last executing test programs:

4m54.050662197s ago: executing program 1 (id=20):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4m51.490727629s ago: executing program 1 (id=26):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
io_uring_setup(0x868, &(0x7f0000000080)={0x0, 0x8000ffc, 0x1001, 0x2, 0x8004})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x235}], 0x20000000000001a5, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

4m50.101801785s ago: executing program 1 (id=29):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380), 0x0, 0x26022, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, 0x0, 0x40004)
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000080)

4m48.569470118s ago: executing program 1 (id=31):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)

4m47.577849877s ago: executing program 1 (id=32):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
semctl$SETALL(0x0, 0x0, 0x9, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0)
io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)

4m46.471942492s ago: executing program 1 (id=33):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

4m30.853857466s ago: executing program 32 (id=33):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

3m46.569032102s ago: executing program 5 (id=53):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x4, 0x23, 0x9, 0xdedb, 0x4, "6c1a58827728c85b"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0)

3m45.794540188s ago: executing program 5 (id=138):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="610507fe020500db0006"], 0x11)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a0000000500010006000000050004000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
syz_socket_connect_nvme_tcp()
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0)
close(r6)

3m41.35876073s ago: executing program 5 (id=150):
socket(0x10, 0x3, 0x4)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf)
ioctl$TCFLSH(r3, 0x400455cb, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
unshare(0x2000600)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500), 0xf2, 0x8, 0x922b, 0x5, 0xca, 0x2, 0x40, 'syz1\x00'})
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)

3m38.038410086s ago: executing program 5 (id=156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setuid(0xee01)

3m25.148226249s ago: executing program 5 (id=180):
socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000)
r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r6, 0xffff)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x8, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff})
close_range(r0, 0xffffffffffffffff, 0x0)

3m20.692666246s ago: executing program 5 (id=190):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setuid(0xee01)

3m5.386279909s ago: executing program 33 (id=190):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setuid(0xee01)

1m30.85313288s ago: executing program 3 (id=400):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x0, 0x10001, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x4, 0x1a, 0x1, 0x8}, @generic={0x94, 0x2}]}}}}})
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c005)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xbf}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009800)

1m29.475194126s ago: executing program 3 (id=404):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x4, 0xc6, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x0, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x25}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x5, 0x5, [0x5, 0x6, 0x9, 0x1, 0x4], 0x3}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0xf, "ea78b1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xc3, 0x6, 0x90}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x6, 0x7, {0x7, 0x25, 0x1, 0xc, 0x75, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb, 0xa, "2360b8b7f5"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x200, 0x100, 0x5, "06b685b0c934e410c9"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x65, 0x28, "1d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x3b, 0x9, {0x7, 0x25, 0x1, 0x8, 0x7f, 0x5}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x60, 0x7a, 0x10, 0x9}, 0x19, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050fee661085b43b2912cc95a43fc1465eebe0e78ca59308efde6ddcf5885ffb69c0c740ae9d0e59de3ecc7d55112323dfca324334cfe724c67b2a8fd2b4a29aa9b80f5c61a9a51df3170879442c2e3dc7f2ca602aa98b15bbcb737fb75543710e1e4e8bd2c34632f2126c2f61d86df868768da485cf6d3ce1ea3af4acfd6337a76121bef2ca70d0bf7562fb0a02a7fbd633c4658e71a5cf"], 0x6, [{0x37, &(0x7f0000000300)=@string={0x37, 0x3, "d39f2cf2f2065c06d47308465f4842eee4c96fa6caaa7d116368183f0b03700a7e59b559ee821f69b66180e959f535d5c26b87839c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}, {0xb1, &(0x7f00000003c0)=@string={0xb1, 0x3, "ba2881938b5ba44ddca9895c67a8481db17f509b4fc2930da4e55a179e53a0bc5700a844a54ba8623a91fbd499be864b1ea6613dbb4cba788384e133bb5d1540295f665411fbf9f0f5662bc37ef25b0b09dc4c61489cf3848dfaf7568732a04fc9f4eafb8b4bf9573a4c6c0f1433a69c9aeab3477b4475ca866008e43ac003a6aa323ef03b02c5292811c78566a1c032a3db18aed987af442462f4ce0d4cb1e488e83a37ca06ab608296754636a3b1"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x424}}, {0x10, &(0x7f00000004c0)=@string={0x10, 0x3, "2ca68e21cfb62c9140ab64f9c655"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x445}}]})
syz_usb_control_io$uac1(r1, &(0x7f00000006c0)={0xc, &(0x7f0000000600)={0x40, 0x21, 0x53, {0x53, 0x2, "10df16d2edadec8d7c64f065cb42c9a3d50aa514f16b6a35dc62764919977d711f13887f938902a85d94a83c3500fa6e2af1a9c7664cfdf5c7ef586834d365f2ac3f8c318521ab0c8a780303174bb8cc46"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f00000009c0)={0x24, &(0x7f0000000700)={0x0, 0x7, 0xd6, "1696e61e5aa9ac5c6a3d20b9412fa778a3d565d6aa66095029af2404a6054ea4b32f6f5bc304f5b6a2a58be0affcbbcc94b169a44ea1657ee9e656a44d956a52926329c69846fe32eec1359c66af48ee1603f5702a7cc2afe3bbbfd6360dfb5fdc50064402ba9d24acd0db38d7716f183abba7369b4053e19d21fb72cfd5966b2cef84e88f2e6c47befe2baf15b8f7f013948f153288f3d6916731d35bb818b13b4a28e9906da5de87aa429c3156592d90b252c1d09f1373dd9b5321f5a8aad106e371c73bb0d57e8f79e0c06003ddf8255e3480bac1"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xb2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x81, 0x2, "c76f"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="8d030000008c6e0100c950602cd7fe555df888e043e228f5917f21d382993a47fc97cdacfbbf648d5c1abcff71c2b0e11d40a542fba937b2f67afe25731837155b0e9f2af7f6ea27495d7f4f27ad38df7677d2c224b7947e3171bcfc48381c5e25a11d02fb85a72fb4ad10a1f6f2ae60bf5e53f1d0a5c99b43d33a957cc1e3de18165b43f2507c41f6896b27e3ec142a5caa8f74195a2339f0a8c4e2fc40196cbc22d8223aea7c6adc381d521f2d76eee24739f0e4"], &(0x7f0000000900)={0x20, 0x83, 0x2, "c891"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "fc4b1f"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "2970ee"}})
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f00000083090000000b93bf0280b37488dffce676fa5c4185db12dfd533161a376b13d6007199761033fa4e78570b000000000000007eb2831a502cf9b14249159ce3c82927747968cd916237c8d5dce86260ae12be4a42782937c18783263daa0b4cfc9b5e4d91fa4ffb98faddfead1c1f024a39d6f3bce0992077080d79cf420536b07f142fca0fbe599e21a5f44183c27ff6270d26a7e1698e"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x6, 0x86, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x3, 0xd0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "16e7fa"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x598, 0x2172, 0x400, 0x6d}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf7, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x8, 0x5, 0x6, 0x20, 0xfe}, 0x40, &(0x7f0000000d80)={0x5, 0xf, 0x40, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xfd, 0x0, 0x3, 0xf000, 0x39}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x2a, 0xff, 0xe, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x9, 0xf, 0x101, [0xc5cd6186666acd83]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x1, 0x8}]}, 0x1, [{0xf2, &(0x7f0000001300)=@string={0xf2, 0x3, "aa1099eed05940a1baa6ae4e7384aa0c174ef7fc6c509cde3a3346d6679bdd64095660bb33ce07df952bda64ca822d66dc2a38f1f68ea05c5a3426192bfad5fc07c2f37cae082f30bf0db7be6b538289e0d4d3369c09bcd61812208bf2d7ebb93056eb355cae87a585e440b3419131f58db14d39d00a0bfae33687b858b636b8ec89693db8fad1612a9cbc1ae79cfc3c96bbee127b044d3c07d71a7112d6ae6263abf254e062b590deb87680f72d18ce1af55413d112f71faacce05cd4c5afc1f70c205c5701cd58756a9dce15c302c81a383eb866aa4ee2663235301975f6a57d5aa042fb2f5762ec2a1597a68463d0"}}]})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000f40)={0xc, &(0x7f0000000ec0)={0x40, 0xa, 0xf, {0xf, 0x2, "2a307dd2edba65f5a468397bb1"}}, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x24, &(0x7f0000000f80)={0x20, 0xf, 0xc7, "82335509863c69e2f2b1a4db21503285eaa2b77e9addd3ed0363a6ca0312ac336f32f060777f5d5da1aeede1e764d12f95d4f8fe562ad574143b7bc1495afa250aefe942ad4cbe8adcb2f60e4839fd650e3408a333e0460aa9dfffe41ef115561785052c1bed8d09e1fdeecfd7329f1440a9e73e4cdf1ff0752798f40209cfd25128714e08f5c5ae7d1c03d83a8b9aea033d2ed1ad30b0ec84a33ac67e50e394d2afd3b5a062048d66d9febdb76abc7abb2f2d7fcf5933c7c69ae6656b0f147bb64e4fd1456417"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001100)={0x20, 0x80, 0x1c, {0x0, 0xfc, 0xf6, 0x9, 0x8000, 0xa, 0xfe, 0x5, 0x4, 0x18a2, 0x0, 0xf}}, &(0x7f0000001140)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000001180)={0x20, 0x83, 0x2}, &(0x7f00000011c0)={0x20, 0x87, 0x2, 0xa4}, &(0x7f0000001200)={0x20, 0x89, 0x2, 0x1}})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000040)={0x10, 0xf335, 0xf})
r6 = getpid()
kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, r4, 0xffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]})
close(0x3)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)

