago: executing program 60 (id=2312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010)

29m52.497539634s ago: executing program 61 (id=2361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
dup(r1)
open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
socket$inet(0x2, 0x2, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)

27m57.941901891s ago: executing program 62 (id=2506):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
socket$xdp(0x2c, 0x3, 0x0)
r4 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

27m40.763330674s ago: executing program 63 (id=2534):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = epoll_create1(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r3, &(0x7f0000000500)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019})
finit_module(r2, 0x0, 0x3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108)

26m53.797754343s ago: executing program 64 (id=2603):
syz_open_dev$usbfs(0x0, 0x513, 0x121101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40800, 0x40)

26m16.18614439s ago: executing program 65 (id=2668):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x8040480)
socket$unix(0x1, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

26m3.764137407s ago: executing program 66 (id=2681):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
close(r0)

25m39.345875688s ago: executing program 67 (id=2703):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000210001050000000800000000000000010000850000000000000000020000000000000000000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019300)='cpu.stat\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r3}, 0x10)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
socket$kcm(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x159)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x4008af13, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x73}, {@in6=@mcast2, 0x4c4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81, 0xe02}, {0xffffffffffffffff, 0x0, 0x1d, 0x5b}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0xd2eb}}]}, 0x148}}, 0x8c4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006300)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)

25m11.046095102s ago: executing program 68 (id=2719):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14)

24m58.352955142s ago: executing program 69 (id=2723):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00')
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x3, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x9], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x5]}, 0x45c)

24m6.417497713s ago: executing program 70 (id=2758):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

23m42.152871758s ago: executing program 71 (id=2782):
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="13f7033d81f474c385ec2f6d99834849e9db53d2a6db88451f9a18b84f855de7246ba9cfc0a937310f400533c19daf465f985b220bebbf774ad5a9746782aa58321cf349a906f950ab33675ef0061349dc450fcc20612f19fb83922e4e37d6326ff05106d4da0695edb81f80f650344d16fcd16bca9eac2ef193db107bda8e223037bd79ea7ffdc65cb9d9e82ec8112a745a91", @ANYRES8=r0], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f0000000480))
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c)
r4 = io_uring_setup(0x261c, &(0x7f0000000300)={0x0, 0xa0e3, 0x8, 0x0, 0x2d8})
io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0)
bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x63)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x5})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)

22m57.049796739s ago: executing program 72 (id=2838):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

22m43.737977725s ago: executing program 73 (id=2860):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x6, 0x7fff1ffe}]})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x4}, 0x14)
flock(r2, 0x4)

22m40.456062363s ago: executing program 74 (id=2865):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)

22m14.73344238s ago: executing program 75 (id=2884):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r3, 0x1)
syz_open_procfs(0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x2, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x3, 0x100, 0x81, 0x4000003})

21m38.068515292s ago: executing program 76 (id=2906):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24fffffffdfc01000000000000000000000000000098850000000000000200010004d4"], 0x48}, 0x1, 0x400000000000000}, 0x0)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
read$FUSE(r2, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8932, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0xc8}}, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, 0x0, 0x0)
ioctl$EVIOCSREP(r6, 0x40084503, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})

20m17.440590257s ago: executing program 77 (id=2949):
openat(0xffffffffffffffff, 0x0, 0x42701, 0x120)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004}, 0x0)
truncate(0x0, 0x24b9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000026c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000002700)={0x10, 0x1, 'client1\x00', 0x2, "feebcfb4d1975c75", "b4cd259950cde1279c49e630ad8e9faee35e6b8354d2dd41e644e6fe8cb478b5", 0x4, 0x400})

19m32.719928106s ago: executing program 78 (id=3000):
creat(0x0, 0x4a)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000ac0), 0x4000000000001dd, 0x40000)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
pidfd_getfd(r1, r1, 0x0)

18m48.74214024s ago: executing program 79 (id=3091):
getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept4$rose(r0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

18m5.290882686s ago: executing program 80 (id=3179):
syz_open_dev$vim2m(0x0, 0xfffffffffffffff9, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
listen(0xffffffffffffffff, 0x2)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

17m51.28920445s ago: executing program 81 (id=3198):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd \xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\x83P\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\xd66hv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfa\x87$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xb9F,e\xfa\xd7\xa2\xeb\xb1\xc9\xbe#\x92\xf3\x19\xe6\x83(\xfe\xf8i\xb9\xc1\xa0w\xea\xbf\xe5\x8d\xe9\x14\x130\xc3\xa5|/_\t\x98\xc3\xa7\x95!\xdf*\a\xd7\xfcv|\xb3Zc\xcf~\xf6\xe2\xa86Q\x9a$\x80\x85\x8b\t\xbf\xe6(\x12\xe0\xe1e\x81x]a\x145\xa7\xd2\n\x11h\xb9\xf5g\xc4%&\xbaRy\x8f\x85Q\xb9W\xe5\x06\xe2\xb3ryk}\x86\xc6\x04\x03i\x10\xa8\xc4\xcd`\xb8\xcfT))\xb7\x15\b%\xc8uC(C\x01\x1by\xbf \x10\xe8k\xea\x80\xd0P|\x11\xe5\xb9\x1d^\x92j\xb0\xa7\x1d', 0x7)
fcntl$addseals(r1, 0x409, 0x2)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x1000000})
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007ac0)={'ip6tnl0\x00', &(0x7f0000007a40)={'syztnl0\x00', 0x0, 0x0, 0xf, 0xf1, 0x5, 0x0, @loopback, @remote, 0x8, 0x7800, 0x4, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007b80)={'ip6tnl0\x00', &(0x7f0000007b00)={'syztnl1\x00', 0x0, 0x6e, 0x1, 0x1, 0x40, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x10, 0xff, 0x8}})
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d1)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r2, 0x0, 0x0, 0x80800)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r5)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x200, 0x0)

16m41.599584219s ago: executing program 82 (id=3302):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
fchownat(r1, &(0x7f0000000080)='./file0\x00', r6, 0x0, 0x1000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f)

15m42.63967291s ago: executing program 83 (id=3434):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000400), 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)={0x2c, r2, 0x309, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
pipe(0x0)

14m57.549416531s ago: executing program 84 (id=3533):
socket$can_raw(0x1d, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00')
read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2062)

14m57.085669795s ago: executing program 85 (id=3532):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x21, 0x2, 0x2)
select(0xff9e, &(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000880)={0x0, 0xea60})

13m51.081465979s ago: executing program 86 (id=3637):
syz_io_uring_setup(0x88f, &(0x7f0000001400)={0x0, 0xddcc, 0x1000, 0x88, 0xbfdffffc}, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
munlock(&(0x7f00002de000/0x8000)=nil, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4c, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x200, 0x0, 0x91, 0x8000, 0x4, 0x81, 0xa4, 0xffb, 0x7, 0x8, 0xc1, 0x4, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x3, 0xfffffffa, 0x0, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x80001c00, 0xb, 0x8, 0xa, 0x8, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7e, 0x6, 0xa, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4007, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x8, 0x3, 0x24, 0x10001, 0x312, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x41, 0x1084, 0x100, 0x5, 0x212, 0x81, 0x1, 0x13, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x5, 0x8, 0x3, 0x4, 0x2, 0x41a, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x9, 0x9, 0x8, 0x7, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

13m30.723133789s ago: executing program 87 (id=3668):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$netlink(0x10, 0x3, 0x15)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r6 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x1)
r7 = openat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40246608, &(0x7f0000000800)={0x4, 0x5, 0xf7, 0x6, 0xe819, 0xe})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, r4, &(0x7f0000000a80)={0x40200, 0x1, 0x8}, &(0x7f0000000ac0)='./file0\x00', 0x18, 0x0, 0x23456})
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1})
lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)

13m21.267717842s ago: executing program 88 (id=3686):
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = inotify_init()
fstat64(r1, &(0x7f0000000040))
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
exit(0x280)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048880, 0x0, 0x0)

12m49.050857141s ago: executing program 89 (id=3722):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffdb)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

12m35.954272365s ago: executing program 90 (id=3734):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

12m19.72903833s ago: executing program 91 (id=3757):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x20000019, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00", 0x44}], 0x1)
sendfile(r4, r4, 0x0, 0x40008)

11m10.916199723s ago: executing program 92 (id=3859):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
syz_usb_connect(0x1, 0x15, 0x0, 0x0)

10m2.39506023s ago: executing program 93 (id=4025):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x840)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES8=r3], 0x1c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

8m26.436730058s ago: executing program 94 (id=4214):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0x4)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB='W}ao=\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030303030303030301d09c98414daa1880a000008"], 0x2a)
close(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_usbip_server_init(0x2)
add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe)

8m25.967066657s ago: executing program 95 (id=4213):
r0 = socket$inet6(0xa, 0x3, 0xff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r2)

8m25.610832031s ago: executing program 96 (id=4216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20040000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}}, 0x810)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'lo\x00', @local})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="23020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x800}, 0x40890)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8})
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)

8m25.156717145s ago: executing program 97 (id=4212):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x6, &(0x7f00000001c0)='P'}], 0x1})
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)

8m24.717916494s ago: executing program 98 (id=4215):
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYBLOB=',rootmode=00000000000000000040000,use'])
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1], 0x0)

7m14.577022965s ago: executing program 99 (id=4240):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/4\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
readv(r2, 0x0, 0x0)
syz_usbip_server_init(0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)

6m15.060967937s ago: executing program 3 (id=4414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000584000/0x3000)=nil, 0x3000, 0xf)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)

6m9.467442375s ago: executing program 3 (id=4418):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

6m8.487930918s ago: executing program 3 (id=4423):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
shutdown(r0, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f00003f6000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
r3 = dup(r1)
r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000240))
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}})

6m6.907881128s ago: executing program 3 (id=4428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000584000/0x3000)=nil, 0x3000, 0xf)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)

6m5.258194527s ago: executing program 3 (id=4432):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f46ad154cf9276d4", 0x2e}, {&(0x7f0000000180)="d3340081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)

6m2.738547361s ago: executing program 3 (id=4433):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)

5m52.249973623s ago: executing program 100 (id=4426):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00')
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f})

5m47.236806863s ago: executing program 101 (id=4433):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)

5m23.235307074s ago: executing program 9 (id=4486):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

5m21.111231256s ago: executing program 9 (id=4488):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)

5m18.901818043s ago: executing program 9 (id=4492):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x470bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
close(r1)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}})

5m17.082345504s ago: executing program 9 (id=4495):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

5m15.69712074s ago: executing program 9 (id=4497):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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")
rename(0x0, &(0x7f00000000c0)='./file0/file0\x00')
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file7\x00', 0x14444, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', 0x0)

5m13.079300051s ago: executing program 9 (id=4502):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00')
lseek(r2, 0x9, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000f4003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000001a0005400000002120000000020a01010000000000000000010000060c000440000000000000000114000000100001000000"], 0xa4}}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x802, 0x1)

5m9.752500275s ago: executing program 5 (id=4505):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
poll(&(0x7f0000000180)=[{r0, 0x1000}, {}, {r1, 0x20}, {r0, 0x100}], 0x4, 0xd2f1)

5m7.163659277s ago: executing program 5 (id=4509):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3)
syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

5m5.141864876s ago: executing program 5 (id=4511):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)

5m3.766318459s ago: executing program 5 (id=4513):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x88, r3, 0x1, 0x470bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="7d8cc6decdc2", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x24}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0xfc, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
close(r1)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}})

4m58.865897656s ago: executing program 5 (id=4516):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r1)

4m58.218528599s ago: executing program 5 (id=4517):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4)
r2 = getpgid(0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil)
connect$inet(r5, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0x1}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, &(0x7f0000000140)=0x57fd, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000ff0000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110)

4m57.623230874s ago: executing program 102 (id=4502):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00')
lseek(r2, 0x9, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000f4003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000001a0005400000002120000000020a01010000000000000000010000060c000440000000000000000114000000100001000000"], 0xa4}}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x802, 0x1)

4m42.550307464s ago: executing program 103 (id=4517):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4)
r2 = getpgid(0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil)
connect$inet(r5, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0x1}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, &(0x7f0000000140)=0x57fd, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000ff0000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110)

3m13.753140424s ago: executing program 0 (id=4835):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000cc0)={0xf0e})

3m13.053367858s ago: executing program 0 (id=4840):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

3m9.954024687s ago: executing program 0 (id=4845):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000cc0)={0xf0e})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r3, &(0x7f0000000080)=""/1, 0x1)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, './cgroup/cgroup.procs\x00'}, 0x6e)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000b"], 0x0)
socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, 0x0, 0x0)
r7 = fsmount(r4, 0x1, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043250040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x4c)

