last executing test programs:

16m37.916688648s ago: executing program 32 (id=195):
open(&(0x7f0000001600)='./file0\x00', 0x143142, 0x0) (async)
r0 = open(&(0x7f0000001600)='./file0\x00', 0x143142, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0107030109022400020000000009046f0000aad823000904"], 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x1814000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

14m45.14214722s ago: executing program 33 (id=486):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x8c, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6f, 0xa0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "43ffac1f08"}, {0x5, 0x24, 0x0, 0x95}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xffff, 0x3ff, 0xc0}, {0x6, 0x24, 0x1a, 0x0, 0x1d}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x6, 0x9, 0xff}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x2, [0x2, 0xa1, 0x1000, 0x401, 0x2e, 0x16]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x53, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x3, 0x1d}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0xf9, 0x1, 0x4, 0x10, 0x1}, 0x24, &(0x7f00000002c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x8, 0xf, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "77f3a994c3ad215efce6ca3c8bf7c0b4"}]}, 0x4, [{0x67, &(0x7f0000000400)=@string={0x67, 0x3, "64543f05555d42209dad8a92fc509aee7503c8aa6fea4af536541f9a3e4caa9f281adac6507e7ee4d90b4f9fcea2fadce030579878f9a155299e75ab925a148e7a7d128e0ce3ae54f67f19e2a5c8b991d3e2584ac3d5df46c64325d095831b7cec1b66fd7a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}, {0x38, &(0x7f00000004c0)=@string={0x38, 0x3, "f9305c90970b1ca0065dfae9cb5d0f386d5c9fc653104a9a18d832c29f58eda47e85bdd9913a9e5f2e49d3251f1c8e65de434f15ca3f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1004}}]})
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000600)={"b0453822", 0x400, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", '\x00', "001000", "c77e072c", ["c3dad2b677ffffffffffec00", "51f3541a910080ffffcb3a10", "e1000300", '\x00\x00\x00\x00\x00\x00\v\x00']})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000220100"])
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0xe, r10, &(0x7f0000000600), 0x0, 0x0, 0x800, 0x1, {0x0, r11}})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @nl=@unspec, @rc={0x1f, @any, 0xf3}, @hci={0x1f, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, 0xf900, 0x0, 0x9139, 0xa4, 0x3ff})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0}, 0x0)

14m25.92218836s ago: executing program 34 (id=499):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
r4 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b})
io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, 0x0, 0x1)
r5 = syz_pidfd_open(r1, 0x0)
r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x30, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0xb2, 0x4}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0xe, 0x6c, 0x10, 0x59}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x5, [{0xa7, &(0x7f0000000500)=@string={0xa7, 0x3, "529f2eaf569ab4d50ca7217ff39ed337a6cd0ccf025009feaea9810000003a14082f21b7e8b31b63c813fd75d4096a7315741eaf3a67f2a1dce74f5a613f7ec60bcf1a943bce4f54b436bb45a181df8c9a637a8d17fa2f9ded7938cc7452dc8e2f802fddbcb30a79ec775e2b323cc1ffb128a342dde25e01dab0e8eaa28a3160f0496121bd72ef4c2d3ab053a2acfa97b804863172da898672d3d13c7db184d014b9c1af33"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}]})
syz_usb_control_io(r6, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x7c04ec922cc3d6f2, 0x7, 0x32, {0x32, 0x9, "ac9ad37d1649e025acbf1f07ca2fea1677c23aff029602a56665a8ea3271f66b798021aa7f49601fe31b2c64b9878c2e"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2f}}, &(0x7f00000007c0)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x1, 0x3, 0xff7d, 0x9d}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x2, 0xff00, 0x81, [0xc030]}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xa4, 0xf0f, 0x9, [0xff0030, 0xff0000, 0xc000, 0x0, 0x7fbf0f]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x5, 0x8000}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0xfe, 0x1, "9eaa26fb", "5a7d34a3"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x2, 0xe4, 0x33, 0x1, 0x2}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0x13, 0x40, "6f92bb603dae9cae4e830561bc7fd32b2f923743a3351c81271a036494a4860a7a08722f32c6bdeb89ac247f690cd286e38b2b398e0ab5ab1f15c2bc113737d6"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x120, 0x0, [0xff0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "dc59"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="a2753b781de2"}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "53ce"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}})
open_by_handle_at(r5, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000400)='\x00', 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0x9)