1m25.272481624s ago: executing program 3 (id=414):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a", 0x63}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000d00)="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", 0x128}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f1634", 0x4b}], 0x3}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1m22.329222989s ago: executing program 3 (id=420):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/77, 0x4d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0)
syz_usb_connect$uac3(0x3, 0xc8, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xb, 0x1, 0x5, 0x8, 0x7}, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x7, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0xd766c1535323e39b, 0x8, 0xa, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0xd4}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x425}}, {0xf3, &(0x7f0000000400)=@string={0xf3, 0x3, "a6ec699c681f1a8ef87135958abe33837e849d2eff5af1008d570731d59c4408bd7c49ac9bf6d09040b89966014a614aa02a6a72597f496e082017f57d07f6fa227a9d5f8efad06c4eae577657c57970a7688cb693de72a09f012f290698094efa3cbbf2d645c8d4b5cb6692c0294b3e2b4eeebad9381642ade07c2e4f1966b7d7c7578a7feeb31256f0e9502b7937a0819473d2d5e4369bded9c51e6d583283e190a5dbcf5bf30a87fa7f99e927c61246a36871e76b41b5abe811e272fdfacaa23ceda994b912e125719806f50cb3383a2b24e7e42828f142b16b7c3484433af47f6dea0897e7946c55b491b7e4f5b81c"}}, {0x1e, &(0x7f0000000780)=@string={0x1e, 0x3, "6551297ca5df8b284b438b0146e63fc014a4ec30c4204ff3bef16db1"}}, {0x92, &(0x7f0000000540)=@string={0x92, 0x3, "513f082350da5b37107e4022db9b4c232a17287fb200047f013b5254cf5eb7c9d7f743433ee9a5c23aa099905ac1a6315b7b8520222483fe637e0a582b3729bd64a10272b18287eda35929e9aed9dc5f76ba04bef4aa67c4bc9d8ef56fdaf10d98300d06912e8f465c00902db990ad638df3a1e8077de1ae0ffae893a92400fc84f41fe93979d744d6e1eb9dd97834d1"}}, {0xe5, &(0x7f0000000600)=ANY=[@ANYBLOB="e503b06af3d3c40043a84457305411fec55f6842a3e3201cac921925c2799ee2b7a8d817ecd5dc44f2c394e4f9c1011707a5a0a05d2136f5f0590710aa9d14cacadfad9d9c57ba6eea71058ea5d44281457b3e8bb2434de07c08a2cb1cac2ef56918849ca7346f6400736538b8a361ad743758382e7afa84b684e706765b00ffff0916b9df38afd8ac0ec8a431a4c9a2c5796ba5372eb8e811fdb7e0d9e8484288f4041ec420b81e80384cca24628331c435e5cb2c1d8d039a7187a23d925a3c41e98e412f85f69f1544bdabaa5e46cfe4d62b8767a47000000000000000"]}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a0753883c83e25031bdde840503a0c68932924"], 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040084)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x2})
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

1m17.428514817s ago: executing program 3 (id=425):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m17.348652503s ago: executing program 3 (id=426):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, 0x0, 0x0)
request_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='%#\xbb\x00', 0xfffffffffffffffb)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r4 = socket(0x1e, 0x4, 0x0)
close(0xffffffffffffffff)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000280)=0x3)
recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1m1.896856786s ago: executing program 34 (id=426):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, 0x0, 0x0)
request_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='%#\xbb\x00', 0xfffffffffffffffb)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
r4 = socket(0x1e, 0x4, 0x0)
close(0xffffffffffffffff)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000280)=0x3)
recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

22.756476752s ago: executing program 6 (id=516):
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000002, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x4, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000, 0x140000000]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000380)={0x0, 0xfb, 0xbd, 0x2, 0x9, "2313b2a6abcc96a27d1a3c42c83c97bb", "0e5fbe4c46599746711674a778b3eeeed73139d73bd9d9315989a2a946308aa61cdabb3b935e2acec700fc727c5a0761349d82428581ce19a90f2102e5558de010d1da353061e15fd9689247fa7df9f546361bfb0c8e5662b4f1644ae4c6466d4329c5363e5ac76f4294172a711dabe321b674767dca29abda7d9ae970c1539f46223637bd4e0aa7f6fb290667016e588b97c9a624aaf1a14541f7ef4b0f38e880336ee7bed09a9d"}, 0xbd, 0x2)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814)
prctl$PR_SET_PTRACER(0x59616d61, r2)
ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
socket$igmp(0x2, 0x3, 0x2)

18.691580776s ago: executing program 2 (id=522):
socket(0x10, 0x3, 0x4)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf)
ioctl$TCFLSH(r4, 0x400455cb, 0x4)
unshare(0x2000600)
setuid(0xee01)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500), 0xf2, 0x8, 0x922b, 0x5, 0xca, 0x2, 0x40, 'syz1\x00'})
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)

16.172878111s ago: executing program 2 (id=525):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x108, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xb4, 0x2, [@TCA_BASIC_EMATCHES={0xb0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="66c51b842c20987e5884"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="712fb6", @TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="83f3c8", @TCF_META_TYPE_VAR="79ba"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

15.977737329s ago: executing program 4 (id=527):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f00000012c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{0x0}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000800)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

15.903401672s ago: executing program 2 (id=529):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
preadv(r0, 0x0, 0x0, 0x4, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000)

15.14437031s ago: executing program 6 (id=531):
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x0, 0x10001, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x4, 0x1a, 0x1, 0x8}, @generic={0x94, 0x2}]}}}}})
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c005)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xbf}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009800)

14.375104463s ago: executing program 2 (id=532):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{<r1=>r0, &(0x7f00000000c0)='/$%-\xb6\x8a\x00', 0x800, &(0x7f0000000100)={@align=0x2, {0x3, 0xe, 0x9, 0x8}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x7}, 0x6, &(0x7f0000000780)=[{0x2, 0x0, &(0x7f00000002c0)='O\xba@\x00', &(0x7f0000000300), 0x0, 0x2}, {0x2, 0x8000, &(0x7f0000000380)='.}', &(0x7f00000003c0)="ea9989bdefef52f44bd0df76b1492e30c705a979e5ee926f4ce59780182a161b95bbc01e7e9b54b839197a6fea3a81e65b37d62b641022351795aa100520f41d41991b3b5c847e266769ae43cc7dfb41e2e52d54ec9571f698b865f8a48711a9a6350490f412fb0cefd1b11c313eb857d805430be315aa3c71c153764ee3e0836feebaed2aa7ff93d21a534ce2", 0x8d, 0x22}, {0x3, 0x6, &(0x7f00000004c0)='(\x00', &(0x7f0000000500)="dda6c8b3d195bf4308ce56e5f4d3f75b9d111c7f54adc697dd9535beb5341fe8d68fd755f854755e0d9db1f77a204d46717cb0527d8c57bb9fe294bda92270a796d8681a1025fdf3a6bbc64532d1766ba1d71a68d5c51484b844350d4e295bbdc7cd77e0e6d193e0ef6727877a72ec8f8cb2209b46ee4c6cb34d3be4d734e60c5bb96ff614bd1202b3fafb530b8ddc6d7dc716cbba3098e625f148a9fb41d475932cc86409871feb2a90ff52915b2fbb5d9fc4e2b8b9c539408234daae1694d3b5820dc1327c1dbbfedb2638d084494860ae", 0xd2, 0x22}, {0x1, 0x9, &(0x7f0000000600)='\\/-\x00', &(0x7f0000000640)="57765e04e7f83d8e6e33bcd537f322de9f57164674a97ee1c9be9241c206c0c13be285e1df56e4f61c6fc67b16c608d0bc609f289ffa611a02474085b033c8cdcae21d86aaafe911124d2b185e5c9fbb9e1e7b15c12902594802dff8a06e", 0x5e, 0xb1befbe5a366acc3}, {0x2, 0x7, &(0x7f00000006c0)=',B\'\')&\\}\x92,@^\x00', &(0x7f0000000700)="2eab3f9167400d7619f273c986234784b4e94e58", 0x14}, {0x2, 0x9, &(0x7f0000000740)='\x00', &(0x7f0000000a80)="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", 0x1000, 0x20}]})
recvfrom$rxrpc(r1, &(0x7f00000008c0)=""/218, 0xda, 0x40000000, &(0x7f00000009c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x11, 0x2, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040), 0x4)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x37, 0x65]}}]})
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
ptrace(0x4208, r2)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18)

14.356120548s ago: executing program 4 (id=533):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',g2', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb57257a03de500c90b4f9c738ba49abcf8151", @ANYRES64=r0])
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0xa4)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

13.297434176s ago: executing program 2 (id=534):
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
dup3(0xffffffffffffffff, r1, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee", 0x15}, {&(0x7f0000000600)="53000000d3dc15b8a2d51246344358de41e9f3cdf686423f58e390ab8044cce9b4d2ef3ca98d513d44a62ce86e18809bb5fbca463144246541727c14a3e9210d201e987a55b6cc228ae77063a784d8ff2a7e80c61e92", 0x56}], 0x2)
socket$kcm(0x29, 0x5, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

13.253635544s ago: executing program 6 (id=535):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r2 = fanotify_init(0xf00, 0x1)
fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)

10.828821335s ago: executing program 2 (id=538):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4f0, 0x2a4, 0x0, 0x148, 0x0, 0x148, 0x544, 0x240, 0x240, 0x544, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2a8, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000240)})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4})
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
gettid()
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

10.798634004s ago: executing program 0 (id=539):
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x60101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x3, 0xff)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

10.399105864s ago: executing program 0 (id=540):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r1, 0x0)
fallocate(r0, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)

10.397757618s ago: executing program 6 (id=541):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
fanotify_init(0xf00, 0x1)
fallocate(r0, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

10.285508482s ago: executing program 4 (id=542):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
io_uring_setup(0x868, &(0x7f0000000080)={0x0, 0x8000ffc, 0x1001, 0x2, 0x8004})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fc0500000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x235}], 0x20000000000001a5, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, 0x0, 0x0)

9.915761269s ago: executing program 7 (id=543):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
getitimer(0xe, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b45, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x100500, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)={0x356, 0x258, 0xa800, 0x3f, 0x32, 0x3, 0x10, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={<r5=>0x0})
syz_usb_connect(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201010285c1d4105f124aa960010102030109ffff0001000c1000"], 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r5], &(0x7f00000000c0)=[0x3, 0x8000000000000000, 0x7ab116cf, 0x6c70, 0x400, 0x4000000000], 0x2, 0x1})

9.024779915s ago: executing program 4 (id=544):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(0x0, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
truncate(&(0x7f0000000080)='./bus\x00', 0x7)
finit_module(r3, 0x0, 0x0)

8.791356419s ago: executing program 0 (id=545):
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4f, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0)
close(0x3)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})
pread64(r0, &(0x7f0000000a40)=""/102358, 0x18fd6, 0x40000080002)

6.674859239s ago: executing program 4 (id=546):
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000140)={0xffff0700, 0x106000})
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}, 0x0)

6.625049487s ago: executing program 7 (id=547):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r3=>0x0], 0x0, 0x3, r2, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300})

6.481768576s ago: executing program 6 (id=548):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

6.469115703s ago: executing program 7 (id=549):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003580)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4040000)

6.317506723s ago: executing program 7 (id=550):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2.750508614s ago: executing program 0 (id=551):
socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000)
r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x8, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff})
close_range(r0, 0xffffffffffffffff, 0x0)

2.481973404s ago: executing program 6 (id=552):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',g2', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb57257a03de500c90b4f9c738ba49abcf8151", @ANYRES64=r0])
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0xa4)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1.79440197s ago: executing program 7 (id=553):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000140)={0xffff0700, 0x106000})
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')

318.52403ms ago: executing program 0 (id=554):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
io_uring_setup(0x868, &(0x7f0000000080)={0x0, 0x8000ffc, 0x1001, 0x2, 0x8004})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fc0500000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x235}], 0x20000000000001a5, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, 0x0, 0x0)

48.506826ms ago: executing program 0 (id=555):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r1, 0x0)
fallocate(r0, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)

46.264683ms ago: executing program 7 (id=556):
socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000)
io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0)