3m8.228782128s ago: executing program 0 (id=4853):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {0x1}, {0x80}, @connect={{0x40, 0x5}, {0x80, 0xf}}}], 0x38)

3m7.638275693s ago: executing program 0 (id=4856):
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
dup2(r0, r1)

3m6.324488477s ago: executing program 0 (id=4861):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x6, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
pipe(&(0x7f0000000080))

2m50.832337439s ago: executing program 104 (id=4861):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x6, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
pipe(&(0x7f0000000080))

2m28.48979189s ago: executing program 7 (id=4961):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f46ad1", 0x29}], 0x1}}], 0x1, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)

2m26.815484705s ago: executing program 7 (id=4962):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a29000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m25.58579509s ago: executing program 7 (id=4965):
unshare(0x26020480)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0)

2m24.947177333s ago: executing program 7 (id=4966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)

2m23.883243655s ago: executing program 7 (id=4971):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f46ad1", 0x29}], 0x1}}], 0x1, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)

2m22.461723722s ago: executing program 7 (id=4974):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc})
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[])
mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0xe2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400000200f1ffffff000000009e84ec6298aa06a3745cd44d2e0088088663bb29c6a332181723d8d508bc8cf1a253e263861a694b4ccb5b96d159f8a64fa69acb6502941400"/87, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c00028006000200010000000800", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

2m6.92738852s ago: executing program 105 (id=4974):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc})
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[])
mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0xe2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400000200f1ffffff000000009e84ec6298aa06a3745cd44d2e0088088663bb29c6a332181723d8d508bc8cf1a253e263861a694b4ccb5b96d159f8a64fa69acb6502941400"/87, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c00028006000200010000000800", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

11.987720844s ago: executing program 4 (id=5330):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

11.370238751s ago: executing program 4 (id=5334):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
io_uring_enter(0xffffffffffffffff, 0x290d, 0xc647, 0x3a, &(0x7f0000000040)={[0x9, 0x800]}, 0x8)
listen(r0, 0x3)
r1 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0xffffffff, 0xfffff7fd}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffceb, 0x0}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x5b43, 0x8200, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
r6 = socket$netlink(0x10, 0x3, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x88)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r8, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x4, 0x0, &(0x7f0000000180))
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r11, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000000200)={0xa0000004})
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600110001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

11.132358675s ago: executing program 2 (id=5337):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd2800082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x108, 0x0, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2})
r8 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5)
ioctl$FS_IOC_RESVSP(r8, 0x402c5828, 0x0)
times(&(0x7f0000000080))
io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0xfe}, @remote, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

10.383428785s ago: executing program 1 (id=5338):
r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\\b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)

9.949972484s ago: executing program 4 (id=5339):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x0, 0x0})

9.825868987s ago: executing program 8 (id=5340):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9.531470033s ago: executing program 6 (id=5341):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.354967127s ago: executing program 2 (id=5342):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, 0x0)

9.258101314s ago: executing program 8 (id=5343):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000100)={'ip6gre0\x00', @ifru_names='dvmrp0\x00'})

9.257511927s ago: executing program 1 (id=5344):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

9.229418599s ago: executing program 4 (id=5345):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/241)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)="3b9980b14adc5bc5894a75631e3aacf765d734e3a35864b4e0ab28f78d39261ba779c1412826e4f7d1e07fdc4361ce6ebeb15f5514cab77b3dc80f8cc45802", 0x3f}], 0x1)

8.654231433s ago: executing program 6 (id=5346):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0)

8.55366916s ago: executing program 2 (id=5347):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
unshare(0xc040480)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
shutdown(r3, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]})

8.538247079s ago: executing program 8 (id=5348):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

8.499930507s ago: executing program 1 (id=5349):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
io_uring_enter(0xffffffffffffffff, 0x290d, 0xc647, 0x3a, &(0x7f0000000040)={[0x9, 0x800]}, 0x8)
listen(r0, 0x3)
r1 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0xffffffff, 0xfffff7fd}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffceb, 0x0}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x5b43, 0x8200, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
r6 = socket$netlink(0x10, 0x3, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x88)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r8, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x4, 0x0, &(0x7f0000000180))
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r11, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000000200)={0xa0000004})
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600110001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

8.432696478s ago: executing program 4 (id=5350):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c00000ee00000000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x6, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
pipe(&(0x7f0000000080))

7.874149916s ago: executing program 8 (id=5351):
unshare(0x26020480)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, 0x0)
io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0)

7.873629574s ago: executing program 6 (id=5352):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

6.227875956s ago: executing program 1 (id=5353):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.746962821s ago: executing program 8 (id=5354):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='reno', 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
sendmmsg$inet6(r2, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce31", 0x2}], 0x1}}], 0x1, 0x20040001)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x7fff}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

2.702138878s ago: executing program 2 (id=5355):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

2.679140166s ago: executing program 6 (id=5356):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x4001, 0x80000)
r3 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0xf, 0x2, r3})

1.826180539s ago: executing program 1 (id=5357):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

894.061814ms ago: executing program 6 (id=5358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

818.142214ms ago: executing program 2 (id=5359):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

553.749513ms ago: executing program 8 (id=5360):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/241)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)="3b9980b14adc5bc5894a75631e3aacf765d734e3a35864b4e0ab28f78d39261ba779c1412826e4f7d1e07fdc4361ce6ebeb15f5514cab77b3dc80f8cc45802", 0x3f}], 0x1)

532.275811ms ago: executing program 1 (id=5361):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

116.791197ms ago: executing program 6 (id=5362):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000040036800c0001809afe0609"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)

66.399308ms ago: executing program 4 (id=5363):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x4, 0x0, 0x7fffffff, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], <r2=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r1, r0, 0x25, 0x1, @val=@tcx={@void, @value=r1, @void, @void, r2}}, 0x1c)
syz_emit_ethernet(0x116e, &(0x7f00000030c0)=ANY=[], 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x4000080)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000})
r10 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x82802, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xb)
syz_open_dev$tty1(0xc, 0x4, 0x3)
accept4$ax25(r7, &(0x7f00000001c0)={{0x3, @rose}, [@null, @default, @netrom, @default, @rose, @remote, @null, @netrom]}, &(0x7f0000000240)=0x48, 0x800)

0s ago: executing program 2 (id=5364):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x401, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x3c}, 0x1, 0xa0000000, 0x0, 0x80}, 0x20000800)

kernel console output (not intermixed with test programs):