14m25.658559404s ago: executing program 35 (id=497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_emit_ethernet(0xa6, &(0x7f0000001780)={@random="e973abc7ac22", @local, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x98, 0x65, 0xe000, 0x3, 0x11, 0x0, @empty, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x4, 0xf9, 0x3, 0x8}, @ra={0x94, 0xce}, @timestamp={0x44, 0x10, 0x18, 0x0, 0xb, [0xd94, 0x8001, 0x3d8]}, @ra={0x94, 0x4}]}}, {0x2, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "382e587cffe4946a68523f00e7efb88844bf4393ad6538b5fca97d8608e5b219", "cc3beb816598b3807b08e3aa886aaf79", {"7614aa20b8eecff7ee5f34c17e1f9a42", "c77ccc08d97933de1b92f9340752ccfe"}}}}}}}, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000015c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000078000000020011907800000000000000000000000700649078020000000000000004000000353daa63f029f0e0c3809530ee143f157d874646ac868af624c1896040b6951de1c1c508e9278dc849457440abd51d5a0009fdc18941fd20bb5951f1e2c6f1681552af177b1f2f6a20c9813fc90d2f2f"], 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001ab00)=""/102391, 0xfffffe9e)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3})
r3 = socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)={0x8b, 0x6f, 0x1, {0xa, [{0x0, 0x1, 0x5}, {0x4, 0x4, 0x1000}, {0x80, 0x1, 0x5}, {0x40, 0x2, 0x1}, {0x10, 0x1, 0x8}, {0x0, 0x3, 0x4}, {0x20, 0x1, 0x4}, {0x0, 0x1}, {0x20, 0x3, 0x8}, {0x2, 0x2, 0x7}]}}, 0x8b)
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x80}}, 0xc044040)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900090200000000000000fedbdf25a76a8e12fc7229656e1eae9283ab286cd119f33e091c75c07ff3c9a85353519874e9caa4a83eeb3304a1bcb89115"], 0x10}}, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000001580)=0x1c)
timer_delete(0x0)
close(0x3)
syz_clone3(&(0x7f000001aa80)={0x200090000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0), {0x16}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000400)=""/189, &(0x7f0000001680)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

14m25.484960285s ago: executing program 36 (id=500):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_io_uring_setup(0x1377, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0xfffffffc, 0x200000}, 0x0, 0x0)
socket(0x1e, 0x805, 0x0) (async)
socket(0x1e, 0x805, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045)
recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/160, 0xa0}], 0x1, 0x0, 0xff9f}, 0x2}], 0x1, 0x40000020, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000200)='./file0\x00', 0xc2083, 0x1c3) (async)
r2 = open(&(0x7f0000000200)='./file0\x00', 0xc2083, 0x1c3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

14m25.328142502s ago: executing program 37 (id=498):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x50}}, 0x24000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13m40.3757036s ago: executing program 8 (id=548):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x6)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x7)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0)
r5 = dup(r3)
fanotify_mark(r2, 0x1, 0x4800105c, r5, 0x0)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

13m38.832447249s ago: executing program 8 (id=553):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x38, 0x65, 0x0, 0x72, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x7, 0x4, 0x1, 0x0, 0x3, 0x65, 0x78, 0x11, 0x88, 0xe, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x4)
socket(0x8, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x140, 0x18, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x60, 0x15, 0x2c, 0x40, 0x7, "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", 0x1, "b9397e048c16e0a4b7d3701a63a8ab83d351d479"}}]}, 0xfffffffffffffe74}}, 0x0)

13m37.801539083s ago: executing program 8 (id=561):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000202505a1a440000e02030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000010000000006241a00002809058103ff030000000904010000020d00000904010102020d0000090582022000000101090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x11, 0x400, 0x8, 0xba7, 0x1, 0x15, 0xc, 0xc75, 0x14, 0x2, 0x856, 0x10}}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

13m37.560014393s ago: executing program 2 (id=562):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4084)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