0s ago: executing program 4 (id=557):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x298)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

kernel console output (not intermixed with test programs):

805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.974402][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.977398][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.978009][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.978364][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.981518][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.981864][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.982265][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.481168][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   78.750869][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.751867][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.752059][ T5793] bridge_slave_0: entered allmulticast mode
[   78.754761][ T5793] bridge_slave_0: entered promiscuous mode
[   78.809492][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.809626][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.809809][ T5793] bridge_slave_1: entered allmulticast mode
[   78.812422][ T5793] bridge_slave_1: entered promiscuous mode
[   78.863633][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   78.896340][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   78.932518][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.955638][ T5797] chnl_net:caif_netlink_parms(): no params data found
[   78.971194][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.062465][ T5798] chnl_net:caif_netlink_parms(): no params data found
[   79.091539][ T5793] team0: Port device team_slave_0 added
[   79.118858][ T5793] team0: Port device team_slave_1 added
[   79.230395][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.230517][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.230611][ T5799] bridge_slave_0: entered allmulticast mode
[   79.231928][ T5799] bridge_slave_0: entered promiscuous mode
[   79.251046][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.251061][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.251083][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.252521][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.252630][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.252772][ T5800] bridge_slave_0: entered allmulticast mode
[   79.254360][ T5800] bridge_slave_0: entered promiscuous mode
[   79.345476][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.345569][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.345876][ T5799] bridge_slave_1: entered allmulticast mode
[   79.347157][ T5799] bridge_slave_1: entered promiscuous mode
[   79.386711][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.386725][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.386747][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.387261][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.387393][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.387658][ T5800] bridge_slave_1: entered allmulticast mode
[   79.453877][ T5800] bridge_slave_1: entered promiscuous mode
[   79.480788][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.480924][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.481045][ T5797] bridge_slave_0: entered allmulticast mode
[   79.482356][ T5797] bridge_slave_0: entered promiscuous mode
[   79.644674][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.644784][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.644934][ T5797] bridge_slave_1: entered allmulticast mode
[   79.646568][ T5797] bridge_slave_1: entered promiscuous mode
[   79.695256][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.719967][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.720174][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.720282][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.720423][ T5798] bridge_slave_0: entered allmulticast mode
[   79.721978][ T5798] bridge_slave_0: entered promiscuous mode
[   79.725988][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.749795][ T5795] Bluetooth: hci0: command tx timeout
[   79.771809][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.771999][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.772315][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.772464][ T5798] bridge_slave_1: entered allmulticast mode
[   79.774850][ T5798] bridge_slave_1: entered promiscuous mode
[   79.807779][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.848281][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.869310][ T5793] hsr_slave_0: entered promiscuous mode
[   79.870228][ T5793] hsr_slave_1: entered promiscuous mode
[   79.911546][ T5799] team0: Port device team_slave_0 added
[   79.913811][ T5800] team0: Port device team_slave_0 added
[   79.916289][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.938235][ T5800] team0: Port device team_slave_1 added
[   79.941668][ T5799] team0: Port device team_slave_1 added
[   79.952485][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.968701][ T5797] team0: Port device team_slave_0 added
[   79.989590][ T5795] Bluetooth: hci1: command tx timeout
[   80.022703][ T5797] team0: Port device team_slave_1 added
[   80.068689][ T5802] Bluetooth: hci3: command tx timeout
[   80.068869][ T5802] Bluetooth: hci4: command tx timeout
[   80.069226][ T5795] Bluetooth: hci2: command tx timeout
[   80.081615][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.081630][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.081652][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.084428][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.084440][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.084462][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.090132][ T5798] team0: Port device team_slave_0 added
[   80.122230][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.122245][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.122268][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.124843][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.124892][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.124914][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.127906][ T5798] team0: Port device team_slave_1 added
[   80.152668][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.152684][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.152706][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.200431][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.200447][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.200471][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.271090][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.271106][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.271129][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.329975][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.329991][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.330013][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.371103][ T5799] hsr_slave_0: entered promiscuous mode
[   80.372260][ T5799] hsr_slave_1: entered promiscuous mode
[   80.373232][ T5799] debugfs: 'hsr0' already exists in 'hsr'
[   80.373346][ T5799] Cannot create hsr debugfs directory
[   80.413969][ T5800] hsr_slave_0: entered promiscuous mode
[   80.415208][ T5800] hsr_slave_1: entered promiscuous mode
[   80.416089][ T5800] debugfs: 'hsr0' already exists in 'hsr'
[   80.416110][ T5800] Cannot create hsr debugfs directory
[   80.504372][ T5797] hsr_slave_0: entered promiscuous mode
[   80.505359][ T5797] hsr_slave_1: entered promiscuous mode
[   80.505935][ T5797] debugfs: 'hsr0' already exists in 'hsr'
[   80.505956][ T5797] Cannot create hsr debugfs directory
[   81.091278][ T5798] hsr_slave_0: entered promiscuous mode
[   81.092013][ T5798] hsr_slave_1: entered promiscuous mode
[   81.092491][ T5798] debugfs: 'hsr0' already exists in 'hsr'
[   81.092508][ T5798] Cannot create hsr debugfs directory
[   81.546143][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.603294][ T1803] cfg80211: failed to load regulatory.db
[   81.604263][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.694622][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.756393][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.829372][ T5795] Bluetooth: hci0: command tx timeout
[   81.885057][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.914738][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.955488][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.006935][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.078607][ T5795] Bluetooth: hci1: command tx timeout
[   82.111256][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.148684][ T5795] Bluetooth: hci2: command tx timeout
[   82.148717][ T5795] Bluetooth: hci4: command tx timeout
[   82.148736][ T5795] Bluetooth: hci3: command tx timeout
[   82.158613][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.196437][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.252865][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.384696][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.417095][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.459035][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.507616][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.600394][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.640353][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.681320][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.732527][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.764453][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.827103][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   82.858411][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.860831][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.895958][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.896131][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.919855][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.990438][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   82.994214][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.031172][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.031295][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.070446][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.070520][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.114151][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   83.145191][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.145265][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.171703][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.192584][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.192666][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.293321][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.295976][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[   83.351659][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.351746][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.401625][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.401785][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.432408][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[   83.472829][  T595] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.473065][  T595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.534791][  T595] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.534888][  T595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.619973][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.794515][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.910668][ T5805] Bluetooth: hci0: command tx timeout
[   83.924070][ T5793] veth0_vlan: entered promiscuous mode
[   83.954727][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.963684][ T5793] veth1_vlan: entered promiscuous mode
[   84.149367][ T5805] Bluetooth: hci1: command tx timeout
[   84.228676][ T5805] Bluetooth: hci3: command tx timeout
[   84.228706][ T5805] Bluetooth: hci4: command tx timeout
[   84.228725][ T5805] Bluetooth: hci2: command tx timeout
[   84.238285][ T5793] veth0_macvtap: entered promiscuous mode
[   84.279441][ T5793] veth1_macvtap: entered promiscuous mode
[   84.303039][ T5800] veth0_vlan: entered promiscuous mode
[   84.333378][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.361410][ T5800] veth1_vlan: entered promiscuous mode
[   84.377904][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.406563][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.437175][   T89] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.454407][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.455282][   T89] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.471383][   T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.487942][   T89] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.612352][ T5800] veth0_macvtap: entered promiscuous mode
[   84.678284][ T5797] veth0_vlan: entered promiscuous mode
[   84.680885][ T5799] veth0_vlan: entered promiscuous mode
[   84.690240][ T5800] veth1_macvtap: entered promiscuous mode
[   84.755222][ T5797] veth1_vlan: entered promiscuous mode
[   84.757823][ T5799] veth1_vlan: entered promiscuous mode
[   84.774507][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.774530][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.847402][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.870257][ T5798] veth0_vlan: entered promiscuous mode
[   84.877528][  T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.877545][  T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.903015][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.934261][ T5798] veth1_vlan: entered promiscuous mode
[   84.935272][  T595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.957742][  T595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.971629][  T595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.981094][  T595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.073230][ T5797] veth0_macvtap: entered promiscuous mode
[   85.088243][ T5799] veth0_macvtap: entered promiscuous mode
[   85.102069][ T5797] veth1_macvtap: entered promiscuous mode
[   85.146668][ T5799] veth1_macvtap: entered promiscuous mode
[   85.301131][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.317856][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.321393][ T5798] veth0_macvtap: entered promiscuous mode
[   85.327887][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.327904][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.358225][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.484187][ T5798] veth1_macvtap: entered promiscuous mode
[   85.504015][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.547548][   T89] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.566824][   T89] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.579993][   T89] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.583501][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.583519][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.639657][   T89] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.645515][   T89] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.667757][   T89] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.718152][   T89] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.733115][   T89] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.752615][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.877688][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.989066][ T5802] Bluetooth: hci0: command tx timeout
[   86.108545][   T37] audit: type=1326 audit(1774283075.058:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.109892][   T37] audit: type=1326 audit(1774283075.058:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.109928][   T37] audit: type=1326 audit(1774283075.058:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118788][   T37] audit: type=1326 audit(1774283075.058:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118824][   T37] audit: type=1326 audit(1774283075.058:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118850][   T37] audit: type=1326 audit(1774283075.058:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118874][   T37] audit: type=1326 audit(1774283075.058:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118903][   T37] audit: type=1326 audit(1774283075.068:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118935][   T37] audit: type=1326 audit(1774283075.068:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.118970][   T37] audit: type=1326 audit(1774283075.068:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5912 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[   86.215585][   T89] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.230055][ T5802] Bluetooth: hci1: command tx timeout
[   86.232070][   T89] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.234109][   T89] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.314945][ T5802] Bluetooth: hci2: command tx timeout