15898][T24132] bridge_slave_0: entered allmulticast mode
[ 3229.125256][T24132] bridge_slave_0: entered promiscuous mode
[ 3229.193568][T24132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3229.201396][T24132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3229.217720][T24132] bridge_slave_1: entered allmulticast mode
[ 3229.226783][T24132] bridge_slave_1: entered promiscuous mode
[ 3230.189137][T23243] Bluetooth: hci4: command tx timeout
[ 3230.209679][T24132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3230.390085][T24132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3230.590314][T24189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4461'.
[ 3230.741134][T24191] netlink: 27 bytes leftover after parsing attributes in process `syz.9.4461'.
[ 3231.013122][T24132] team0: Port device team_slave_0 added
[ 3231.045612][ T1124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3231.150130][T23243] Bluetooth: hci3: command tx timeout
[ 3231.180915][T24194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3231.188525][T24195] syzkaller0: entered promiscuous mode
[ 3231.194836][T24195] syzkaller0: entered allmulticast mode
[ 3231.231968][T24132] team0: Port device team_slave_1 added
[ 3231.275687][T24192] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 3231.352348][ T1124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3231.554311][T24192] tipc: Resetting bearer <eth:syzkaller0>
[ 3231.632500][ T1124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3231.742413][T24190] tipc: Resetting bearer <eth:syzkaller0>
[ 3231.777317][T24190] tipc: Disabling bearer <eth:syzkaller0>
[ 3231.879497][T24132] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3231.887817][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3231.914655][T24132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3231.928954][T24170] chnl_net:caif_netlink_parms(): no params data found
[ 3232.014250][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3232.091751][T24132] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3232.098843][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3232.125364][T24132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3232.270710][T23243] Bluetooth: hci4: command tx timeout
[ 3233.469210][T24207] loop6: detected capacity change from 0 to 2640
[ 3233.478693][T24207] buffer_io_error: 11 callbacks suppressed
[ 3233.478778][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.493540][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.501889][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.517155][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.527778][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.536135][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.544495][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.552788][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.560809][T24207] ldm_validate_partition_table(): Disk read failed.
[ 3233.567852][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.576149][T24207] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3233.584478][T24207] Dev loop6: unable to read RDB block 0
[ 3233.590788][T24207]  loop6: unable to read partition table
[ 3234.096201][T24207] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 3234.414062][T23243] Bluetooth: hci4: command tx timeout
[ 3235.423748][ T1124] bridge_slave_1: left allmulticast mode
[ 3235.429580][ T1124] bridge_slave_1: left promiscuous mode
[ 3235.436126][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3235.599104][ T1124] bridge_slave_0: left allmulticast mode
[ 3235.605131][ T1124] bridge_slave_0: left promiscuous mode
[ 3235.611527][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3235.727740][T24210] loop9: detected capacity change from 0 to 2048
[ 3235.786948][T24210] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3235.839039][T24210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3236.413020][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3236.435754][T23243] Bluetooth: hci4: command tx timeout
[ 3236.466053][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3236.510208][ T1124] bond0 (unregistering): Released all slaves
[ 3236.649792][T24132] hsr_slave_0: entered promiscuous mode
[ 3236.660733][T24132] hsr_slave_1: entered promiscuous mode
[ 3236.669225][T24132] debugfs: 'hsr0' already exists in 'hsr'
[ 3236.675247][T24132] Cannot create hsr debugfs directory
[ 3236.857458][ T1124] tipc: Left network mode
[ 3238.543439][T24170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3238.551340][T24170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3238.559372][T24170] bridge_slave_0: entered allmulticast mode
[ 3238.569484][T24170] bridge_slave_0: entered promiscuous mode
[ 3238.927830][ T1124] hsr_slave_0: left promiscuous mode
[ 3240.285860][ T1124] hsr_slave_1: left promiscuous mode
[ 3240.294168][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3240.302026][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3241.276972][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3241.286799][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3243.399313][ T1124] veth1_macvtap: left promiscuous mode
[ 3243.405909][ T1124] veth0_macvtap: left promiscuous mode
[ 3243.412249][ T1124] veth1_vlan: left promiscuous mode
[ 3243.417817][ T1124] veth0_vlan: left promiscuous mode
[ 3244.451632][ T1124] team0 (unregistering): Port device team_slave_1 removed
[ 3244.634854][ T1124] team0 (unregistering): Port device team_slave_0 removed
[ 3245.123030][T24170] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3245.130606][T24170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3245.139378][T24170] bridge_slave_1: entered allmulticast mode
[ 3245.149526][T24170] bridge_slave_1: entered promiscuous mode
[ 3245.207846][T24236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3245.316850][T24237] syzkaller0: entered promiscuous mode
[ 3245.322895][T24237] syzkaller0: entered allmulticast mode
[ 3245.525447][T24170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3245.569926][T24237] tipc: Resetting bearer <eth:syzkaller0>
[ 3245.596744][T24237] tipc: Disabling bearer <eth:syzkaller0>
[ 3245.683258][T24170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3246.185863][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3246.410979][T24170] team0: Port device team_slave_0 added
[ 3246.679798][T24170] team0: Port device team_slave_1 added
[ 3246.824065][T24252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4480'.
[ 3246.855170][ T1124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3247.121129][ T1124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3247.179545][T24170] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3247.187074][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3247.213575][T24170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3247.300683][ T1124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3247.398188][T24170] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3247.405701][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3247.432149][T24170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3247.532433][ T1124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3247.891846][T24132] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3247.949140][T24170] hsr_slave_0: entered promiscuous mode
[ 3247.968357][T24170] hsr_slave_1: entered promiscuous mode
[ 3247.977649][T24170] debugfs: 'hsr0' already exists in 'hsr'
[ 3247.983733][T24170] Cannot create hsr debugfs directory
[ 3248.059522][T24132] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3248.197794][T24132] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3248.319234][ T1124] bridge_slave_1: left allmulticast mode
[ 3248.325375][ T1124] bridge_slave_1: left promiscuous mode
[ 3248.332105][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3248.376500][ T1124] bridge_slave_0: left allmulticast mode
[ 3248.382409][ T1124] bridge_slave_0: left promiscuous mode
[ 3248.389201][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3249.670854][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3249.698033][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3249.726538][ T1124] bond0 (unregistering): Released all slaves
[ 3249.748671][T24132] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3249.988656][ T1124] tipc: Left network mode
[ 3250.605010][ T1124] hsr_slave_0: left promiscuous mode
[ 3250.636065][ T1124] hsr_slave_1: left promiscuous mode
[ 3250.644504][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3250.653549][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3250.719151][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3250.731857][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3250.776629][T24273] loop5: detected capacity change from 0 to 2048
[ 3250.807409][ T1124] veth1_macvtap: left promiscuous mode
[ 3250.813287][ T1124] veth0_macvtap: left promiscuous mode
[ 3250.819800][ T1124] veth1_vlan: left promiscuous mode
[ 3250.825399][ T1124] veth0_vlan: left promiscuous mode
[ 3251.127311][T24273] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3251.316907][T24273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3251.992009][T24275] loop6: detected capacity change from 0 to 2640
[ 3252.000513][T24275] buffer_io_error: 11 callbacks suppressed
[ 3252.000598][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.014814][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.023158][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.031608][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.039846][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.048464][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.049391][ T1124] team0 (unregistering): Port device team_slave_1 removed
[ 3252.056588][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.056762][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.087476][T24275] ldm_validate_partition_table(): Disk read failed.
[ 3252.094370][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.102715][T24275] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3252.111751][T24275] Dev loop6: unable to read RDB block 0
[ 3252.118151][T24275]  loop6: unable to read partition table
[ 3252.232673][T24275] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 3253.959782][T24285] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4490'.
[ 3254.934850][T24132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3254.998473][T24132] 8021q: adding VLAN 0 to HW filter on device team0
[ 3255.062969][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3255.070689][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3255.170880][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3255.178657][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3255.308876][T24170] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3255.396623][T24170] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3255.521713][T24170] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3255.602944][T24170] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3257.463027][T24170] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3257.683970][T24170] 8021q: adding VLAN 0 to HW filter on device team0
[ 3257.759916][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3257.767404][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3257.864521][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3257.872183][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3258.443153][T24132] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3258.474500][T24316] loop9: detected capacity change from 0 to 2048
[ 3258.594940][T24316] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3258.670061][T24316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3258.897486][T24321] loop6: detected capacity change from 0 to 2640
[ 3258.909210][T24321] buffer_io_error: 11 callbacks suppressed
[ 3258.909293][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.923905][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.937092][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.948516][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.956881][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.965251][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.973697][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.981824][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3258.990111][T24321] ldm_validate_partition_table(): Disk read failed.
[ 3258.997250][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3259.005614][T24321] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3259.015306][T24321] Dev loop6: unable to read RDB block 0
[ 3259.021575][T24321]  loop6: unable to read partition table
[ 3259.147252][T24132] veth0_vlan: entered promiscuous mode
[ 3259.277484][T24132] veth1_vlan: entered promiscuous mode
[ 3259.344792][T24321] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 3259.608263][T24132] veth0_macvtap: entered promiscuous mode
[ 3259.717475][T24132] veth1_macvtap: entered promiscuous mode
[ 3260.013691][T24132] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3260.176257][T24132] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3260.266017][T24170] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3260.312304][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3260.344908][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3260.403460][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3261.194698][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3261.708240][T24170] veth0_vlan: entered promiscuous mode
[ 3261.904878][T24170] veth1_vlan: entered promiscuous mode
[ 3262.085823][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4502'.
[ 3262.468991][T24170] veth0_macvtap: entered promiscuous mode
[ 3262.502378][T24170] veth1_macvtap: entered promiscuous mode
[ 3262.648718][T24170] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3262.757650][T24170] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3262.806779][T24338] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3262.813414][T24338] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 3262.867548][T22715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3262.897050][T22715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3262.931176][T22715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3262.964875][T22715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3263.010440][T24338] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 3263.017998][T24338] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 3263.092609][T24338] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[ 3263.103290][T24338] Bluetooth: hci9: Opcode 0x0406 failed: -4
[ 3263.287944][T24338] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3263.294395][T24338] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 3263.495199][T24338] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 3263.598198][T24338] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 3263.604658][T24338] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 3263.791209][T24338] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 3264.127527][T18798] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[ 3264.342378][T18798] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 3264.350846][T18798] usb 6-1: config 0 has no interface number 0
[ 3264.360973][T18798] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 3264.377123][T18798] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 3264.388672][T23243] Bluetooth: hci1: command 0x0406 tx timeout
[ 3264.396362][T18798] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 3264.406164][T18798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3264.547048][T18798] usb 6-1: config 0 descriptor??
[ 3264.556349][T24356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3264.647907][T18798] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 3264.925515][T18808] usb 6-1: USB disconnect, device number 18
[ 3265.099936][T23243] Bluetooth: hci9: command 0x0406 tx timeout
[ 3265.107931][T23243] Bluetooth: hci8: command 0x0406 tx timeout
[ 3265.341423][T23243] Bluetooth: hci3: command 0x0c1a tx timeout
[ 3265.671046][T23243] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3265.711260][T24372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3265.732815][T24372] syzkaller0: entered promiscuous mode
[ 3265.748358][T24372] syzkaller0: entered allmulticast mode
[ 3265.802410][T24372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 3265.928984][T24370] tipc: Resetting bearer <eth:syzkaller0>
[ 3265.995722][T24370] tipc: Disabling bearer <eth:syzkaller0>
[ 3266.469482][T23243] Bluetooth: hci1: command 0x0406 tx timeout
[ 3266.829468][T24379] loop6: detected capacity change from 0 to 2640
[ 3266.837737][T24379] buffer_io_error: 11 callbacks suppressed
[ 3266.837815][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.852294][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.861437][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.870403][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.878513][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.886852][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.895311][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.903634][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.911854][T24379] ldm_validate_partition_table(): Disk read failed.
[ 3266.918724][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.931864][T24379] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3266.942589][T24379] Dev loop6: unable to read RDB block 0
[ 3266.948845][T24379]  loop6: unable to read partition table
[ 3267.091997][T24379] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 3267.140329][T24385] loop7: detected capacity change from 0 to 2048
[ 3267.193411][T23243] Bluetooth: hci8: command 0x0406 tx timeout
[ 3267.194424][T21083] Bluetooth: hci9: command 0x0406 tx timeout
[ 3267.255851][T24385] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3267.361980][T24385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3267.420453][T21083] Bluetooth: hci3: command 0x0c1a tx timeout
[ 3267.743987][T21083] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3269.502004][T21083] Bluetooth: hci3: command 0x0c1a tx timeout
[ 3269.534171][T10370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3269.542588][T10370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3269.779669][T10647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3269.788546][T10647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3269.838842][T21083] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3270.140880][ T4088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3270.149840][ T4088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3270.536831][T17417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3270.545119][T17417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3270.760038][T24409] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3270.772882][T24409] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3274.588774][T24422] tipc: Started in network mode