[   86.314975][ T5802] Bluetooth: hci3: command tx timeout
[   86.316283][   T89] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.319654][ T5795] Bluetooth: hci4: command tx timeout
[   86.641621][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.641633][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.880765][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.880784][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.043730][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.043742][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.209293][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.209308][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.304812][  T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.304877][  T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.456494][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.456512][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.459817][ T5804] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.648574][ T5804] usb 1-1: Using ep0 maxpacket: 32
[   87.680014][ T5804] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   87.680030][ T5804] usb 1-1: config 0 has no interface number 0
[   87.683510][ T5804] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   87.683526][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.683535][ T5804] usb 1-1: Product: syz
[   87.683542][ T5804] usb 1-1: Manufacturer: syz
[   87.683549][ T5804] usb 1-1: SerialNumber: syz
[   87.779962][ T5804] usb 1-1: config 0 descriptor??
[   87.863573][ T5925] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.637014][ T5804] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   88.637053][ T5804] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   88.892492][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'.
[   90.393943][ T5804] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   90.394681][ T5804] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   90.518477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   91.161329][ T5804] usb 1-1: USB disconnect, device number 2
[   92.086339][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.557468][ T5945] tc_dump_action: action bad kind
[   95.507581][ T5963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.507597][ T5963] IPv6: NLM_F_CREATE should be set when creating new route
[   95.508087][ T5963] Zero length message leads to an empty skb
[   95.559013][ T5804] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.726692][ T5804] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   95.726707][ T5804] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[   95.726726][ T5804] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   95.726737][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.848496][ T5971] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   97.757365][ T5979] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   98.284329][    T9] usb 2-1: USB disconnect, device number 2
[   98.577795][   T37] kauditd_printk_skb: 26 callbacks suppressed
[   98.577812][   T37] audit: type=1326 audit(1774283087.538:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.577850][   T37] audit: type=1326 audit(1774283087.538:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.577884][   T37] audit: type=1326 audit(1774283087.538:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.578009][   T37] audit: type=1326 audit(1774283087.538:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.578045][   T37] audit: type=1326 audit(1774283087.548:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.649315][   T37] audit: type=1326 audit(1774283087.618:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.649359][   T37] audit: type=1326 audit(1774283087.628:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.649394][   T37] audit: type=1326 audit(1774283087.628:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.671302][   T37] audit: type=1326 audit(1774283087.648:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.671347][   T37] audit: type=1326 audit(1774283087.648:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[   98.870562][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   98.922174][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.185833][   T10] usb 1-1: Using ep0 maxpacket: 16
[   99.431261][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.431316][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.431341][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.431359][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   99.431379][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.456242][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   99.456269][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   99.456286][   T10] usb 1-1: Manufacturer: syz
[   99.491039][   T10] usb 1-1: config 0 descriptor??
[   99.545852][    T9] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[   99.545879][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204
[   99.545926][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.545949][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.545968][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   99.546005][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[   99.546025][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.602975][    T9] usb 2-1: config 0 descriptor??
[   99.838540][   T10] rc_core: IR keymap rc-hauppauge not found
[   99.838557][   T10] Registered IR keymap rc-empty
[   99.840794][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   99.858871][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   99.916026][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   99.937764][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  100.025337][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.038746][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.071177][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.093927][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.106750][    T9] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0001/input/input6
[  100.109706][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.128690][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.151560][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.152247][ T5935] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  100.168871][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.189001][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.208740][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.239405][   T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  100.239427][   T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  100.281832][    T9] uclogic 0003:28BD:0909.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0
[  100.286257][   T10] usb 1-1: USB disconnect, device number 3
[  100.315177][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short
[  100.317589][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -71
[  100.317635][ T5935] usb 4-1: can't read configurations, error -71
[  100.409713][    T9] usb 2-1: USB disconnect, device number 3
[  100.956034][ T6002] fido_id[6002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  101.280975][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[  101.281035][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'.
[  102.482993][ T6017] mmap: syz.1.29 (6017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  102.848475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  103.225459][ T6020] libceph: resolve '0..' (ret=-3): failed
[  103.297232][ T6020] netlink: 'syz.3.28': attribute type 11 has an invalid length.
[  103.377649][ T6015] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  104.138941][ T6030] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  104.631196][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  104.849522][   T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  104.849538][   T10] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  104.849558][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  104.849569][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.599640][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.855800][   T10] usb 5-1: Using ep0 maxpacket: 32
[  107.007357][ T5881] usb 1-1: USB disconnect, device number 4
[  107.018738][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  107.018793][   T10] usb 5-1: config 0 has no interface number 0
[  107.089861][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  107.089923][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.089973][   T10] usb 5-1: Product: syz
[  107.090023][   T10] usb 5-1: Manufacturer: syz
[  107.090077][   T10] usb 5-1: SerialNumber: syz
[  108.171084][   T10] usb 5-1: config 0 descriptor??
[  109.010459][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.34'.
[  109.018091][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  109.018116][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  109.031536][ T5874] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  109.193696][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  109.193974][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  109.224286][ T5874] usb 3-1: unable to get BOS descriptor or descriptor too short
[  109.226065][ T5874] usb 3-1: unable to read config index 0 descriptor/start: -71
[  109.226099][ T5874] usb 3-1: can't read configurations, error -71
[  109.254465][   T10] usb 5-1: USB disconnect, device number 2
[  110.668480][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  112.767004][ T6082] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  113.065065][ T6057] syz.1.33 (6057): drop_caches: 2
[  114.418470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.438463][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.448468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.458458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.468457][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.478457][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  114.488458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  118.763096][ T6118] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[6118]
[  121.761222][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.920702][ T5881] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  121.920727][ T5881] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  121.920760][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  121.920780][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.022781][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.037070][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.039951][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.045637][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.046554][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.188338][   T10] usb 5-1: USB disconnect, device number 3
[  124.238675][ T5802] Bluetooth: hci5: command tx timeout
[  124.957201][ T6141] chnl_net:caif_netlink_parms(): no params data found
[  126.316387][ T5802] Bluetooth: hci5: command tx timeout
[  127.511871][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.513391][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.513574][ T6141] bridge_slave_0: entered allmulticast mode
[  127.539284][ T6141] bridge_slave_0: entered promiscuous mode
[  127.569116][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.569246][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.569455][ T6141] bridge_slave_1: entered allmulticast mode
[  127.572121][ T6141] bridge_slave_1: entered promiscuous mode
[  129.767528][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.815544][ T5802] Bluetooth: hci5: command tx timeout
[  130.029096][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.257179][ T6141] team0: Port device team_slave_0 added
[  131.300256][ T6141] team0: Port device team_slave_1 added
[  131.668710][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  131.833347][ T5802] Bluetooth: hci5: command tx timeout
[  131.906164][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.906181][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.906205][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.910087][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.910101][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.910123][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.968596][ T5935] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.983093][    T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  131.983116][    T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  131.983149][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  131.983168][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.108395][ T5935] usb 3-1: device descriptor read/64, error -71
[  132.224834][ T6141] hsr_slave_0: entered promiscuous mode
[  132.225866][ T6141] hsr_slave_1: entered promiscuous mode
[  132.226411][ T6141] debugfs: 'hsr0' already exists in 'hsr'
[  132.226443][ T6141] Cannot create hsr debugfs directory
[  132.378738][ T5935] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  132.733908][    T9] usb 5-1: USB disconnect, device number 4
[  132.796017][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  132.796111][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  132.800980][   T37] kauditd_printk_skb: 33 callbacks suppressed
[  132.800998][   T37] audit: type=1326 audit(1774283121.758:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.805912][   T37] audit: type=1326 audit(1774283121.778:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.834636][   T37] audit: type=1326 audit(1774283121.808:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.846547][   T37] audit: type=1326 audit(1774283121.818:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867040][   T37] audit: type=1326 audit(1774283121.818:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867085][   T37] audit: type=1326 audit(1774283121.818:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867120][   T37] audit: type=1326 audit(1774283121.818:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867154][   T37] audit: type=1326 audit(1774283121.818:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867189][   T37] audit: type=1326 audit(1774283121.828:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.867223][   T37] audit: type=1326 audit(1774283121.828:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c380c799 code=0x7ffc0000
[  132.876633][ T5935] usb 3-1: device descriptor read/64, error -71
[  133.128730][ T5935] usb usb3-port1: attempt power cycle
[  133.488578][ T5935] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  133.520995][ T5935] usb 3-1: device descriptor read/8, error -71
[  133.768541][ T5935] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  133.813393][ T5935] usb 3-1: device descriptor read/8, error -71
[  133.979497][ T5935] usb usb3-port1: unable to enumerate USB device
[  134.766370][ T6141] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  135.922789][ T6141] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.007948][ T6141] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  136.112934][ T6141] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.645697][ T6227] evm: overlay not supported
[  137.020752][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.041247][ T6141] 8021q: adding VLAN 0 to HW filter on device team0
[  137.062312][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.062385][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.070397][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.071068][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.009600][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.262173][ T6255] syz.3.80 (6255): drop_caches: 2
[  140.382998][    T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  140.383025][    T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  140.383060][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.383080][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.020746][    T9] usb 5-1: can't set config #27, error -71
[  141.089945][    T9] usb 5-1: USB disconnect, device number 5
[  141.478589][ T5804] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  141.630032][ T5804] usb 4-1: device descriptor read/64, error -71
[  142.158591][ T5804] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  142.288589][ T5804] usb 4-1: device descriptor read/64, error -71
[  142.408678][ T5804] usb usb4-port1: attempt power cycle
[  142.473729][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.598642][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  143.068612][ T5804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  143.089816][ T5804] usb 4-1: device descriptor read/8, error -71
[  143.107766][   T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  143.107790][   T10] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  143.107824][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  143.107836][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.266506][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.328557][ T5804] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  143.346593][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.351865][ T5804] usb 4-1: device descriptor read/8, error -71
[  143.498821][ T5804] usb usb4-port1: unable to enumerate USB device
[  144.082167][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.649862][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.718770][   T37] kauditd_printk_skb: 61 callbacks suppressed
[  144.718782][   T37] audit: type=1326 audit(1774283133.688:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.719890][   T37] audit: type=1326 audit(1774283133.698:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743173][   T37] audit: type=1326 audit(1774283133.698:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743263][   T37] audit: type=1326 audit(1774283133.698:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743296][   T37] audit: type=1326 audit(1774283133.698:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743318][   T37] audit: type=1326 audit(1774283133.698:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743347][   T37] audit: type=1326 audit(1774283133.698:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743370][   T37] audit: type=1326 audit(1774283133.698:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743391][   T37] audit: type=1326 audit(1774283133.698:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  144.743412][   T37] audit: type=1326 audit(1774283133.698:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  145.355874][ T1195] usb 3-1: USB disconnect, device number 8
[  149.284694][ T6310] syz.2.91 (6310): drop_caches: 2
[  149.605267][ T6141] veth0_vlan: entered promiscuous mode
[  150.778485][ T6141] veth1_vlan: entered promiscuous mode
[  150.899126][  T154] bridge_slave_1: left allmulticast mode
[  150.899316][  T154] bridge_slave_1: left promiscuous mode
[  150.945101][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.341142][  T154] bridge_slave_0: left allmulticast mode
[  151.341161][  T154] bridge_slave_0: left promiscuous mode
[  151.341487][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.879941][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  151.938595][ T5804] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  152.036326][ T5935] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  152.036352][ T5935] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  152.036384][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.036404][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.074823][ T5804] usb 5-1: device descriptor read/64, error -71
[  152.309228][ T5804] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  152.638576][ T5804] usb 5-1: device descriptor read/64, error -71
[  152.701187][ T5938] usb 1-1: USB disconnect, device number 5
[  152.755068][ T5804] usb usb5-port1: attempt power cycle
[  153.088573][ T5804] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  153.111734][ T5804] usb 5-1: device descriptor read/8, error -71
[  153.348798][ T5804] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  153.370265][ T5804] usb 5-1: device descriptor read/8, error -71
[  153.478869][ T5804] usb usb5-port1: unable to enumerate USB device
[  153.590029][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.664852][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.730720][  T154] bond0 (unregistering): Released all slaves
[  153.755951][ T6350] syz.3.102 (6350): drop_caches: 2
[  153.897619][ T6141] veth0_macvtap: entered promiscuous mode
[  153.945263][ T6141] veth1_macvtap: entered promiscuous mode
[  154.295185][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.316151][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.343915][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.344131][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.344165][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.344198][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.404057][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'.
[  155.404079][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'.
[  155.404266][ T6375] netlink: 'syz.4.107': attribute type 13 has an invalid length.
[  155.404281][ T6375] netlink: 'syz.4.107': attribute type 12 has an invalid length.
[  157.083429][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.083450][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.744975][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  158.130369][ T5881] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  158.130394][ T5881] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  158.130427][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  158.130448][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.196416][  T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.196429][  T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.342870][  T154] hsr_slave_0: left promiscuous mode
[  159.378721][  T154] hsr_slave_1: left promiscuous mode
[  159.384167][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.384251][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.643459][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.643484][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.288893][  T154] veth1_macvtap: left promiscuous mode
[  160.289173][  T154] veth0_macvtap: left promiscuous mode
[  160.289467][  T154] veth1_vlan: left promiscuous mode
[  160.289769][  T154] veth0_vlan: left promiscuous mode
[  160.550084][    T9] usb 5-1: USB disconnect, device number 10
[  161.800025][   T37] kauditd_printk_skb: 27 callbacks suppressed
[  161.800065][   T37] audit: type=1326 audit(1774283150.738:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800291][   T37] audit: type=1326 audit(1774283150.738:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800447][   T37] audit: type=1326 audit(1774283150.738:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800486][   T37] audit: type=1326 audit(1774283150.738:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800521][   T37] audit: type=1326 audit(1774283150.738:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800556][   T37] audit: type=1326 audit(1774283150.738:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800590][   T37] audit: type=1326 audit(1774283150.738:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800627][   T37] audit: type=1326 audit(1774283150.738:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800664][   T37] audit: type=1326 audit(1774283150.738:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  161.800698][   T37] audit: type=1326 audit(1774283150.738:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bbed0c799 code=0x7ffc0000
[  163.543242][  T154] team0 (unregistering): Port device team_slave_1 removed
[  163.643439][  T154] team0 (unregistering): Port device team_slave_0 removed
[  164.068676][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  165.790953][ T5935] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  165.790979][ T5935] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  165.791013][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  165.791033][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.008563][ T5804] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  166.388024][ T5804] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  166.388050][ T5804] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  166.388083][ T5804] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.388103][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.389502][ T5865] usb 1-1: USB disconnect, device number 6
[  168.495047][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.5.138'.
[  169.438088][ T5865] usb 5-1: USB disconnect, device number 11
[  171.177177][ T5938] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  172.801588][ T5938] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  172.801613][ T5938] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  172.889854][ T5938] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  172.889881][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.267975][ T6567] input: syz1 as /devices/virtual/input/input7
[  173.695243][ T5804] usb 1-1: USB disconnect, device number 7
[  175.983510][ T6584] syz.5.156 (6584): drop_caches: 2
[  176.581122][ T5802] Bluetooth: hci0: Invalid handle: 0x30c9 > 0x0eff
[  178.759974][ T1195] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  178.950889][ T1195] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  178.950914][ T1195] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  178.950947][ T1195] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  178.950967][ T1195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.259002][ T1195] usb 1-1: USB disconnect, device number 8
[  183.802519][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.171'.
[  184.569765][ T6655] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  187.794356][   T37] kauditd_printk_skb: 13 callbacks suppressed
[  187.794374][   T37] audit: type=1326 audit(1774283176.768:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.794415][   T37] audit: type=1326 audit(1774283176.768:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.795903][   T37] audit: type=1326 audit(1774283176.768:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.796307][   T37] audit: type=1326 audit(1774283176.768:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.796337][   T37] audit: type=1326 audit(1774283176.768:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.796369][   T37] audit: type=1326 audit(1774283176.768:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.796397][   T37] audit: type=1326 audit(1774283176.768:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  187.796423][   T37] audit: type=1326 audit(1774283176.768:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  188.838458][   T37] audit: type=1326 audit(1774283176.768:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  189.738579][ T5865] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  190.237708][ T6721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.184'.
[  190.628302][ T6719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  191.085106][   T37] audit: type=1326 audit(1774283180.028:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6715 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  191.898917][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short
[  191.899738][ T5865] usb 5-1: unable to read config index 0 descriptor/start: -71
[  191.899758][ T5865] usb 5-1: can't read configurations, error -71
[  192.466365][ T6747] syz.5.190 (6747): drop_caches: 2
[  193.168579][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  193.327159][    T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  193.327190][    T9] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  193.327224][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  193.327245][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.962323][ T5865] usb 1-1: USB disconnect, device number 9
[  194.375838][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  194.375905][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  195.708527][ T6774] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'.
[  195.708680][ T6774] nbd: must specify at least one socket
[  197.655360][ T6784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'.
[  201.428627][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  201.428834][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  201.428934][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  201.428985][   T60] Bluetooth: hci0: command 0x0406 tx timeout
[  203.444159][ T6844] syz.4.208 (6844): drop_caches: 2
[  205.308561][ T5804] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  205.471843][ T5804] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  205.471866][ T5804] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  205.471898][ T5804] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  205.471915][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.939404][ T5865] usb 1-1: USB disconnect, device number 10
[  209.048107][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.718204][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.728931][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.746891][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.776524][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.929143][ T6868] chnl_net:caif_netlink_parms(): no params data found
[  213.027374][ T5113] Bluetooth: hci2: command tx timeout
[  213.561975][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.568628][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.568866][ T6868] bridge_slave_0: entered allmulticast mode
[  213.579729][ T6868] bridge_slave_0: entered promiscuous mode
[  213.583267][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.588677][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.588905][ T6868] bridge_slave_1: entered allmulticast mode
[  213.598984][ T6868] bridge_slave_1: entered promiscuous mode
[  214.507032][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.571517][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.622296][ T6868] team0: Port device team_slave_0 added
[  214.625662][ T6868] team0: Port device team_slave_1 added
[  214.686793][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.686809][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.686832][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.744396][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.744413][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.744436][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.968499][ T5865] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  215.068045][ T5113] Bluetooth: hci2: command tx timeout
[  215.096855][ T6868] hsr_slave_0: entered promiscuous mode
[  215.098109][ T6868] hsr_slave_1: entered promiscuous mode
[  215.121383][ T6868] debugfs: 'hsr0' already exists in 'hsr'
[  215.121407][ T6868] Cannot create hsr debugfs directory
[  215.155287][ T5865] usb 3-1: Using ep0 maxpacket: 16
[  215.156823][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.156852][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  215.156874][ T5865] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  215.156884][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.212683][ T5865] usb 3-1: config 0 descriptor??
[  215.510069][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.511444][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.553280][ T5865] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  217.108660][ T5113] Bluetooth: hci2: command tx timeout
[  217.224437][ T6868] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  217.965983][ T6944] 9p: Bad value for 'rfdno'
[  218.367325][ T6868] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.724238][ T5113] Bluetooth: hci2: command tx timeout
[  220.425800][  T808] kernel read not supported for file /dsp1 (pid: 808 comm: kworker/1:2)
[  220.837930][ T5804] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  220.878642][ T6868] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  221.008529][ T5804] usb 4-1: Using ep0 maxpacket: 8
[  221.011712][ T5804] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  221.011738][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.011754][ T5804] usb 4-1: config 0 has no interface number 0
[  221.011807][ T5804] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  221.011830][ T5804] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  221.011851][ T5804] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  221.011870][ T5804] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  221.011890][ T5804] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  221.015255][ T5804] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  221.015283][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.015300][ T5804] usb 4-1: Product: syz
[  221.015313][ T5804] usb 4-1: Manufacturer: syz
[  221.015325][ T5804] usb 4-1: SerialNumber: syz
[  221.154312][ T6970] 9p: Bad value for 'rfdno'
[  221.225989][   T36] usb 3-1: USB disconnect, device number 9
[  221.246249][ T5804] usb 4-1: config 0 descriptor??
[  221.259149][ T6960] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  222.025155][ T5804] usb 4-1: NFC: intf ffff8880613f9000 id ffffffff8e756020
[  222.121039][ T5804] nfcmrvl 4-1:0.122: NFC: registered with nci successfully
[  222.155260][ T5804] usb 4-1: USB disconnect, device number 8
[  222.174979][ T5804] usb 4-1: NFC: intf ffff8880613f9000
[  222.226619][ T1311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.404602][ T6868] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  222.513274][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  222.513334][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[  222.513472][ T6987] netlink: 'syz.4.248': attribute type 13 has an invalid length.