[ 3274.594033][T24422] tipc: Node identity e6bdd66ea544, cluster identity 4711
[ 3274.602248][T24422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3274.745632][T24422] syzkaller0: entered promiscuous mode
[ 3274.751379][T24422] syzkaller0: entered allmulticast mode
[ 3274.857861][T24422] tipc: Resetting bearer <eth:syzkaller0>
[ 3274.939136][T24421] tipc: Resetting bearer <eth:syzkaller0>
[ 3275.039247][T24421] tipc: Disabling bearer <eth:syzkaller0>
[ 3275.568708][T24428] tipc: Started in network mode
[ 3275.574049][T24428] tipc: Node identity 365559660e11, cluster identity 4711
[ 3275.583708][T24428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3275.601757][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4517'.
[ 3275.613250][T24431] veth0_virt_wifi: entered allmulticast mode
[ 3275.666001][T24432] syzkaller0: entered promiscuous mode
[ 3275.672207][T24432] syzkaller0: entered allmulticast mode
[ 3275.709041][T24428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 3275.769560][T24427] tipc: Resetting bearer <eth:syzkaller0>
[ 3276.105560][T24427] tipc: Disabling bearer <eth:syzkaller0>
[ 3276.493611][T24434] loop7: detected capacity change from 0 to 2048
[ 3276.613350][T24434] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3276.799363][T24434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3277.399755][T23243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3277.413642][T23243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3277.425354][T23243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3277.444356][T23243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3277.456241][T23243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 3279.491881][T24449] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3279.500362][T24449] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3279.575065][T21083] Bluetooth: hci0: command tx timeout
[ 3281.591337][T21083] Bluetooth: hci0: command tx timeout
[ 3282.861014][T24438] chnl_net:caif_netlink_parms(): no params data found
[ 3283.673223][T21083] Bluetooth: hci0: command tx timeout
[ 3284.307048][T24438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3284.314923][T24438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3284.322890][T24438] bridge_slave_0: entered allmulticast mode
[ 3284.335807][T24438] bridge_slave_0: entered promiscuous mode
[ 3284.477314][T24438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3284.485377][T24438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3284.493414][T24438] bridge_slave_1: entered allmulticast mode
[ 3284.502216][T24438] bridge_slave_1: entered promiscuous mode
[ 3284.942809][T24438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3284.968003][T24469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3285.017635][T24470] syzkaller0: entered promiscuous mode
[ 3285.023376][T24470] syzkaller0: entered allmulticast mode
[ 3285.139421][T24438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3285.321327][T10118] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3285.354479][T24469] tipc: Resetting bearer <eth:syzkaller0>
[ 3285.455664][T10118] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3285.506740][T24438] team0: Port device team_slave_0 added
[ 3285.525053][T24468] tipc: Resetting bearer <eth:syzkaller0>
[ 3285.603497][T24468] tipc: Disabling bearer <eth:syzkaller0>
[ 3285.735368][T24438] team0: Port device team_slave_1 added
[ 3285.754700][T21083] Bluetooth: hci0: command tx timeout
[ 3285.947550][T10118] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3286.489097][T10118] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3286.833123][T24438] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3286.840545][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3286.867513][T24438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3286.996870][T24438] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3287.004201][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3287.035012][T24438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3287.240439][T10118] bridge_slave_1: left allmulticast mode
[ 3287.246577][T10118] bridge_slave_1: left promiscuous mode
[ 3287.253203][T10118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3287.505235][T10118] bridge_slave_0: left allmulticast mode
[ 3287.511528][T10118] bridge_slave_0: left promiscuous mode
[ 3287.527202][T10118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3288.268000][T10118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3288.298077][T10118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3288.326035][T10118] bond0 (unregistering): Released all slaves
[ 3288.615939][T10118] tipc: Left network mode
[ 3289.251242][T24438] hsr_slave_0: entered promiscuous mode
[ 3289.268842][T24438] hsr_slave_1: entered promiscuous mode
[ 3289.616432][T10118] hsr_slave_0: left promiscuous mode
[ 3289.642535][T10118] hsr_slave_1: left promiscuous mode
[ 3289.651405][T10118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3289.659330][T10118] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3289.725642][T10118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3289.733596][T10118] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3289.795412][T10118] veth1_macvtap: left promiscuous mode
[ 3289.801675][T10118] veth0_macvtap: left promiscuous mode
[ 3289.807883][T10118] veth1_vlan: left promiscuous mode
[ 3289.813462][T10118] veth0_vlan: left promiscuous mode
[ 3291.161192][T10118] team0 (unregistering): Port device team_slave_1 removed
[ 3291.250694][T10118] team0 (unregistering): Port device team_slave_0 removed
[ 3291.469900][T23243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3291.507323][T23243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3291.522076][T23243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3291.655871][T23243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3291.683162][T23243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3292.793856][T24525] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 3294.071239][T21083] Bluetooth: hci2: command tx timeout
[ 3296.270143][T21083] Bluetooth: hci2: command tx timeout
[ 3297.352994][T24438] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3297.428230][T24438] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3297.552874][  T196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3297.723858][T24438] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3297.843176][  T196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3297.980235][T24438] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3298.035314][T24516] chnl_net:caif_netlink_parms(): no params data found
[ 3298.148365][  T196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3298.324904][T21083] Bluetooth: hci2: command tx timeout
[ 3298.493543][  T196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3299.178481][T24565] syzkaller0: entered promiscuous mode
[ 3299.184366][T24565] syzkaller0: entered allmulticast mode
[ 3299.323091][  T196] bridge_slave_1: left allmulticast mode
[ 3299.329215][  T196] bridge_slave_1: left promiscuous mode
[ 3299.337228][  T196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3299.411631][  T196] bridge_slave_0: left allmulticast mode
[ 3299.417852][  T196] bridge_slave_0: left promiscuous mode
[ 3299.424450][  T196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3300.282167][  T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3300.389120][  T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3300.407626][T21083] Bluetooth: hci2: command tx timeout
[ 3300.475244][  T196] bond0 (unregistering): Released all slaves
[ 3301.078069][  T196] tipc: Disabling bearer <udp:s>
[ 3301.083655][  T196] tipc: Left network mode
[ 3301.337213][T24516] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3301.344889][T24516] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3301.355735][T24516] bridge_slave_0: entered allmulticast mode
[ 3301.366907][T24516] bridge_slave_0: entered promiscuous mode
[ 3301.555633][T24516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3301.566368][T24516] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3301.574532][T24516] bridge_slave_1: entered allmulticast mode
[ 3301.584582][T24516] bridge_slave_1: entered promiscuous mode
[ 3301.746920][  T196] hsr_slave_0: left promiscuous mode
[ 3301.807188][  T196] hsr_slave_1: left promiscuous mode
[ 3301.815496][  T196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3301.823345][  T196] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3301.897903][  T196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3301.905627][  T196] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3301.984018][  T196] veth1_macvtap: left promiscuous mode
[ 3301.990057][  T196] veth0_macvtap: left promiscuous mode
[ 3301.996004][  T196] veth1_vlan: left promiscuous mode
[ 3302.006744][  T196] veth0_vlan: left promiscuous mode
[ 3302.974038][  T196] team0 (unregistering): Port device team_slave_1 removed
[ 3303.073552][  T196] team0 (unregistering): Port device team_slave_0 removed
[ 3303.886038][T24438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3303.943705][T24516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3304.063247][T24516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3304.087157][T24595] syzkaller0: entered promiscuous mode
[ 3304.093281][T24595] syzkaller0: entered allmulticast mode
[ 3304.292417][T24438] 8021q: adding VLAN 0 to HW filter on device team0
[ 3304.417869][ T4018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3304.425535][ T4018] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3304.492135][T24516] team0: Port device team_slave_0 added
[ 3304.518069][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3304.525687][ T4018] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3304.567028][T24516] team0: Port device team_slave_1 added
[ 3304.965733][T24516] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3304.974784][T24516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3305.002938][T24516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3305.100608][T24516] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3305.107875][T24516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3305.135491][T24516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3305.459240][T24516] hsr_slave_0: entered promiscuous mode
[ 3305.470426][T24516] hsr_slave_1: entered promiscuous mode
[ 3305.522075][T24516] debugfs: 'hsr0' already exists in 'hsr'
[ 3305.528037][T24516] Cannot create hsr debugfs directory
[ 3306.234392][T24613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3306.263806][T24613] syzkaller0: entered promiscuous mode
[ 3306.269614][T24613] syzkaller0: entered allmulticast mode
[ 3306.338013][T24613] tipc: Resetting bearer <eth:syzkaller0>
[ 3306.386111][T24610] tipc: Resetting bearer <eth:syzkaller0>
[ 3306.421096][T24610] tipc: Disabling bearer <eth:syzkaller0>
[ 3307.438975][T16003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 3307.578435][T16003] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3307.702283][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3307.965345][T24438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3308.355944][T24516] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3308.466939][T24516] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3308.573935][T24516] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3308.674656][T24516] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3308.909635][T24438] veth0_vlan: entered promiscuous mode
[ 3309.021621][T24438] veth1_vlan: entered promiscuous mode
[ 3309.446603][T24438] veth0_macvtap: entered promiscuous mode
[ 3309.579797][T24438] veth1_macvtap: entered promiscuous mode
[ 3309.668882][T24636] syzkaller0: entered promiscuous mode
[ 3309.674854][T24636] syzkaller0: entered allmulticast mode
[ 3309.771434][T24438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3309.890596][T24438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3309.941908][T10118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3309.975760][T10118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3310.048476][T10118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3310.080714][T10118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3310.150464][T24516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3310.338862][T24516] 8021q: adding VLAN 0 to HW filter on device team0
[ 3310.427396][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3310.435065][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3310.588556][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3310.596234][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3311.571630][T24649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3311.597248][T24649] syzkaller0: entered promiscuous mode
[ 3311.613946][T24649] syzkaller0: entered allmulticast mode
[ 3311.715892][T24649] tipc: Resetting bearer <eth:syzkaller0>
[ 3311.744140][T24648] tipc: Resetting bearer <eth:syzkaller0>
[ 3311.786623][T24648] tipc: Disabling bearer <eth:syzkaller0>
[ 3312.924736][T24516] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3314.625722][T24682] syzkaller0: entered promiscuous mode
[ 3314.632413][T24682] syzkaller0: entered allmulticast mode
[ 3315.757162][T23303] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 3315.849628][T23303] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3316.146987][T24701] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 3316.157291][T24701] block device autoloading is deprecated and will be removed.
[ 3316.478468][T24516] veth0_vlan: entered promiscuous mode
[ 3316.766997][T24516] veth1_vlan: entered promiscuous mode
[ 3316.916258][T24516] veth0_macvtap: entered promiscuous mode
[ 3316.960427][T24516] veth1_macvtap: entered promiscuous mode
[ 3317.129189][T24516] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3317.274770][T24516] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3317.437302][T17046] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3317.485397][T17046] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3317.554072][T10512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3317.599450][T10512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3319.090548][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3319.098640][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3319.361374][  T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3319.369517][  T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3320.017228][T24728] syzkaller0: entered promiscuous mode
[ 3320.023295][T24728] syzkaller0: entered allmulticast mode
[ 3324.503004][T23303] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 3324.610931][T23303] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3324.726744][T24777] syzkaller0: entered promiscuous mode
[ 3324.732552][T24777] syzkaller0: entered allmulticast mode
[ 3326.122865][T10118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3326.131279][T10118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3326.414988][ T4018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3326.423432][ T4018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3327.216761][T24802] syzkaller0: entered promiscuous mode
[ 3327.222529][T24802] syzkaller0: entered allmulticast mode
[ 3328.999972][T24823] syzkaller0: entered promiscuous mode
[ 3329.005870][T24823] syzkaller0: entered allmulticast mode
[ 3330.109969][T24842] syzkaller0: entered promiscuous mode
[ 3330.115888][T24842] syzkaller0: entered allmulticast mode
[ 3331.302209][T21136] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 3331.510567][T21136] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3332.388843][T24867] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4635'.
[ 3332.465665][T24866] syzkaller0: entered promiscuous mode
[ 3332.471792][T24866] syzkaller0: entered allmulticast mode
[ 3332.492531][T24867] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4635'.
[ 3334.689450][T24888] tipc: Started in network mode
[ 3334.696211][T24888] tipc: Node identity 4a0959f06c65, cluster identity 4711
[ 3334.704724][T24888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3334.801016][T24891] tipc: Resetting bearer <eth:syzkaller0>
[ 3334.924124][T24886] tipc: Disabling bearer <eth:syzkaller0>
[ 3335.181531][T24894] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4646'.
[ 3335.191681][T24894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3335.201821][T24894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3335.915499][T24902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3335.929978][T24905] syzkaller0: entered promiscuous mode
[ 3335.935917][T24905] syzkaller0: entered allmulticast mode
[ 3335.968358][T24899] syzkaller0: entered promiscuous mode
[ 3335.974354][T24899] syzkaller0: entered allmulticast mode
[ 3336.136426][T24898] tipc: Resetting bearer <eth:syzkaller0>
[ 3336.174715][T24898] tipc: Disabling bearer <eth:syzkaller0>
[ 3337.565353][T24927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3337.617491][T24927] tipc: Resetting bearer <eth:syzkaller0>
[ 3337.680645][T24925] tipc: Disabling bearer <eth:syzkaller0>
[ 3338.361108][T21136] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 3338.446756][T21136] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3338.906864][T24941] syzkaller0: entered promiscuous mode
[ 3338.912711][T24941] syzkaller0: entered allmulticast mode
[ 3338.979929][T24943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3339.027715][T24943] syzkaller0: entered promiscuous mode
[ 3339.033437][T24943] syzkaller0: entered allmulticast mode
[ 3339.250717][T24942] tipc: Resetting bearer <eth:syzkaller0>
[ 3339.346150][T24942] tipc: Disabling bearer <eth:syzkaller0>
[ 3341.271094][T24967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3341.345900][T24967] tipc: Resetting bearer <eth:syzkaller0>
[ 3341.384693][T24966] tipc: Disabling bearer <eth:syzkaller0>
[ 3341.489098][T24969] fuseblk: Bad value for 'fd'
[ 3342.318226][T24977] syzkaller0: entered promiscuous mode
[ 3342.324078][T24977] syzkaller0: entered allmulticast mode
[ 3342.930392][T24984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3342.975163][T24984] syzkaller0: entered promiscuous mode
[ 3342.981385][T24984] syzkaller0: entered allmulticast mode
[ 3343.049836][T24983] tipc: Resetting bearer <eth:syzkaller0>
[ 3343.133675][T24983] tipc: Disabling bearer <eth:syzkaller0>
[ 3344.150442][T25002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3344.199004][T25002] syzkaller0: entered promiscuous mode
[ 3344.207574][T25002] syzkaller0: entered allmulticast mode
[ 3344.388996][T25000] tipc: Resetting bearer <eth:syzkaller0>