[  222.513504][ T6987] netlink: 'syz.4.248': attribute type 12 has an invalid length.
[  224.373838][ T1311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.488813][ T7010] 9p: Bad value for 'rfdno'
[  224.899928][ T1311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.945745][ T1311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.273467][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.259'.
[  226.273501][ T7040] nbd: must specify at least one socket
[  226.411116][ T5935] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  227.458552][ T5935] usb 3-1: Using ep0 maxpacket: 16
[  227.572308][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  227.572355][ T5935] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  227.572375][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.730407][ T5935] usb 3-1: config 0 descriptor??
[  231.747741][ T5935] usb 3-1: can't set config #0, error -71
[  231.792572][ T5935] usb 3-1: USB disconnect, device number 10
[  231.819297][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.264129][ T6868] 8021q: adding VLAN 0 to HW filter on device team0
[  232.276978][ T1311] bridge_slave_1: left allmulticast mode
[  232.276995][ T1311] bridge_slave_1: left promiscuous mode
[  232.277135][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.361617][ T1311] bridge_slave_0: left allmulticast mode
[  232.361636][ T1311] bridge_slave_0: left promiscuous mode
[  232.361800][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.048147][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'.
[  233.048208][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[  233.050106][ T7059] netlink: 'syz.3.266': attribute type 13 has an invalid length.
[  233.050145][ T7059] netlink: 'syz.3.266': attribute type 12 has an invalid length.
[  233.901047][ T5804] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  234.052008][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.052036][ T5804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  234.052079][ T5804] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  234.052099][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.130656][ T5804] usb 1-1: config 0 descriptor??
[  234.149275][ T5804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  234.269286][ T1311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.309020][ T1311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.330230][ T1311] bond0 (unregistering): Released all slaves
[  234.439826][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.448759][ T7027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.497816][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.498010][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.753521][ T5804] usb 1-1: USB disconnect, device number 11
[  235.384950][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  236.375547][    T9] usb 3-1: Using ep0 maxpacket: 16
[  236.377776][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  236.377819][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  236.377840][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.350309][    T9] usb 3-1: config 0 descriptor??
[  237.397363][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  237.787716][ T7099] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[7099]
[  238.165314][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.166348][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.362121][   T10] usb 3-1: USB disconnect, device number 11
[  239.410437][ T7122] blktrace: Concurrent blktraces are not allowed on loop4
[  239.718519][ T5938] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  239.885011][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short
[  239.886699][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -71
[  239.886729][ T5938] usb 5-1: can't read configurations, error -71
[  239.978600][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.144916][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.144945][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  240.144984][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  240.145003][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.209127][   T10] usb 1-1: config 0 descriptor??
[  240.268282][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  240.381312][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.642137][ T5874] usb 1-1: USB disconnect, device number 12
[  243.303727][ T1311] hsr_slave_0: left promiscuous mode
[  243.457817][ T1311] hsr_slave_1: left promiscuous mode
[  243.458648][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.458670][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.510275][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.510292][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.765384][ T1311] veth1_macvtap: left promiscuous mode
[  243.765453][ T1311] veth0_macvtap: left promiscuous mode
[  243.779444][ T1311] veth1_vlan: left promiscuous mode
[  243.779629][ T1311] veth0_vlan: left promiscuous mode
[  245.747597][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  245.919077][ T5874] usb 5-1: Using ep0 maxpacket: 16
[  246.338149][ T1311] team0 (unregistering): Port device team_slave_1 removed
[  246.412626][ T1311] team0 (unregistering): Port device team_slave_0 removed
[  246.762656][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.762683][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  246.762720][ T5874] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  246.762739][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.780747][ T5874] usb 5-1: config 0 descriptor??
[  246.787488][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  246.996250][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.007660][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.174139][ T5865] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  249.366035][ T5938] usb 5-1: USB disconnect, device number 16
[  249.380102][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.380129][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  249.380167][ T5865] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  249.380187][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.606961][ T5865] usb 1-1: config 0 descriptor??
[  249.623646][ T5865] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  249.748543][  T808] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  249.881758][ T6868] veth0_vlan: entered promiscuous mode
[  249.907833][  T808] usb 3-1: Using ep0 maxpacket: 16
[  249.931899][  T808] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  249.931944][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.931967][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.931986][  T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  249.932024][  T808] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  249.932044][  T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.960673][ T7245] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[7245]
[  250.001809][ T6868] veth1_vlan: entered promiscuous mode
[  250.041563][  T808] usb 3-1: config 0 descriptor??
[  250.214836][ T5938] usb 1-1: USB disconnect, device number 13
[  250.573527][ T6868] veth0_macvtap: entered promiscuous mode
[  250.576435][ T6868] veth1_macvtap: entered promiscuous mode
[  250.769407][  T808] usbhid 3-1:0.0: can't add hid device: -71
[  250.769520][  T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  250.788595][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.803223][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.828015][  T808] usb 3-1: USB disconnect, device number 12
[  250.903978][ T1016] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.928348][ T1016] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.930187][ T1016] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.931195][ T1016] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.411958][ T7293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.305'.
[  255.690203][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  255.690269][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  255.708662][   T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  255.732271][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.732283][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.871695][   T36] usb 1-1: Using ep0 maxpacket: 16
[  255.876744][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.876771][   T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  255.876808][   T36] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  255.876828][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.975145][   T36] usb 1-1: config 0 descriptor??
[  256.046925][   T36] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  256.241093][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.241112][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.584920][ T5935] usb 1-1: USB disconnect, device number 14
[  257.168503][ T5938] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  257.397230][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.397259][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.397278][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  257.397317][ T5938] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  257.397337][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.466377][ T5938] usb 1-1: config 0 descriptor??
[  257.806226][ T7319] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[7319]
[  258.768446][   T37] kauditd_printk_skb: 37 callbacks suppressed
[  258.768462][   T37] audit: type=1326 audit(1774283247.738:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.778450][   T37] audit: type=1326 audit(1774283247.738:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.784843][   T37] audit: type=1326 audit(1774283247.738:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.784927][   T37] audit: type=1326 audit(1774283247.738:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.784966][   T37] audit: type=1326 audit(1774283247.738:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.784997][   T37] audit: type=1326 audit(1774283247.738:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.785029][   T37] audit: type=1326 audit(1774283247.738:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.785061][   T37] audit: type=1326 audit(1774283247.738:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.785095][   T37] audit: type=1326 audit(1774283247.738:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  258.785131][   T37] audit: type=1326 audit(1774283247.738:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  259.029879][ T5938] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  259.057256][ T5938] usb 1-1: USB disconnect, device number 15
[  260.061769][ T7340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.316'.
[  260.909393][ T7333] ptrace attach of "./syz-executor exec"[6868] was attempted by "./syz-executor exec"[7333]
[  261.189983][ T7334] fido_id[7334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  261.528938][ T5935] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  261.568530][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  265.537683][ T5935] usb 4-1: Using ep0 maxpacket: 16
[  265.545553][    T9] usb 7-1: Using ep0 maxpacket: 32
[  266.419559][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -71
[  266.419597][ T5935] usb 4-1: can't read configurations, error -71
[  266.493512][    T9] usb 7-1: unable to read config index 0 descriptor/start: -71
[  266.493550][    T9] usb 7-1: can't read configurations, error -71
[  266.950885][ T7374] netlink: 44 bytes leftover after parsing attributes in process `syz.6.324'.
[  266.988606][ T5865] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  267.419928][ T7385] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[7385]
[  267.559171][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  267.604775][ T5865] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  267.604801][ T5865] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  267.604835][ T5865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  267.604855][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.820567][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.820597][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.820618][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  267.820656][ T5935] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  267.820676][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.825690][ T5935] usb 4-1: config 0 descriptor??
[  268.268413][    T9] usb 1-1: USB disconnect, device number 16
[  269.894965][ T5935] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  269.973951][ T5935] usb 4-1: USB disconnect, device number 10
[  270.878791][ T7412] fido_id[7412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  271.108656][   T36] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  271.295621][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  271.380780][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[  271.397435][   T36] usb 1-1: Using ep0 maxpacket: 32
[  271.408288][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.408307][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.408327][   T36] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  271.408528][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.455827][   T36] usb 1-1: config 0 descriptor??
[  271.478503][ T5865] usb 4-1: Using ep0 maxpacket: 16
[  271.480519][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.480535][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  271.480556][ T5865] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  271.480567][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.487064][ T5865] usb 4-1: config 0 descriptor??
[  271.564282][ T5865] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  271.968628][ T5938] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  272.153166][ T5938] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  272.153200][ T5938] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  272.154232][ T5938] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  272.154255][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.846183][ T7444] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[7444]
[  274.248140][   T36] usbhid 1-1:0.0: can't add hid device: -71
[  274.248251][   T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  275.180555][   T36] usb 1-1: USB disconnect, device number 17
[  276.265217][   T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  276.265551][ T5865] usb 5-1: USB disconnect, device number 17
[  276.357645][ T5935] usb 4-1: USB disconnect, device number 11
[  276.552421][   T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.552452][   T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.552472][   T36] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  276.552516][   T36] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  276.552535][   T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.115333][   T36] usb 3-1: config 0 descriptor??
[  278.138003][   T36] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  279.514521][ T5935] usb 3-1: USB disconnect, device number 13
[  279.797106][ T7489] fido_id[7489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  279.976417][ T7494] syz.4.353 (7494): drop_caches: 2
[  281.073346][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'.
[  281.073476][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'.
[  281.073728][ T7510] netlink: 'syz.4.357': attribute type 13 has an invalid length.
[  281.073816][ T7510] netlink: 'syz.4.357': attribute type 12 has an invalid length.
[  285.050563][ T7549] syz.4.368 (7549): drop_caches: 2
[  288.908461][   T36] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  289.078465][   T36] usb 5-1: Using ep0 maxpacket: 16
[  289.080706][   T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.080724][   T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  289.080747][   T36] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  289.080757][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.087800][   T36] usb 5-1: config 0 descriptor??
[  289.102180][   T36] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  289.307807][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.309184][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.324135][ T7581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  289.811144][ T5935] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  289.972596][ T5935] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  289.972621][ T5935] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  289.972654][ T5935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  289.972674][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.251605][    T9] usb 3-1: USB disconnect, device number 14