[ 3344.548759][T25000] tipc: Disabling bearer <eth:syzkaller0>
[ 3345.470436][T25019] syzkaller0: entered promiscuous mode
[ 3345.476300][T25019] syzkaller0: entered allmulticast mode
[ 3347.735073][T25047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3347.809590][T25044] syzkaller0: entered promiscuous mode
[ 3347.815637][T25044] syzkaller0: entered allmulticast mode
[ 3347.903683][T25043] tipc: Resetting bearer <eth:syzkaller0>
[ 3348.024599][T25043] tipc: Disabling bearer <eth:syzkaller0>
[ 3349.232015][T25056] syzkaller0: entered promiscuous mode
[ 3349.238280][T25056] syzkaller0: entered allmulticast mode
[ 3351.210630][T25080] tipc: Started in network mode
[ 3351.216236][T25080] tipc: Node identity fa925dfd54dc, cluster identity 4711
[ 3351.224636][T25080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3351.274990][T25081] syzkaller0: entered promiscuous mode
[ 3351.280735][T25081] syzkaller0: entered allmulticast mode
[ 3351.349406][T25079] tipc: Resetting bearer <eth:syzkaller0>
[ 3351.410072][T25079] tipc: Disabling bearer <eth:syzkaller0>
[ 3353.325415][T25096] syzkaller0: entered promiscuous mode
[ 3353.331926][T25096] syzkaller0: entered allmulticast mode
[ 3355.147715][T25111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3355.197029][T25111] syzkaller0: entered promiscuous mode
[ 3355.203041][T25111] syzkaller0: entered allmulticast mode
[ 3355.324862][T25111] tipc: Resetting bearer <eth:syzkaller0>
[ 3355.421519][T25110] tipc: Resetting bearer <eth:syzkaller0>
[ 3355.454847][T25110] tipc: Disabling bearer <eth:syzkaller0>
[ 3355.788437][T23283] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 3355.995174][T23283] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 3356.063731][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.073088][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.090970][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.167483][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.176957][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.195579][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.317297][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.326962][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.338747][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.414160][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.423962][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.435782][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.473929][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.483432][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.501513][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.534433][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.544229][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.555646][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.568009][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.577430][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.596141][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.674296][T23283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3356.683786][T23283] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3356.703553][T23283] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3356.771324][T23283] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3356.781132][T23283] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3356.789989][T23283] usb 3-1: Product: syz
[ 3356.801334][T23283] usb 3-1: Manufacturer: syz
[ 3356.806180][T23283] usb 3-1: SerialNumber: syz
[ 3356.895128][T23283] usb 3-1: config 0 descriptor??
[ 3356.992290][T23283] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[ 3357.263736][T23303] usb 3-1: USB disconnect, device number 21
[ 3357.296560][T23303] yurex 3-1:0.0: USB YUREX #0 now disconnected
[ 3357.693298][T25134] syzkaller0: entered promiscuous mode
[ 3357.699142][T25134] syzkaller0: entered allmulticast mode
[ 3359.406833][T25149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3359.442399][T25149] syzkaller0: entered promiscuous mode
[ 3359.448114][T25149] syzkaller0: entered allmulticast mode
[ 3359.535357][T25150] tipc: Resetting bearer <eth:syzkaller0>
[ 3359.591340][T25148] tipc: Resetting bearer <eth:syzkaller0>
[ 3359.619949][T25148] tipc: Disabling bearer <eth:syzkaller0>
[ 3360.513879][T25160] fuse: Unknown parameter 'grou00000000000000000000'
[ 3361.280594][T25172] syzkaller0: entered promiscuous mode
[ 3361.286984][T25172] syzkaller0: entered allmulticast mode
[ 3363.554254][T25188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3363.606884][T25190] syzkaller0: entered promiscuous mode
[ 3363.612701][T25190] syzkaller0: entered allmulticast mode
[ 3363.707545][T25188] tipc: Resetting bearer <eth:syzkaller0>
[ 3363.799273][T25187] tipc: Resetting bearer <eth:syzkaller0>
[ 3363.842722][T25187] tipc: Disabling bearer <eth:syzkaller0>
[ 3364.149532][T25196] fuse: Unknown parameter 'grou00000000000000000000'
[ 3364.698131][T25202] fuseblk: Bad value for 'fd'
[ 3365.113561][T25206] syzkaller0: entered promiscuous mode
[ 3365.119548][T25206] syzkaller0: entered allmulticast mode
[ 3367.462907][T25229] fuse: Unknown parameter 'grou00000000000000000000'
[ 3367.477704][T25227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3367.536073][T25227] syzkaller0: entered promiscuous mode
[ 3367.542042][T25227] syzkaller0: entered allmulticast mode
[ 3367.630243][T25227] tipc: Resetting bearer <eth:syzkaller0>
[ 3367.709258][T25225] tipc: Resetting bearer <eth:syzkaller0>
[ 3367.765289][T25225] tipc: Disabling bearer <eth:syzkaller0>
[ 3368.360303][T25239] fuseblk: Bad value for 'fd'
[ 3368.698552][T25244] syzkaller0: entered promiscuous mode
[ 3368.704392][T25244] syzkaller0: entered allmulticast mode
[ 3369.081723][T25250] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4782'.
[ 3369.139538][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3370.082441][T25262] fuse: Unknown parameter 'group_i00000000000000000000'
[ 3370.598101][T25267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4789'.
[ 3371.784415][T25280] syzkaller0: entered promiscuous mode
[ 3371.790355][T25280] syzkaller0: entered allmulticast mode
[ 3372.558543][T25288] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4798'.
[ 3373.445277][T25297] fuse: Unknown parameter 'group_i00000000000000000000'
[ 3373.735782][T25305] binder: 25304:25305 ioctl c0306201 80000680 returned -14
[ 3374.538135][T25317] syzkaller0: entered promiscuous mode
[ 3374.546839][T25317] syzkaller0: entered allmulticast mode
[ 3375.829802][T25331] fuse: Unknown parameter 'group_i00000000000000000000'
[ 3377.484578][T25351] syzkaller0: entered promiscuous mode
[ 3377.490444][T25351] syzkaller0: entered allmulticast mode
[ 3378.452765][T25365] fuse: Unknown parameter 'group_id00000000000000000000'
[ 3384.952541][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4851'.
[ 3385.506328][T25437] syzkaller0: entered promiscuous mode
[ 3385.512266][T25437] syzkaller0: entered allmulticast mode
[ 3388.453388][T25460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 3388.460187][T25460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 3388.472248][T25460] vhci_hcd vhci_hcd.0: Device attached
[ 3389.101090][T21136] usb 34-1: SetAddress Request (2) to port 0
[ 3389.101346][T21136] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 3389.175051][T25470] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4867'.
[ 3389.584157][T25475] syzkaller0: entered promiscuous mode
[ 3389.584274][T25475] syzkaller0: entered allmulticast mode
[ 3390.235367][T25478] binder: BINDER_SET_CONTEXT_MGR already set
[ 3390.235442][T25478] binder: 25476:25478 ioctl 4018620d 800000c0 returned -16
[ 3394.366162][T23303] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 3394.423087][T25506] syzkaller0: entered promiscuous mode
[ 3394.432288][T25506] syzkaller0: entered allmulticast mode
[ 3394.728510][T23303] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3394.786338][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3394.795640][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3394.806962][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3394.880737][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3394.890520][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3394.901872][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.034756][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.044598][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.055986][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.162056][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.174388][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.185838][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.299469][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.309464][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.321866][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.424114][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.437139][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.449946][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.584886][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.594267][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.605694][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.716940][T23303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3395.726352][T23303] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3395.741321][T23303] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3395.789198][T23303] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3395.798864][T23303] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3395.807663][T23303] usb 2-1: Product: syz
[ 3395.811953][T23303] usb 2-1: Manufacturer: syz
[ 3395.816658][T23303] usb 2-1: SerialNumber: syz
[ 3395.910687][T23303] usb 2-1: config 0 descriptor??
[ 3395.948339][T23303] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3397.024680][T23283] usb 2-1: USB disconnect, device number 29
[ 3397.057286][T23283] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3398.959392][T21083] Bluetooth: hci4: Opcode 0x206a failed: -110
[ 3399.039948][T21083] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3399.111407][T25529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3399.176876][T25532] syzkaller0: entered promiscuous mode
[ 3399.183253][T25532] syzkaller0: entered allmulticast mode
[ 3399.264424][T25529] tipc: Resetting bearer <eth:syzkaller0>
[ 3399.331568][T25528] tipc: Resetting bearer <eth:syzkaller0>
[ 3399.390882][T25528] tipc: Disabling bearer <eth:syzkaller0>
[ 3401.134549][T25545] syzkaller0: entered promiscuous mode
[ 3401.140424][T25545] syzkaller0: entered allmulticast mode
[ 3401.364807][T25463] vhci_hcd: connection reset by peer
[ 3401.377060][ T4018] vhci_hcd: stop threads
[ 3401.381687][ T4018] vhci_hcd: release socket
[ 3401.386589][ T4018] vhci_hcd: disconnect device
[ 3401.391638][T21136] usb 34-1: device descriptor read/8, error -110
[ 3401.820491][T21136] usb usb34-port1: attempt power cycle
[ 3401.934551][T21083] Bluetooth: hci0: command 0x0406 tx timeout
[ 3402.561170][T21136] usb usb34-port1: unable to enumerate USB device
[ 3403.504980][T25561] syzkaller0: entered promiscuous mode
[ 3403.510705][T25561] syzkaller0: entered allmulticast mode
[ 3404.374313][T21083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 3404.384525][T21083] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 3404.399357][T21083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 3404.456644][T21083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 3404.468517][T21083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 3405.132458][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4908'.
[ 3406.137833][T25590] syzkaller0: entered promiscuous mode
[ 3406.143581][T25590] syzkaller0: entered allmulticast mode
[ 3406.245499][T25570] chnl_net:caif_netlink_parms(): no params data found
[ 3406.564893][T21083] Bluetooth: hci5: command tx timeout
[ 3408.455058][T23283] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 3408.569291][T25607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3408.614226][T25607] syzkaller0: entered promiscuous mode
[ 3408.620283][T25607] syzkaller0: entered allmulticast mode
[ 3408.651762][T21083] Bluetooth: hci5: command tx timeout
[ 3408.690736][T25607] tipc: Resetting bearer <eth:syzkaller0>
[ 3408.699265][T23283] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3408.767330][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3408.776788][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3408.788148][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3408.831020][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3408.841325][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3408.860516][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3408.871874][T25605] tipc: Resetting bearer <eth:syzkaller0>
[ 3408.894376][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3408.903973][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3408.915391][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3408.929509][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3408.939101][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3408.939520][T25605] tipc: Disabling bearer <eth:syzkaller0>
[ 3408.950436][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3408.981921][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3408.991654][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3409.003204][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3409.088687][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3409.098139][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3409.109991][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3409.210009][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3409.219471][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3409.231058][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3409.271066][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3409.280610][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3409.295398][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3409.324956][T23283] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3409.334885][T23283] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3409.343781][T23283] usb 2-1: Product: syz
[ 3409.348386][T23283] usb 2-1: Manufacturer: syz
[ 3409.353227][T23283] usb 2-1: SerialNumber: syz
[ 3409.488495][T23283] usb 2-1: config 0 descriptor??
[ 3409.518818][T17046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3409.630384][T25570] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3409.638409][T25570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3409.646299][T25570] bridge_slave_0: entered allmulticast mode
[ 3409.662257][T23283] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3409.745549][T25570] bridge_slave_0: entered promiscuous mode
[ 3409.852131][T17046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3410.001209][T23283] usb 2-1: USB disconnect, device number 30
[ 3410.037757][T23283] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3410.068019][T25570] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3410.075623][T25570] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3410.094337][T25570] bridge_slave_1: entered allmulticast mode
[ 3410.106185][T25570] bridge_slave_1: entered promiscuous mode
[ 3410.236407][T17046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3410.458505][T17046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3410.738218][T25570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3410.755259][T21083] Bluetooth: hci5: command tx timeout
[ 3410.908373][T25570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3411.231006][T17046] bridge_slave_1: left allmulticast mode
[ 3411.236913][T17046] bridge_slave_1: left promiscuous mode
[ 3411.247739][T17046] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3411.292046][T17046] bridge_slave_0: left allmulticast mode
[ 3411.298727][T17046] bridge_slave_0: left promiscuous mode
[ 3411.305402][T17046] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3411.894096][T17046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3412.020642][T23243] Bluetooth: hci4: Opcode 0x206a failed: -110
[ 3412.032550][T23243] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3412.080578][T17046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3412.304699][T17046] bond0 (unregistering): Released all slaves
[ 3412.677383][T25570] team0: Port device team_slave_0 added
[ 3412.696992][T25570] team0: Port device team_slave_1 added
[ 3412.829201][T21083] Bluetooth: hci5: command tx timeout
[ 3413.222873][T17046] tipc: Left network mode
[ 3413.273483][T25570] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3413.281044][T25570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3413.307569][T25570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3413.677027][T25570] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3413.684725][T25570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3413.716605][T25570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3413.800907][T17046] hsr_slave_0: left promiscuous mode
[ 3413.818110][T17046] hsr_slave_1: left promiscuous mode
[ 3413.826738][T17046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3413.834997][T17046] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3413.848987][T17046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3413.857524][T17046] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3413.895071][T17046] veth1_macvtap: left promiscuous mode
[ 3413.901398][T17046] veth0_macvtap: left promiscuous mode
[ 3413.907552][T17046] veth1_vlan: left promiscuous mode
[ 3413.913280][T17046] veth0_vlan: left promiscuous mode
[ 3415.160362][T17046] team0 (unregistering): Port device team_slave_1 removed
[ 3415.188072][T17046] team0 (unregistering): Port device team_slave_0 removed
[ 3415.969820][T25570] hsr_slave_0: entered promiscuous mode
[ 3415.980832][T25570] hsr_slave_1: entered promiscuous mode
[ 3415.990217][T25570] debugfs: 'hsr0' already exists in 'hsr'
[ 3415.996388][T25570] Cannot create hsr debugfs directory
[ 3417.033619][T23303] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 3417.120074][T23303] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3417.452694][T21083] Bluetooth: hci2: command 0x0406 tx timeout
[ 3418.638842][T25570] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3418.733528][T25570] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3418.784207][T25570] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3418.873405][T25570] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3420.118188][T25570] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3420.331329][T25570] 8021q: adding VLAN 0 to HW filter on device team0
[ 3420.447006][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3420.454721][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3420.588230][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3420.595875][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3421.533776][T25697] 9pnet_virtio: no channels available for device syz
[ 3423.753947][T25570] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3424.756394][T23283] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 3424.877648][T23283] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3426.700920][T25745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3427.116074][T25570] veth0_vlan: entered promiscuous mode
[ 3427.246575][T25570] veth1_vlan: entered promiscuous mode
[ 3427.591933][T25570] veth0_macvtap: entered promiscuous mode
[ 3427.681095][T25570] veth1_macvtap: entered promiscuous mode
[ 3427.876078][T25570] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3427.976185][T25570] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3428.131552][T10512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3428.211573][   T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3428.266283][   T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3428.335177][ T4018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3428.551669][T25759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4967'.
[ 3430.616968][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3432.978522][T25797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4977'.
[ 3433.557935][T23283] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 3433.637984][T23283] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3433.863106][T25793] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4974'.
[ 3439.810765][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3439.819247][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3440.036813][T10512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3440.045368][T10512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3440.277614][T25835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4988'.
[ 3443.248095][T23283] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 3443.337913][T23283] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3446.242744][T25869] binder: 25866:25869 ioctl 4018620d 0 returned -22
[ 3446.994853][T23243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3447.005499][T23243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3447.015238][T23243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3447.030045][T23243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3447.041843][T23243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3449.208590][T21083] Bluetooth: hci3: command tx timeout
[ 3449.367262][T25896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3449.410602][T25889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3449.670063][T25893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3449.682815][T25870] chnl_net:caif_netlink_parms(): no params data found
[ 3450.205225][T23303] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 3450.419235][T23303] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 3450.475178][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3450.484347][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3450.498353][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3450.572280][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3450.583846][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3450.611404][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3450.651725][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3450.665416][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3450.678268][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3450.793960][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3450.804352][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3450.816095][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3451.116939][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3451.126533][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3451.137827][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3451.247666][T21083] Bluetooth: hci3: command tx timeout
[ 3451.521398][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3451.531771][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3451.543642][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3451.736455][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3451.746452][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3451.757816][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3451.868818][T23303] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3451.878264][T23303] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3451.893003][T23303] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3451.961596][T25912] binder: 25911:25912 ioctl 4018620d 0 returned -22
[ 3452.124204][T23303] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3452.133944][T23303] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3452.144546][T23303] usb 7-1: Product: syz
[ 3452.150280][T23303] usb 7-1: Manufacturer: syz
[ 3452.155095][T23303] usb 7-1: SerialNumber: syz
[ 3452.190659][T23303] usb 7-1: config 0 descriptor??
[ 3452.339623][T23303] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 3452.579953][T25870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3452.587990][T25870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3452.599239][T25870] bridge_slave_0: entered allmulticast mode
[ 3452.617692][T25870] bridge_slave_0: entered promiscuous mode
[ 3452.681350][T23283] usb 7-1: USB disconnect, device number 39
[ 3452.748821][T23283] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 3452.794692][T25870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3452.806094][T25870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3452.819964][T25870] bridge_slave_1: entered allmulticast mode
[ 3452.964633][T25870] bridge_slave_1: entered promiscuous mode
[ 3453.365574][T21083] Bluetooth: hci3: command tx timeout
[ 3453.659287][T25870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3453.772616][T18665] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3453.851620][T25870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3453.918822][T18665] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3454.017781][T21136] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 3454.084412][T21136] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3454.137526][T18665] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3454.404925][T18665] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3454.440683][T25870] team0: Port device team_slave_0 added
[ 3454.537227][T25870] team0: Port device team_slave_1 added
[ 3455.044278][T25870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3455.044371][T25870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3455.044545][T25870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3455.064039][T25870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3455.064122][T25870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3455.073060][T25870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3455.399175][T21083] Bluetooth: hci3: command tx timeout
[ 3455.537257][T18665] bridge_slave_1: left allmulticast mode
[ 3455.537370][T18665] bridge_slave_1: left promiscuous mode
[ 3455.538569][T18665] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3455.545529][T18665] bridge_slave_0: left allmulticast mode
[ 3455.545635][T18665] bridge_slave_0: left promiscuous mode
[ 3455.546541][T18665] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3456.403778][T18665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3456.484117][T18665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3456.528148][T18665] bond0 (unregistering): Released all slaves
[ 3456.642827][T25870] hsr_slave_0: entered promiscuous mode
[ 3456.653814][T25870] hsr_slave_1: entered promiscuous mode
[ 3456.663254][T25870] debugfs: 'hsr0' already exists in 'hsr'
[ 3456.669345][T25870] Cannot create hsr debugfs directory
[ 3456.787677][T18665] tipc: Left network mode
[ 3457.517246][   T30] audit: type=1326 audit(1764756555.118:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000
[ 3457.617626][T18665] hsr_slave_0: left promiscuous mode
[ 3457.668022][T18665] hsr_slave_1: left promiscuous mode
[ 3457.676957][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3457.677766][   T30] audit: type=1326 audit(1764756555.198:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf7f31539 code=0x7ffc0000
[ 3457.684747][T18665] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3457.714620][   T30] audit: type=1326 audit(1764756555.207:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000
[ 3457.740405][   T30] audit: type=1326 audit(1764756555.207:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25935 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000
[ 3457.767262][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3457.775190][T18665] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3457.971205][T18665] veth1_macvtap: left promiscuous mode
[ 3457.977170][T18665] veth0_macvtap: left promiscuous mode
[ 3457.984081][T18665] veth1_vlan: left promiscuous mode
[ 3457.989855][T18665] veth0_vlan: left promiscuous mode
[ 3458.804876][T25953] binder: BINDER_SET_CONTEXT_MGR already set
[ 3458.811314][T25953] binder: 25950:25953 ioctl 4018620d 80000040 returned -16
[ 3459.182165][T18665] team0 (unregistering): Port device team_slave_1 removed
[ 3459.215130][T18665] team0 (unregistering): Port device team_slave_0 removed
[ 3459.762572][T25942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3459.774707][T25943] syzkaller0: entered promiscuous mode
[ 3459.788529][T25943] syzkaller0: entered allmulticast mode
[ 3459.811645][T25957] tipc: Resetting bearer <eth:syzkaller0>
[ 3459.932104][T25940] tipc: Resetting bearer <eth:syzkaller0>
[ 3459.958199][T25940] tipc: Disabling bearer <eth:syzkaller0>
[ 3460.536642][T21136] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 3460.756329][T21136] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 3460.800752][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3460.813459][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3460.826233][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3460.995779][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.006094][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.021265][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.064516][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.073998][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.085440][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.166455][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.177134][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.189336][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.226749][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.236095][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.247457][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.278961][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.288329][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.299658][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.347191][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.356680][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.369498][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.387497][T21136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3461.399896][T21136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3461.411329][T21136] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3461.485976][T21136] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3461.495583][T21136] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3461.504436][T21136] usb 3-1: Product: syz
[ 3461.508817][T21136] usb 3-1: Manufacturer: syz
[ 3461.513755][T21136] usb 3-1: SerialNumber: syz
[ 3461.657386][T21136] usb 3-1: config 0 descriptor??
[ 3461.705396][T21136] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[ 3461.902161][T25870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3461.981827][T25870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3461.988470][ T5870] usb 3-1: USB disconnect, device number 22
[ 3462.058727][ T5870] yurex 3-1:0.0: USB YUREX #0 now disconnected
[ 3462.131495][T25870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3462.195349][T25870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3463.502784][T25870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3463.684538][T25984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3463.744099][T25987] syzkaller0: entered promiscuous mode
[ 3463.749934][T25987] syzkaller0: entered allmulticast mode
[ 3463.799295][T25870] 8021q: adding VLAN 0 to HW filter on device team0
[ 3463.806520][T23303] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 3463.869498][T23303] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3463.900964][T25984] tipc: Resetting bearer <eth:syzkaller0>
[ 3463.949412][T10118] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3463.957089][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3464.058303][T10118] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3464.066124][T10118] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3464.099056][T25983] tipc: Resetting bearer <eth:syzkaller0>
[ 3464.112927][T25983] tipc: Disabling bearer <eth:syzkaller0>
[ 3464.376483][T25991] binder_alloc: 25989: binder_alloc_buf, no vma
[ 3465.000579][T25995] binder: BINDER_SET_CONTEXT_MGR already set
[ 3465.010732][T25995] binder: 25993:25995 ioctl 4018620d 80000040 returned -16
[ 3466.294038][T26001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3466.326019][T26001] syzkaller0: entered promiscuous mode
[ 3466.331727][T26001] syzkaller0: entered allmulticast mode
[ 3466.394492][T26001] tipc: Resetting bearer <eth:syzkaller0>
[ 3466.472817][T26000] tipc: Resetting bearer <eth:syzkaller0>
[ 3466.528678][T26000] tipc: Disabling bearer <eth:syzkaller0>
[ 3467.072002][T25870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3468.930091][T23283] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 3469.240268][T23283] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3469.280511][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.292223][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.306066][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.344908][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.355528][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.366963][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.378602][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.390407][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.404585][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.452735][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.462086][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.473548][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.583134][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.592619][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.604052][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.664749][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.674450][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.685812][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.698453][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.709282][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.725587][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.741861][T23283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3469.751313][T23283] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3469.762760][T23283] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3469.784674][T23283] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3469.794366][T23283] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3469.803171][T23283] usb 2-1: Product: syz
[ 3469.807547][T23283] usb 2-1: Manufacturer: syz
[ 3469.812558][T23283] usb 2-1: SerialNumber: syz
[ 3469.829654][T23283] usb 2-1: config 0 descriptor??
[ 3469.879765][T23283] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3470.198233][T23283] usb 2-1: USB disconnect, device number 31
[ 3470.298964][T23283] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3470.764580][T26033] binder_alloc: 26032: binder_alloc_buf, no vma
[ 3470.826348][T25870] veth0_vlan: entered promiscuous mode
[ 3470.829785][T26035] binder: BINDER_SET_CONTEXT_MGR already set
[ 3470.838628][T26035] binder: 26034:26035 ioctl 4018620d 80000040 returned -16
[ 3470.902582][T25870] veth1_vlan: entered promiscuous mode
[ 3471.199336][T25870] veth0_macvtap: entered promiscuous mode
[ 3471.292686][T25870] veth1_macvtap: entered promiscuous mode
[ 3471.588368][T26038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3471.621497][T25870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3471.676662][T26041] syzkaller0: entered promiscuous mode
[ 3471.683193][T26041] syzkaller0: entered allmulticast mode
[ 3471.751435][T26038] tipc: Resetting bearer <eth:syzkaller0>
[ 3471.792154][T25870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3471.840961][T26037] tipc: Resetting bearer <eth:syzkaller0>
[ 3471.894352][T26037] tipc: Disabling bearer <eth:syzkaller0>
[ 3471.971213][ T3536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3472.086311][ T3536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3472.201455][ T3536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3472.214842][T21083] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3472.221636][T23243] Bluetooth: hci4: Opcode 0x206a failed: -110
[ 3472.248617][ T3536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3472.814014][T21136] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 3472.826939][T26054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3472.906881][T21136] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3472.977997][T26050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3473.008520][T26054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3473.239176][T26054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3473.682043][T26063] binder: BINDER_SET_CONTEXT_MGR already set
[ 3473.688423][T26063] binder: 26062:26063 ioctl 4018620d 800002c0 returned -16
[ 3475.643788][T26080] binder: 26079:26080 ioctl c0306201 0 returned -14
[ 3476.353944][T26089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3476.404689][T26089] syzkaller0: entered promiscuous mode
[ 3476.410522][T26089] syzkaller0: entered allmulticast mode
[ 3476.490961][T26092] tipc: Resetting bearer <eth:syzkaller0>
[ 3476.597612][T26088] tipc: Resetting bearer <eth:syzkaller0>
[ 3476.669888][T26088] tipc: Disabling bearer <eth:syzkaller0>
[ 3478.322653][T26110] binder: BINDER_SET_CONTEXT_MGR already set
[ 3478.333077][T26110] binder: 26109:26110 ioctl 4018620d 800002c0 returned -16