[  293.302569][ T5935] usb 5-1: USB disconnect, device number 18
[  293.707990][ T7616] syz.4.380 (7616): drop_caches: 2
[  296.209464][ T7643] blktrace: Concurrent blktraces are not allowed on loop4
[  298.808488][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  298.988457][    T9] usb 1-1: Using ep0 maxpacket: 16
[  299.012273][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.012303][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  299.012342][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  299.012362][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.042752][    T9] usb 1-1: config 0 descriptor??
[  299.055166][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  299.278575][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.279107][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.213004][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  300.217157][ T5938] usb 1-1: USB disconnect, device number 18
[  300.387238][ T7679] syz.0.397 (7679): drop_caches: 2
[  300.401191][   T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  300.401216][   T10] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  300.401257][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.401278][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.276521][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[  303.356874][    T9] usb 5-1: USB disconnect, device number 19
[  303.698490][  T994] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  303.958663][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  303.958680][   T37] audit: type=1326 audit(1774283292.918:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958722][   T37] audit: type=1326 audit(1774283292.918:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958757][   T37] audit: type=1326 audit(1774283292.918:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958792][   T37] audit: type=1326 audit(1774283292.918:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958837][   T37] audit: type=1326 audit(1774283292.918:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958871][   T37] audit: type=1326 audit(1774283292.918:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958907][   T37] audit: type=1326 audit(1774283292.918:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958940][   T37] audit: type=1326 audit(1774283292.918:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.958974][   T37] audit: type=1326 audit(1774283292.918:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  303.959008][   T37] audit: type=1326 audit(1774283292.918:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  304.453200][  T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.453283][  T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.453442][  T994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.453680][  T994] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.453722][  T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.025879][  T994] usb 4-1: config 0 descriptor??
[  306.282129][  T994] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  306.565695][    T9] usb 4-1: USB disconnect, device number 12
[  307.131248][ T7735] fido_id[7735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  307.207330][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[  308.078478][  T994] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  308.240685][  T994] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  308.240712][  T994] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  308.240745][  T994] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.240765][  T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.821755][  T994] usb 1-1: USB disconnect, device number 19
[  312.239737][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  312.445460][   T10] usb 4-1: Using ep0 maxpacket: 16
[  312.453853][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.453879][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.453920][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  312.453941][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.512505][   T10] usb 4-1: config 0 descriptor??
[  312.547047][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  312.730013][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.752203][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.891263][  T994] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  314.816354][   T10] usb 4-1: USB disconnect, device number 13
[  315.497532][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  315.497568][   T37] audit: type=1326 audit(1774283304.468:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.510241][   T37] audit: type=1326 audit(1774283304.478:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.510283][   T37] audit: type=1326 audit(1774283304.488:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.510319][   T37] audit: type=1326 audit(1774283304.488:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.630399][   T37] audit: type=1326 audit(1774283304.598:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.646926][   T37] audit: type=1326 audit(1774283304.618:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.646971][   T37] audit: type=1326 audit(1774283304.618:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.647007][   T37] audit: type=1326 audit(1774283304.618:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.647042][   T37] audit: type=1326 audit(1774283304.618:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  315.647076][   T37] audit: type=1326 audit(1774283304.618:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7793 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bd37c799 code=0x7ffc0000
[  317.147363][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  317.147432][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  318.728446][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  319.872670][    T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  319.872694][    T9] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  319.872728][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  319.872748][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.134681][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.434'.
[  320.134742][ T7834] nbd: must specify at least one socket
[  320.588502][    T9] usb 1-1: can't set config #27, error -71
[  320.668505][    T9] usb 1-1: USB disconnect, device number 21
[  325.408531][ T5938] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  333.228474][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  333.390503][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  333.395614][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  333.398038][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  333.408480][    T9] usb 5-1: Using ep0 maxpacket: 16
[  333.410473][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  333.410511][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.410535][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.410553][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  333.410591][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  333.410610][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.493673][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  333.494336][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  333.535456][    T9] usb 5-1: config 0 descriptor??
[  333.890795][ T5938] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  334.168097][    T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0006/input/input24
[  334.233786][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short
[  334.238098][ T5938] usb 1-1: unable to read config index 0 descriptor/start: -71
[  334.238132][ T5938] usb 1-1: can't read configurations, error -71
[  334.294043][    T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0006/input/input25
[  334.676395][ T5805] Bluetooth: hci2: command 0x0406 tx timeout
[  335.116094][    T9] kye 0003:0458:5013.0006: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[  335.200211][    T9] usb 5-1: USB disconnect, device number 20
[  336.090683][ T5113] Bluetooth: hci5: command tx timeout
[  336.448100][ T7912] fido_id[7912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  336.516685][ T7890] chnl_net:caif_netlink_parms(): no params data found
[  336.748498][ T5935] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  336.950893][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.951000][ T5935] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  336.951041][ T5935] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.951061][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.135005][ T5804] kernel write not supported for file /input/mouse0 (pid: 5804 comm: kworker/0:4)
[  337.696850][ T5935] usb 7-1: config 0 descriptor??
[  337.923002][ T5935] usb 7-1: can't set config #0, error -71
[  337.986858][ T5935] usb 7-1: USB disconnect, device number 5
[  338.181404][ T5804] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  338.256587][ T5113] Bluetooth: hci5: command tx timeout
[  338.308729][ T5804] usb 1-1: device descriptor read/64, error -71
[  339.250932][ T5804] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  339.299549][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.299668][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.300221][ T7890] bridge_slave_0: entered allmulticast mode
[  339.302282][ T7890] bridge_slave_0: entered promiscuous mode
[  339.304257][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.304318][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.304422][ T7890] bridge_slave_1: entered allmulticast mode
[  339.305692][ T7890] bridge_slave_1: entered promiscuous mode
[  339.418243][ T7890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.418496][ T5804] usb 1-1: device descriptor read/64, error -71
[  339.453303][ T7890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.505022][ T7890] team0: Port device team_slave_0 added
[  339.508613][ T1195] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  339.522486][ T7890] team0: Port device team_slave_1 added
[  339.536440][ T5804] usb usb1-port1: attempt power cycle
[  339.576663][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.576680][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.576702][ T7890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.642064][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.642078][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.642101][ T7890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.658458][ T1195] usb 3-1: Using ep0 maxpacket: 16
[  339.700567][ T1195] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  339.700752][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.700797][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.700838][ T1195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  339.701031][ T1195] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  339.701073][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.878863][ T5804] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  339.914140][ T5804] usb 1-1: device descriptor read/8, error -71
[  339.990204][ T1195] usb 3-1: config 0 descriptor??
[  340.271621][ T5804] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  340.340881][ T5804] usb 1-1: device descriptor read/8, error -71
[  340.348769][ T5113] Bluetooth: hci5: command tx timeout
[  340.486813][ T5804] usb usb1-port1: unable to enumerate USB device
[  340.704108][ T7890] hsr_slave_0: entered promiscuous mode
[  340.705921][ T7890] hsr_slave_1: entered promiscuous mode
[  340.707308][ T7890] debugfs: 'hsr0' already exists in 'hsr'
[  340.707331][ T7890] Cannot create hsr debugfs directory
[  341.572283][ T1195] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0007/input/input26
[  341.718026][ T1195] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0007/input/input27
[  341.947729][ T1195] kye 0003:0458:5013.0007: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  342.028632][ T1195] usb 3-1: USB disconnect, device number 15
[  342.398531][ T5113] Bluetooth: hci5: command tx timeout
[  343.737824][ T7963] fido_id[7963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  343.990553][ T7975] libceph: resolve '0..' (ret=-3): failed
[  344.001659][ T7975] netlink: 'syz.6.472': attribute type 11 has an invalid length.
[  345.186578][ T7890] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  346.078956][ T5865] kernel write not supported for file /input/mouse0 (pid: 5865 comm: kworker/1:4)
[  346.218032][ T7890] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  346.265730][ T7890] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  346.488581][ T7890] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  348.888523][   T36] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  349.624605][ T8017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.485'.
[  350.100681][ T8016] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  350.616544][   T36] usb 1-1: Using ep0 maxpacket: 16
[  350.738968][   T36] usb 1-1: device descriptor read/all, error -71
[  350.919252][ T8025] Bluetooth: MGMT ver 1.23
[  351.063336][ T8028] process 'syz.2.486' launched './file0' with NULL argv: empty string added
[  351.704470][ T7890] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.042240][ T7890] 8021q: adding VLAN 0 to HW filter on device team0
[  352.074274][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.074591][ T7176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.137432][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.137550][ T7176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.958597][   T37] kauditd_printk_skb: 14 callbacks suppressed
[  353.958617][   T37] audit: type=1800 audit(1774283341.898:349): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.486" name="/" dev="fuse" ino=4 res=0 errno=0
[  356.333582][ T8058] netlink: 44 bytes leftover after parsing attributes in process `syz.6.495'.
[  356.780765][ T8057] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  360.711824][ T5865] kernel write not supported for file /input/mouse0 (pid: 5865 comm: kworker/1:4)
[  361.683993][ T7890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.986329][ T7890] veth0_vlan: entered promiscuous mode
[  362.003598][ T7890] veth1_vlan: entered promiscuous mode
[  362.084758][ T7890] veth0_macvtap: entered promiscuous mode
[  362.105172][ T7890] veth1_macvtap: entered promiscuous mode
[  362.128610][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  362.156883][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.188900][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.278519][    T9] usb 1-1: Using ep0 maxpacket: 16
[  362.393880][    T9] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config
[  362.393993][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  362.394043][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  362.394063][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  362.394107][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.397807][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  362.397834][    T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  362.397851][    T9] usb 1-1: Manufacturer: syz
[  363.454104][    T9] usb 1-1: config 0 descriptor??
[  364.365359][   T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.365623][   T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.366085][   T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.366578][   T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.371770][    T9] rc_core: IR keymap rc-hauppauge not found
[  367.372670][    T9] Registered IR keymap rc-empty
[  367.406693][ T8125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.507'.
[  367.471468][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  368.047021][ T8123] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  368.196441][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  368.836804][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  368.979397][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28
[  369.146884][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.165576][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.182398][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.198526][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.238839][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.269644][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.298279][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.318613][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.339188][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.360123][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  369.383216][    T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  369.383239][    T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  369.424915][    T9] usb 1-1: USB disconnect, device number 30
[  369.541005][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.541018][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.627647][   T37] audit: type=1326 audit(1774283358.578:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627678][   T37] audit: type=1326 audit(1774283358.578:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627699][   T37] audit: type=1326 audit(1774283358.578:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627719][   T37] audit: type=1326 audit(1774283358.578:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627739][   T37] audit: type=1326 audit(1774283358.578:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627759][   T37] audit: type=1326 audit(1774283358.578:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627778][   T37] audit: type=1326 audit(1774283358.578:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627798][   T37] audit: type=1326 audit(1774283358.578:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627818][   T37] audit: type=1326 audit(1774283358.588:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  369.627839][   T37] audit: type=1326 audit(1774283358.588:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408ba2c799 code=0x7ffc0000
[  371.086546][ T6974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.086566][ T6974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.357094][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  371.508611][   T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  371.528428][    T9] usb 1-1: Using ep0 maxpacket: 16
[  371.530255][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  371.530296][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.530318][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.530336][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  371.530368][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  371.530378][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.533557][    T9] usb 1-1: config 0 descriptor??
[  371.698461][   T31] usb 3-1: Using ep0 maxpacket: 16
[  371.700555][   T31] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config
[  371.700607][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  371.700631][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  371.700649][   T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  371.700669][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.705865][   T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  371.705891][   T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  371.705909][   T31] usb 3-1: Manufacturer: syz
[  371.802055][   T31] usb 3-1: config 0 descriptor??
[  372.196529][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  372.196715][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  372.248510][    T9] usb 1-1: USB disconnect, device number 31
[  372.478441][   T31] rc_core: IR keymap rc-hauppauge not found
[  372.478462][   T31] Registered IR keymap rc-empty
[  372.478561][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.498691][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.532613][   T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  372.534555][   T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29
[  372.632680][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.875496][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.898785][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.924719][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.954586][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  372.979813][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  373.003995][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  373.018574][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  373.038493][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  373.058628][   T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  373.082575][   T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  373.082589][   T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  373.134018][   T31] usb 3-1: USB disconnect, device number 16
[  374.604806][ T8182] syz.2.522 (8182): drop_caches: 2
[  378.567564][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  378.567637][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  378.728434][ T5938] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  378.888395][ T5938] usb 5-1: Using ep0 maxpacket: 16
[  378.890210][ T5938] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  378.890262][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  378.890340][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  378.890367][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  378.890387][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.891979][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  378.892159][ T5938] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  378.892211][ T5938] usb 5-1: Manufacturer: syz
[  379.089989][ T5938] usb 5-1: config 0 descriptor??
[  381.578448][ T5938] rc_core: IR keymap rc-hauppauge not found
[  381.578467][ T5938] Registered IR keymap rc-empty
[  381.578628][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.598526][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.629496][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  381.631251][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30
[  381.701067][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.719707][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.738575][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.758483][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.778696][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.798491][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.818985][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.838505][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.858475][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  381.878639][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.050123][ T5938] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  382.050145][ T5938] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  382.106536][ T5938] usb 5-1: USB disconnect, device number 21
[  383.398492][    T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  383.748757][ T8252] Invalid ELF header len 7
[  385.685201][    T9] usb 8-1: device descriptor read/all, error -71
[  392.277708][ T5804] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  392.438461][ T5804] usb 7-1: Using ep0 maxpacket: 16
[  392.440591][ T5804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.440643][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  392.440667][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  392.440686][ T5804] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  392.440706][ T5804] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.444739][ T5804] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  392.444755][ T5804] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  392.444765][ T5804] usb 7-1: Manufacturer: syz
[  392.550136][ T5804] usb 7-1: config 0 descriptor??
[  393.528959][ T8295] ==================================================================
[  393.529051][ T8295] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400
[  393.529306][ T8295] Read of size 1 at addr ffff88806330b0a8 by task syz.7.556/8295
[  393.529322][ T8295] 
[  393.529379][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.7.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  393.529401][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  393.529423][ T8295] Call Trace:
[  393.529432][ T8295]  <TASK>
[  393.529440][ T8295]  dump_stack_lvl+0xe8/0x150
[  393.529531][ T8295]  print_report+0xba/0x230
[  393.529564][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.529620][ T8295]  kasan_report+0x117/0x150
[  393.529699][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.529723][ T8295]  __kasan_check_byte+0x2a/0x40
[  393.529774][ T8295]  lock_acquire+0x79/0x2e0
[  393.529819][ T8295]  rt_spin_lock+0x83/0x400
[  393.529839][ T8295]  ? dma_buf_fd+0xb0/0x370
[  393.529941][ T8295]  ? preempt_schedule_common+0x82/0xd0
[  393.529992][ T8295]  ? fd_install+0x97/0x3e0
[  393.530052][ T8295]  ? __pfx_rt_spin_lock+0x10/0x10
[  393.530072][ T8295]  ? fd_install+0x387/0x3e0
[  393.530093][ T8295]  ? fd_install+0x38c/0x3e0
[  393.530115][ T8295]  dma_buf_fd+0xb0/0x370
[  393.530136][ T8295]  udmabuf_create+0xf26/0xfe0
[  393.530191][ T8295]  ? __pfx_udmabuf_create+0x10/0x10
[  393.530217][ T8295]  udmabuf_ioctl+0x1f6/0x310
[  393.530234][ T8295]  ? __pfx_smack_file_ioctl+0x10/0x10
[  393.530339][ T8295]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  393.530358][ T8295]  ? __rcu_read_unlock+0x83/0xe0
[  393.530383][ T8295]  ? __fget_files+0x2a/0x420
[  393.530404][ T8295]  ? __fget_files+0x2a/0x420
[  393.530426][ T8295]  ? bpf_lsm_file_ioctl+0x9/0x20
[  393.530483][ T8295]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  393.530500][ T8295]  __se_sys_ioctl+0xff/0x170
[  393.530575][ T8295]  do_syscall_64+0x14d/0xf80
[  393.530636][ T8295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.530674][ T8295]  ? clear_bhb_loop+0x40/0x90
[  393.530695][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.530713][ T8295] RIP: 0033:0x7fb42e4bc799
[  393.530766][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.530782][ T8295] RSP: 002b:00007fb42c6cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.530813][ T8295] RAX: ffffffffffffffda RBX: 00007fb42e736180 RCX: 00007fb42e4bc799
[  393.530828][ T8295] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000008
[  393.530841][ T8295] RBP: 00007fb42e552c99 R08: 0000000000000000 R09: 0000000000000000
[  393.530854][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.530866][ T8295] R13: 00007fb42e736218 R14: 00007fb42e736180 R15: 00007ffe010aecb8
[  393.530888][ T8295]  </TASK>
[  393.530894][ T8295] 
[  393.530899][ T8295] Allocated by task 8295:
[  393.530935][ T8295]  kasan_save_track+0x3e/0x80
[  393.530959][ T8295]  __kasan_kmalloc+0x93/0xb0
[  393.530980][ T8295]  __kmalloc_noprof+0x3e7/0x7b0
[  393.531052][ T8295]  dma_buf_export+0x3ba/0xb10
[  393.531070][ T8295]  udmabuf_create+0xee5/0xfe0
[  393.531083][ T8295]  udmabuf_ioctl+0x1f6/0x310
[  393.531096][ T8295]  __se_sys_ioctl+0xff/0x170
[  393.531119][ T8295]  do_syscall_64+0x14d/0xf80
[  393.531133][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.531149][ T8295] 
[  393.531153][ T8295] Freed by task 8289:
[  393.531161][ T8295]  kasan_save_track+0x3e/0x80
[  393.531181][ T8295]  kasan_save_free_info+0x46/0x50
[  393.531234][ T8295]  __kasan_slab_free+0x5c/0x80
[  393.531256][ T8295]  kfree+0x1c1/0x6c0
[  393.531275][ T8295]  __dentry_kill+0x211/0x5e0
[  393.531291][ T8295]  finish_dput+0xc9/0x480
[  393.531309][ T8295]  __fput+0x6a3/0xa90
[  393.531353][ T8295]  task_work_run+0x1d9/0x270
[  393.531381][ T8295]  exit_to_user_mode_loop+0xed/0x480
[  393.531418][ T8295]  do_syscall_64+0x32d/0xf80
[  393.531431][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.531448][ T8295] 
[  393.531452][ T8295] The buggy address belongs to the object at ffff88806330b000
[  393.531452][ T8295]  which belongs to the cache kmalloc-1k of size 1024
[  393.531468][ T8295] The buggy address is located 168 bytes inside of
[  393.531468][ T8295]  freed 1024-byte region [ffff88806330b000, ffff88806330b400)
[  393.531487][ T8295] 
[  393.531491][ T8295] The buggy address belongs to the physical page:
[  393.531505][ T8295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63308
[  393.531522][ T8295] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  393.531537][ T8295] flags: 0x80000000000040(head|node=0|zone=1)
[  393.531556][ T8295] page_type: f5(slab)
[  393.531574][ T8295] raw: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[  393.531595][ T8295] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  393.531612][ T8295] head: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[  393.531627][ T8295] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  393.531643][ T8295] head: 0080000000000003 ffffea00018cc201 00000000ffffffff 00000000ffffffff
[  393.531657][ T8295] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  393.531667][ T8295] page dumped because: kasan: bad access detected
[  393.531681][ T8295] page_owner tracks the page as allocated
[  393.531688][ T8295] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 67, tgid 67 (kworker/u8:4), ts 94628649277, free_ts 0
[  393.531720][ T8295]  post_alloc_hook+0x231/0x280
[  393.531827][ T8295]  get_page_from_freelist+0x28bb/0x2950
[  393.531845][ T8295]  __alloc_frozen_pages_noprof+0x18d/0x380
[  393.531863][ T8295]  allocate_slab+0x77/0x660
[  393.531881][ T8295]  refill_objects+0x334/0x3c0
[  393.531898][ T8295]  __pcs_replace_empty_main+0x35c/0x710
[  393.531918][ T8295]  __kmalloc_noprof+0x530/0x7b0
[  393.531941][ T8295]  ieee802_11_parse_elems_full+0x159/0x2ab0
[  393.532014][ T8295]  ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cd0
[  393.532056][ T8295]  ieee80211_iface_work+0x84e/0x1340
[  393.532074][ T8295]  cfg80211_wiphy_work+0x2ab/0x4a0
[  393.532134][ T8295]  process_scheduled_works+0xb6e/0x18c0
[  393.532156][ T8295]  worker_thread+0xa53/0xfc0
[  393.532177][ T8295]  kthread+0x388/0x470
[  393.532194][ T8295]  ret_from_fork+0x51e/0xb90
[  393.532225][ T8295]  ret_from_fork_asm+0x1a/0x30
[  393.532240][ T8295] page_owner free stack trace missing
[  393.532247][ T8295] 
[  393.532252][ T8295] Memory state around the buggy address:
[  393.532262][ T8295]  ffff88806330af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.532275][ T8295]  ffff88806330b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.532287][ T8295] >ffff88806330b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.532296][ T8295]                                   ^
[  393.532305][ T8295]  ffff88806330b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.532317][ T8295]  ffff88806330b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  393.532326][ T8295] ==================================================================
[  393.532433][ T8295] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  393.532449][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.7.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  393.532471][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  393.532483][ T8295] Call Trace:
[  393.532490][ T8295]  <TASK>
[  393.532498][ T8295]  vpanic+0x56c/0xa60
[  393.532526][ T8295]  ? __pfx_vpanic+0x10/0x10
[  393.532550][ T8295]  ? __pfx___schedule+0x10/0x10
[  393.532578][ T8295]  panic+0xc5/0xd0
[  393.532608][ T8295]  ? __pfx_panic+0x10/0x10
[  393.532633][ T8295]  ? preempt_schedule_thunk+0x16/0x30
[  393.532657][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.532678][ T8295]  check_panic_on_warn+0x89/0xb0
[  393.532708][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.532728][ T8295]  end_report+0x73/0x180
[  393.532745][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.532765][ T8295]  kasan_report+0x128/0x150
[  393.532783][ T8295]  ? rt_spin_lock+0x83/0x400
[  393.532807][ T8295]  __kasan_check_byte+0x2a/0x40
[  393.532832][ T8295]  lock_acquire+0x79/0x2e0
[  393.532852][ T8295]  rt_spin_lock+0x83/0x400
[  393.532871][ T8295]  ? dma_buf_fd+0xb0/0x370
[  393.532891][ T8295]  ? preempt_schedule_common+0x82/0xd0
[  393.532915][ T8295]  ? fd_install+0x97/0x3e0
[  393.532934][ T8295]  ? __pfx_rt_spin_lock+0x10/0x10
[  393.532955][ T8295]  ? fd_install+0x387/0x3e0
[  393.532975][ T8295]  ? fd_install+0x38c/0x3e0
[  393.532995][ T8295]  dma_buf_fd+0xb0/0x370
[  393.533017][ T8295]  udmabuf_create+0xf26/0xfe0
[  393.533044][ T8295]  ? __pfx_udmabuf_create+0x10/0x10
[  393.533070][ T8295]  udmabuf_ioctl+0x1f6/0x310
[  393.533085][ T8295]  ? __pfx_smack_file_ioctl+0x10/0x10
[  393.533109][ T8295]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  393.533127][ T8295]  ? __rcu_read_unlock+0x83/0xe0
[  393.533150][ T8295]  ? __fget_files+0x2a/0x420
[  393.533170][ T8295]  ? __fget_files+0x2a/0x420
[  393.533192][ T8295]  ? bpf_lsm_file_ioctl+0x9/0x20
[  393.533210][ T8295]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  393.533227][ T8295]  __se_sys_ioctl+0xff/0x170
[  393.533254][ T8295]  do_syscall_64+0x14d/0xf80
[  393.533270][ T8295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.533288][ T8295]  ? clear_bhb_loop+0x40/0x90
[  393.533308][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.533326][ T8295] RIP: 0033:0x7fb42e4bc799
[  393.533342][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.533357][ T8295] RSP: 002b:00007fb42c6cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.533377][ T8295] RAX: ffffffffffffffda RBX: 00007fb42e736180 RCX: 00007fb42e4bc799
[  393.533392][ T8295] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000008
[  393.533404][ T8295] RBP: 00007fb42e552c99 R08: 0000000000000000 R09: 0000000000000000
[  393.533417][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.533428][ T8295] R13: 00007fb42e736218 R14: 00007fb42e736180 R15: 00007ffe010aecb8
[  393.533449][ T8295]  </TASK>
[  393.533713][ T8295] Kernel Offset: disabled