[ 3479.285122][  T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3479.285230][  T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3479.322192][ T4000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3479.322300][ T4000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3480.898376][T26127] binder: 26126:26127 ioctl c0306201 0 returned -14
[ 3481.687586][T26131] tipc: Started in network mode
[ 3481.692690][T26131] tipc: Node identity ce3928608df3, cluster identity 4711
[ 3481.701474][T26131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3481.757371][T26132] syzkaller0: entered promiscuous mode
[ 3481.763173][T26132] syzkaller0: entered allmulticast mode
[ 3481.845387][T26131] tipc: Resetting bearer <eth:syzkaller0>
[ 3481.899717][T26130] tipc: Resetting bearer <eth:syzkaller0>
[ 3481.962949][T26130] tipc: Disabling bearer <eth:syzkaller0>
[ 3482.054837][T21136] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 3482.167727][T21136] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3485.255198][T26163] fuse: Bad value for 'fd'
[ 3485.650768][T26167] binder: 26165:26167 ioctl c0306201 0 returned -14
[ 3487.026646][T26177] tipc: Started in network mode
[ 3487.032231][T26177] tipc: Node identity 8a2e6e64b25c, cluster identity 4711
[ 3487.044984][T26177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3487.079852][T26176] syzkaller0: entered promiscuous mode
[ 3487.085629][T26176] syzkaller0: entered allmulticast mode
[ 3487.173849][T26176] tipc: Resetting bearer <eth:syzkaller0>
[ 3487.227308][T26175] tipc: Resetting bearer <eth:syzkaller0>
[ 3487.269838][T26175] tipc: Disabling bearer <eth:syzkaller0>
[ 3489.229134][T26200] fuse: Bad value for 'fd'
[ 3490.609562][T26213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3490.614597][T26213] syzkaller0: entered promiscuous mode
[ 3490.614711][T26213] syzkaller0: entered allmulticast mode
[ 3490.665216][T23303] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 3490.671537][T26213] tipc: Resetting bearer <eth:syzkaller0>
[ 3490.674505][T23303] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3490.735124][T26212] tipc: Resetting bearer <eth:syzkaller0>
[ 3490.746781][T26212] tipc: Disabling bearer <eth:syzkaller0>
[ 3492.096202][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3492.231709][T26224] 9pnet_virtio: no channels available for device syz
[ 3492.836492][   T30] audit: type=1326 audit(1764756590.434:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26219 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3492.859461][   T30] audit: type=1326 audit(1764756590.434:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26219 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3492.881763][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3492.891514][   T30] audit: type=1326 audit(1764756590.434:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26219 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3492.913759][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3495.090130][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5105'.
[ 3495.121355][T26235] vlan2: entered promiscuous mode
[ 3495.126845][T26235] bond0: entered promiscuous mode
[ 3495.137131][T26235] bond_slave_0: entered promiscuous mode
[ 3495.145897][T26235] bond_slave_1: entered promiscuous mode
[ 3496.221895][T26251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3496.241938][T26251] syzkaller0: entered promiscuous mode
[ 3496.242053][T26251] syzkaller0: entered allmulticast mode
[ 3496.316576][T26251] tipc: Resetting bearer <eth:syzkaller0>
[ 3496.343673][T26249] tipc: Resetting bearer <eth:syzkaller0>
[ 3496.366745][T26249] tipc: Disabling bearer <eth:syzkaller0>
[ 3497.088276][   T30] audit: type=1800 audit(1764756594.651:117): pid=26258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5115" name="file0" dev="overlay" ino=680 res=0 errno=0
[ 3498.019639][ T5870] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[ 3498.097747][ T5870] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3500.088243][T21136] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 3500.285046][T21136] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 3500.323607][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.333267][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.344765][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3500.462985][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.474238][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.486618][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3500.550860][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.562550][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.574578][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3500.670565][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.679978][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.691570][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3500.790841][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.800229][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.811638][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3500.883926][T26286] binder: BINDER_SET_CONTEXT_MGR already set
[ 3500.890367][T26286] binder: 26285:26286 ioctl 4018620d 800002c0 returned -16
[ 3500.910932][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3500.920442][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3500.931979][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3501.070951][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3501.082616][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3501.094676][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3501.117303][T26288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3501.188946][T26291] syzkaller0: entered promiscuous mode
[ 3501.189566][T21136] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3501.194980][T26291] syzkaller0: entered allmulticast mode
[ 3501.203826][T21136] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3501.220992][T21136] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3501.262886][T26287] tipc: Resetting bearer <eth:syzkaller0>
[ 3501.308007][T26287] tipc: Disabling bearer <eth:syzkaller0>
[ 3501.342215][T21136] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3501.352683][T21136] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3501.361627][T21136] usb 7-1: Product: syz
[ 3501.366023][T21136] usb 7-1: Manufacturer: syz
[ 3501.370960][T21136] usb 7-1: SerialNumber: syz
[ 3501.403210][T21136] usb 7-1: config 0 descriptor??
[ 3501.462441][T21136] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 3501.787488][T21136] usb 7-1: USB disconnect, device number 40
[ 3501.849567][T21136] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 3503.830827][T21083] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 3503.830995][T21083] Bluetooth: hci2: command 0x0406 tx timeout
[ 3504.757003][T26326] binder: BINDER_SET_CONTEXT_MGR already set
[ 3504.757080][T26326] binder: 26324:26326 ioctl 4018620d 800002c0 returned -16
[ 3504.766545][T26325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3504.772817][T26325] syzkaller0: entered promiscuous mode
[ 3504.772941][T26325] syzkaller0: entered allmulticast mode
[ 3504.821106][T26323] tipc: Resetting bearer <eth:syzkaller0>
[ 3504.834317][T26323] tipc: Disabling bearer <eth:syzkaller0>
[ 3505.512822][T21136] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 3505.547235][T21136] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3508.283266][ T5870] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 3508.493665][ T5870] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 3508.539643][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3508.551586][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3508.571662][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3508.675988][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3508.688342][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3508.699778][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3508.743202][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3508.752380][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3508.770758][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3508.877243][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3508.886578][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3508.897995][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3508.988597][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3508.998092][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3509.009441][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3509.111075][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3509.120453][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3509.131876][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3509.207322][T26358] fuseblk: Bad value for 'fd'
[ 3509.226623][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3509.236019][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3509.247329][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3509.356762][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3509.356929][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3509.357119][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0
[ 3509.395462][ T5870] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3509.395645][ T5870] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3509.395785][ T5870] usb 3-1: Product: syz
[ 3509.395894][ T5870] usb 3-1: Manufacturer: syz
[ 3509.396009][ T5870] usb 3-1: SerialNumber: syz
[ 3509.403290][ T5870] usb 3-1: config 0 descriptor??
[ 3509.506221][ T5870] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[ 3509.570524][T26362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3509.618167][T26362] syzkaller0: entered promiscuous mode
[ 3509.618347][T26362] syzkaller0: entered allmulticast mode
[ 3509.732749][T26361] tipc: Resetting bearer <eth:syzkaller0>
[ 3509.754654][ T5870] usb 3-1: USB disconnect, device number 23
[ 3509.766398][ T5870] yurex 3-1:0.0: USB YUREX #0 now disconnected
[ 3509.816519][T26361] tipc: Disabling bearer <eth:syzkaller0>
[ 3510.079278][T26367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3510.151563][T26366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3510.171248][T26366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3510.262851][T26369] binder: BINDER_SET_CONTEXT_MGR already set
[ 3510.262922][T26369] binder: 26368:26369 ioctl 4018620d 800002c0 returned -16
[ 3513.299769][T26391] fuseblk: Bad value for 'fd'
[ 3514.083272][T26403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3514.098152][ T5870] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 3514.200056][T26403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3514.249418][T26404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3514.300162][ T5870] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 3514.349757][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.359193][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.370579][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3514.491355][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.506056][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.519106][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3514.595268][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.610017][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.623447][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3514.689004][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.698446][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.715362][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3514.819754][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.829262][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.840656][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3514.975970][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3514.985376][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3514.996784][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3515.168306][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3515.178139][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3515.189519][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3515.264329][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3515.274566][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3515.285968][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3515.311299][ T5870] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3515.326077][ T5870] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3515.336608][ T5870] usb 7-1: Product: syz
[ 3515.341125][ T5870] usb 7-1: Manufacturer: syz
[ 3515.345923][ T5870] usb 7-1: SerialNumber: syz
[ 3515.470830][ T5870] usb 7-1: config 0 descriptor??
[ 3515.517877][ T5870] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 3515.875472][ T5870] usb 7-1: USB disconnect, device number 41
[ 3515.945123][ T5870] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 3517.583020][T26432] fuseblk: Bad value for 'fd'
[ 3517.923201][T21083] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 3517.931673][T21083] Bluetooth: hci2: command 0x0406 tx timeout
[ 3518.212976][   T30] audit: type=1326 audit(1764756615.798:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.235932][   T30] audit: type=1326 audit(1764756615.798:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26433 comm="syz.4.5180" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0
[ 3518.399704][   T30] audit: type=1326 audit(1764756615.848:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.422556][   T30] audit: type=1326 audit(1764756615.848:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.445553][   T30] audit: type=1326 audit(1764756615.848:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.468114][   T30] audit: type=1326 audit(1764756615.848:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.490777][   T30] audit: type=1326 audit(1764756615.848:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.515687][   T30] audit: type=1326 audit(1764756615.848:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.538837][   T30] audit: type=1326 audit(1764756615.848:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.558420][T26446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3518.561430][   T30] audit: type=1326 audit(1764756615.848:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[ 3518.775090][T26443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3518.817087][T26443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3520.521042][ T5870] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 3520.693471][ T5870] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3520.715411][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.715587][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.715753][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.758109][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.758295][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.758467][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.763901][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.764066][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.764242][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.794906][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.795083][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.795258][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.810538][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.812501][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.812811][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.835831][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.836002][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.836163][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.870963][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.871163][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.871336][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.875965][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3520.876123][ T5870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3520.876321][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3520.923658][ T5870] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3520.923832][ T5870] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3520.923969][ T5870] usb 2-1: Product: syz
[ 3520.924079][ T5870] usb 2-1: Manufacturer: syz
[ 3520.924188][ T5870] usb 2-1: SerialNumber: syz
[ 3520.930622][ T5870] usb 2-1: config 0 descriptor??
[ 3521.028539][ T5870] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3521.313779][ T5870] usb 2-1: USB disconnect, device number 32
[ 3521.327989][ T5870] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3522.879487][T21136] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 3523.082962][T21136] usb 5-1: Using ep0 maxpacket: 32
[ 3523.110560][T21136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3523.121391][T21136] usb 5-1: config 0 has no interfaces?
[ 3523.127555][T21136] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 3523.137028][T21136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3523.194468][T21136] usb 5-1: config 0 descriptor??
[ 3523.364868][T21083] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3523.372191][T26293] Bluetooth: hci4: Opcode 0x206a failed: -110
[ 3523.424194][T21136] usb 5-1: USB disconnect, device number 47
[ 3525.647610][T26500] overlayfs: failed to resolve './file1': -2
[ 3526.504791][ T5870] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 3526.696754][ T5870] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 3526.704206][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.704372][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.706013][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.718299][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.718465][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.718635][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.741118][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.741300][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.741467][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.786362][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.786542][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.786711][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.797138][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.797344][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.797513][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.835355][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.835529][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.835715][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.847396][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.847566][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.847735][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.866106][ T5870] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3526.866269][ T5870] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3526.866434][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3526.902455][ T5870] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3526.902629][ T5870] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3526.902769][ T5870] usb 7-1: Product: syz
[ 3526.902879][ T5870] usb 7-1: Manufacturer: syz
[ 3526.903007][ T5870] usb 7-1: SerialNumber: syz
[ 3526.918580][ T5870] usb 7-1: config 0 descriptor??
[ 3527.025013][T21136] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 3527.025987][ T5870] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 3527.187786][T21136] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 3527.229952][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.230124][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.230299][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.234532][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.234695][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.235143][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.284709][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.285394][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.285571][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.330539][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.330962][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.331134][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.347289][T16003] usb 7-1: USB disconnect, device number 42
[ 3527.357946][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.358111][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.358286][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.373236][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.373413][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.373592][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.436710][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.436875][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.437038][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.442713][T21136] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3527.442884][T21136] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3527.443063][T21136] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3527.472078][T16003] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 3527.485445][T21136] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3527.485615][T21136] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3527.485755][T21136] usb 5-1: Product: syz
[ 3527.485867][T21136] usb 5-1: Manufacturer: syz
[ 3527.485982][T21136] usb 5-1: SerialNumber: syz
[ 3527.492316][T21136] usb 5-1: config 0 descriptor??
[ 3527.581872][T21136] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[ 3527.780119][T16003] usb 5-1: USB disconnect, device number 48
[ 3528.199977][T16003] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 3528.512077][T26523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5210'.
[ 3529.366712][T26293] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 3529.366886][T26293] Bluetooth: hci2: command 0x0406 tx timeout
[ 3529.411328][T26534] binder: 26532:26534 ioctl 4018620d 0 returned -22
[ 3529.847564][T21083] Bluetooth: hci3: Opcode 0x206a failed: -110
[ 3529.852470][T26520] Bluetooth: hci3: command 0x206a tx timeout
[ 3530.012669][T26520] Bluetooth: hci5: command 0x0406 tx timeout
[ 3530.465523][T26541] overlayfs: failed to resolve './file1': -2
[ 3531.779833][T16003] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 3532.000679][T16003] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3532.028462][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.037630][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.049178][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.241490][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.251012][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.262658][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.288539][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.297833][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.309402][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.385032][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.394547][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.405896][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.510874][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.520282][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.534503][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.641617][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.653842][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.667638][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.723169][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.732617][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.746373][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3532.871975][T16003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3532.881427][T16003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3532.892804][T16003] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3533.018758][T16003] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3533.028273][T16003] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3533.037359][T16003] usb 2-1: Product: syz
[ 3533.044844][T16003] usb 2-1: Manufacturer: syz
[ 3533.051355][T16003] usb 2-1: SerialNumber: syz
[ 3533.179382][T16003] usb 2-1: config 0 descriptor??
[ 3533.274279][T26567] binder: 26566:26567 ioctl 4018620d 0 returned -22
[ 3533.293721][T16003] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3533.571525][ T5870] usb 2-1: USB disconnect, device number 33
[ 3533.621999][ T5870] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3534.048438][T26573] overlayfs: failed to resolve './file1': -2
[ 3534.491080][T21083] Bluetooth: hci2: command 0x0406 tx timeout
[ 3534.498164][T26520] Bluetooth: hci2: Opcode 0x206a failed: -110
[ 3535.613987][T23243] Bluetooth: hci4: Opcode 0x206a failed: -110
[ 3535.624699][T23243] Bluetooth: hci4: command 0x0c1a tx timeout
[ 3536.818412][T26602] binder: 26601:26602 ioctl 4018620d 0 returned -22
[ 3537.490166][T26606] overlayfs: failed to resolve './file0': -2
[ 3538.265986][ T5870] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 3538.484893][ T5870] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 3538.525097][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3538.534717][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3538.546115][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3538.634961][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3538.644357][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3538.656049][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3538.757936][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3538.767375][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3538.778813][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3538.856804][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3538.866414][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3538.877860][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3538.919713][T16003] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 3538.953072][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3538.962532][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3538.974321][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3539.026540][T16003] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3539.068311][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3539.078289][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3539.092776][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3539.110948][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3539.120957][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3539.132531][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3539.187625][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3539.200001][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3539.212039][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3539.344466][ T5870] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3539.354103][ T5870] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3539.362884][ T5870] usb 5-1: Product: syz
[ 3539.367262][ T5870] usb 5-1: Manufacturer: syz
[ 3539.372067][ T5870] usb 5-1: SerialNumber: syz
[ 3539.414797][ T5870] usb 5-1: config 0 descriptor??
[ 3539.551022][ T5870] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[ 3539.852244][T16003] usb 5-1: USB disconnect, device number 49
[ 3539.899345][T16003] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 3540.151181][T26632] binder: 26630:26632 ioctl c0306201 0 returned -14
[ 3541.309278][T26645] overlayfs: failed to resolve './file0': -2
[ 3541.859076][T26520] Bluetooth: hci3: Opcode 0x206a failed: -110
[ 3541.865724][T26520] Bluetooth: hci3: command 0x206a tx timeout
[ 3543.261860][T26663] binder: 26661:26663 ioctl c0306201 0 returned -14
[ 3544.216340][T26677] overlayfs: failed to resolve './file0': -2
[ 3546.373886][T26702] binder: 26701:26702 ioctl c0306201 0 returned -14
[ 3546.547387][T26704] overlayfs: failed to resolve './file0': -2
[ 3549.796299][T26739] overlayfs: failed to resolve './file0': -2
[ 3552.559606][T26766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3553.519888][T26779] overlayfs: failed to resolve './file0': -2
[ 3553.626362][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 3556.693511][ T5870] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 3556.923940][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3556.990465][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 3557.000345][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 3557.008998][ T5870] usb 5-1: Product: syz
[ 3557.013507][ T5870] usb 5-1: Manufacturer: syz
[ 3557.021403][ T5870] usb 5-1: SerialNumber: syz
[ 3557.356051][ T5870] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 3557.650828][T16003] usb 5-1: USB disconnect, device number 50
[ 3557.688918][T16003] usblp0: removed
[ 3558.143987][T26823] overlayfs: failed to resolve './file1': -2
[ 3561.446361][T26856] overlayfs: failed to resolve './file1': -2
[ 3570.797508][T26915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3570.806827][T26915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3571.185061][T26915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3571.207005][T26915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3571.856965][T10118] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3571.919343][T10118] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3571.987998][T10118] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3572.024208][T10118] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3572.119509][T23243] Bluetooth: hci3: command 0x206a tx timeout
[ 3572.897866][T26931] =====================================================
[ 3572.905685][T26931] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0
[ 3572.912954][T26931]  batadv_get_vid+0x2d0/0x3b0
[ 3572.918041][T26931]  batadv_interface_tx+0x2e8/0x1dd0
[ 3572.923533][T26931]  dev_hard_start_xmit+0x22f/0xa30
[ 3572.929202][T26931]  __dev_queue_xmit+0x3b58/0x5da0
[ 3572.934504][T26931]  __bpf_redirect+0x162d/0x1760
[ 3572.939646][T26931]  bpf_clone_redirect+0x366/0x530
[ 3572.944993][T26931]  ___bpf_prog_run+0x1297/0xeba0
[ 3572.950520][T26931]  __bpf_prog_run512+0xc5/0x100
[ 3572.955702][T26931]  bpf_test_run+0x496/0xd80
[ 3572.960657][T26931]  bpf_prog_test_run_skb+0x1720/0x2590
[ 3572.966434][T26931]  bpf_prog_test_run+0x5c2/0xa40
[ 3572.971793][T26931]  __sys_bpf+0x873/0xeb0
[ 3572.976372][T26931]  __ia32_sys_bpf+0xa4/0xf0
[ 3572.981101][T26931]  ia32_sys_call+0xa53/0x4340
[ 3572.986179][T26931]  __do_fast_syscall_32+0x155/0x310
[ 3572.991841][T26931]  do_fast_syscall_32+0x38/0x80
[ 3572.997054][T26931]  do_SYSENTER_32+0x1f/0x30
[ 3573.001824][T26931]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3573.008613][T26931] 
[ 3573.011036][T26931] Uninit was created at:
[ 3573.015816][T26931]  kmem_cache_alloc_node_noprof+0x989/0x16b0
[ 3573.022012][T26931]  kmalloc_reserve+0x13c/0x4b0
[ 3573.027280][T26931]  pskb_expand_head+0x1fc/0x1610
[ 3573.032417][T26931]  skb_ensure_writable+0x44e/0x510
[ 3573.037948][T26931]  bpf_clone_redirect+0x1c1/0x530
[ 3573.043273][T26931]  ___bpf_prog_run+0x1297/0xeba0
[ 3573.048442][T26931]  __bpf_prog_run512+0xc5/0x100
[ 3573.053636][T26931]  bpf_test_run+0x496/0xd80
[ 3573.058323][T26931]  bpf_prog_test_run_skb+0x1720/0x2590
[ 3573.064066][T26931]  bpf_prog_test_run+0x5c2/0xa40
[ 3573.069266][T26931]  __sys_bpf+0x873/0xeb0
[ 3573.073823][T26931]  __ia32_sys_bpf+0xa4/0xf0
[ 3573.078654][T26931]  ia32_sys_call+0xa53/0x4340
[ 3573.083629][T26931]  __do_fast_syscall_32+0x155/0x310
[ 3573.089079][T26931]  do_fast_syscall_32+0x38/0x80
[ 3573.094276][T26931]  do_SYSENTER_32+0x1f/0x30
[ 3573.099037][T26931]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3573.105716][T26931] 
[ 3573.108221][T26931] CPU: 0 UID: 0 PID: 26931 Comm: syz.1.5361 Not tainted syzkaller #0 PREEMPT(none) 
[ 3573.117903][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3573.128203][T26931] =====================================================
[ 3573.135365][T26931] Disabling lock debugging due to kernel taint
[ 3573.141670][T26931] Kernel panic - not syncing: kmsan.panic set ...
[ 3573.148247][T26931] CPU: 0 UID: 0 PID: 26931 Comm: syz.1.5361 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[ 3573.159367][T26931] Tainted: [B]=BAD_PAGE
[ 3573.163611][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3573.173900][T26931] Call Trace:
[ 3573.177288][T26931]  <TASK>
[ 3573.180397][T26931]  __dump_stack+0x26/0x30
[ 3573.184911][T26931]  dump_stack_lvl+0x53/0x270
[ 3573.189679][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.195697][T26931]  dump_stack+0x1e/0x25
[ 3573.200036][T26931]  vpanic+0x435/0xd30
[ 3573.204225][T26931]  panic+0x15d/0x160
[ 3573.208362][T26931]  kmsan_report+0x31c/0x320
[ 3573.213088][T26931]  ? __msan_warning+0x1b/0x30
[ 3573.217985][T26931]  ? batadv_get_vid+0x2d0/0x3b0
[ 3573.223024][T26931]  ? batadv_interface_tx+0x2e8/0x1dd0
[ 3573.228588][T26931]  ? dev_hard_start_xmit+0x22f/0xa30
[ 3573.234120][T26931]  ? __dev_queue_xmit+0x3b58/0x5da0
[ 3573.239486][T26931]  ? __bpf_redirect+0x162d/0x1760
[ 3573.244678][T26931]  ? bpf_clone_redirect+0x366/0x530
[ 3573.250031][T26931]  ? ___bpf_prog_run+0x1297/0xeba0
[ 3573.255356][T26931]  ? __bpf_prog_run512+0xc5/0x100
[ 3573.260605][T26931]  ? bpf_test_run+0x496/0xd80
[ 3573.265438][T26931]  ? bpf_prog_test_run_skb+0x1720/0x2590
[ 3573.271231][T26931]  ? bpf_prog_test_run+0x5c2/0xa40
[ 3573.276552][T26931]  ? __sys_bpf+0x873/0xeb0
[ 3573.281157][T26931]  ? __ia32_sys_bpf+0xa4/0xf0
[ 3573.286022][T26931]  ? ia32_sys_call+0xa53/0x4340
[ 3573.291021][T26931]  ? __do_fast_syscall_32+0x155/0x310
[ 3573.296611][T26931]  ? do_fast_syscall_32+0x38/0x80
[ 3573.301847][T26931]  ? do_SYSENTER_32+0x1f/0x30
[ 3573.306812][T26931]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3573.313530][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.318832][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.324819][T26931]  ? __pfx_batadv_interface_tx+0x1/0x10
[ 3573.330578][T26931]  ? filter_irq_stacks+0x49/0x190
[ 3573.336005][T26931]  ? stack_depot_save_flags+0x35/0x790
[ 3573.341868][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.347181][T26931]  __msan_warning+0x1b/0x30
[ 3573.351894][T26931]  batadv_get_vid+0x2d0/0x3b0
[ 3573.356770][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.362758][T26931]  batadv_interface_tx+0x2e8/0x1dd0
[ 3573.368160][T26931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 3573.374733][T26931]  ? __pfx_batadv_interface_tx+0x10/0x10
[ 3573.380562][T26931]  dev_hard_start_xmit+0x22f/0xa30
[ 3573.385918][T26931]  __dev_queue_xmit+0x3b58/0x5da0
[ 3573.391123][T26931]  ? skb_release_data+0xa12/0xac0
[ 3573.396372][T26931]  ? kmsan_internal_memmove_metadata+0x91/0x230
[ 3573.402830][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.408109][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.414102][T26931]  ? __dev_queue_xmit+0x27c/0x5da0
[ 3573.419517][T26931]  __bpf_redirect+0x162d/0x1760
[ 3573.424571][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.429888][T26931]  bpf_clone_redirect+0x366/0x530
[ 3573.435114][T26931]  ___bpf_prog_run+0x1297/0xeba0
[ 3573.440309][T26931]  __bpf_prog_run512+0xc5/0x100
[ 3573.445427][T26931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 3573.451989][T26931]  ? kmsan_internal_poison_memory+0x78/0x90
[ 3573.458097][T26931]  ? kmsan_internal_poison_memory+0x4a/0x90
[ 3573.464260][T26931]  ? kmsan_slab_alloc+0xde/0x160
[ 3573.469345][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.474631][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.480633][T26931]  ? bpf_test_run+0xe1/0xd80
[ 3573.485364][T26931]  ? filter_irq_stacks+0x49/0x190
[ 3573.490585][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.495858][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.501129][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.506402][T26931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 3573.512950][T26931]  ? kmsan_get_metadata+0x150/0x160
[ 3573.518327][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.524301][T26931]  ? __pfx___bpf_prog_run512+0x10/0x10
[ 3573.529986][T26931]  ? __pfx___bpf_prog_run512+0x10/0x10
[ 3573.535667][T26931]  bpf_test_run+0x496/0xd80
[ 3573.540318][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.545592][T26931]  ? kmsan_get_metadata+0xfb/0x160
[ 3573.550893][T26931]  ? bpf_test_run+0x2f7/0xd80
[ 3573.555769][T26931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 3573.561768][T26931]  bpf_prog_test_run_skb+0x1720/0x2590
[ 3573.567459][T26931]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 3573.573606][T26931]  bpf_prog_test_run+0x5c2/0xa40
[ 3573.578781][T26931]  __sys_bpf+0x873/0xeb0
[ 3573.583256][T26931]  __ia32_sys_bpf+0xa4/0xf0
[ 3573.587951][T26931]  ia32_sys_call+0xa53/0x4340
[ 3573.592782][T26931]  __do_fast_syscall_32+0x155/0x310
[ 3573.598211][T26931]  do_fast_syscall_32+0x38/0x80
[ 3573.603258][T26931]  do_SYSENTER_32+0x1f/0x30
[ 3573.607953][T26931]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3573.614495][T26931] RIP: 0023:0xf70ed539
[ 3573.618704][T26931] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3573.638520][T26931] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[ 3573.647130][T26931] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080
[ 3573.655226][T26931] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[ 3573.663317][T26931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3573.671407][T26931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3573.679490][T26931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3573.687696][T26931]  </TASK>
[ 3573.691213][T26931] Kernel Offset: disabled
[ 3573.695618][T26931] Rebooting in 86400 seconds..