13m36.578483947s ago: executing program 6 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r2=>0x0})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x9, 0xd, 0x5, 0x84e, 0xa, "e956465867c7310e1362d0e79a2d586f01a978"})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008003500060008"], 0x30}}, 0x0)

13m36.498701022s ago: executing program 2 (id=564):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003040)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="24afc52dfa5087b1fa846b4c0e680604f9a88919bfab820eb72b5c2f34d1b4f3b85fe86558ff3f2c2ca882", 0x2b}, {&(0x7f0000002780)="a2fdf4cc1b3843e1bdf2cd553d0040dfd066a2dfed0f17d487c4fcabb59a8ab5fcd7839dbd74c3dc3aae6bc67d02a82dca96c7f50914f9edc2ceba02ade07d726d014ab5976bf3082fe553ba3505380b98bfff3f368ea3ca182848ae1cb9424fda927f2a1e1fbfdf457af70f9e02350192fa97c4234135593aec88f25a4ca008178a550fd7f05e418f474c69089d7ddab03b55d4eda8ec0d42144e8cb4b94d279c62f5dbc9389c2b123aef189a4f852d2f3883ced97b3fb81105faa44fcb3d4fec5433f7879fc8b5c1ff44212aa1f3615e7990755d03b52af26cc4", 0xdb}, {&(0x7f0000002880)="5a9b97f7221edb4fc9befd203e8851915fa8a67c99bb21f55c0b8addebbd8135086762feeb855a855e086020621edeb69a0dd08c505c0e4d161dcbcd107f9a456eba540c38550caef4364b12a115293676f2ba9e154285c442f6af11206aba123f41647c213ef8a1cbcb3dac2fe62aec80d0f491add1869ffc48bc2cca25e3761635812e8d87da3b1b64a7f9bccbeb293b2783d03720b4a13db541a8846f1639158e0577fc4430ce62b61a886e802f98155013abb7159f40dd242f76b96d03249fd2fce16eb68997b67e9ce6544f022d42466fb5a9adcbe636e53c7a0c5cd94fde60a62d", 0xe4}], 0x3, &(0x7f0000002f80)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}], 0xc0, 0x44}}], 0x1, 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r5, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, 0x8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=""/163, &(0x7f0000000040)=0xa3)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x8}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
read$FUSE(r8, &(0x7f0000000740)={0x2020}, 0x2020)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m36.403802154s ago: executing program 6 (id=566):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r2, &(0x7f00000005c0)=""/4108, 0x100c, 0x9b) (async)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @bpq0, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x10000000)

13m36.104237687s ago: executing program 6 (id=567):
open$dir(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fadvise64(0xffffffffffffffff, 0x9, 0x80006, 0x5)
socket$kcm(0x10, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0)

13m35.86281752s ago: executing program 6 (id=568):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x23, 0xaf, {0xaf, 0x5, "aceb0b773a9328677c565951c0e3d4999890903cf8c57d8b56f990043891c7fec617e6d776773ebfee50d51caba38113a26413868fbae1c682ff49e78043e10270e5b731d5fc5c84ce187accfa210d88edcca9fc7ae0636f7572a3894314497fb6317ddafea72783cf2aaa19178d13e5a092b7580312fa5faf681115246471ec228f1a3a598ada101ab5c7f2568ee2204a4fa98aa5c454f6f577f04f72e4aa21a54131fb0cca9db4b68744e151"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x7d, "0c096c22a37e5bd29e0015f04e0539296d13bb2b26ffc8d818080195d5ef38921b14b6517dc27bd9b7cfab462627bd0a40f2ff38f3eaf56ce4745b90eae11bf31a8b5d6853d64f024295cd9d03c85f011456668d7edbde7163d31b21bb2f3fb5652fde176df08a5deb8595ff7579f396731ecc654f5b12f4e0b6b59469"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x91}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0xe}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m35.467902958s ago: executing program 2 (id=570):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81801)
io_uring_enter(r0, 0x50e6, 0x66f6, 0x14, &(0x7f0000000040)={[0xffffffffffff0000]}, 0x8)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0xf5, {0x5, 0x4, 0x8, 0x0, 0x2}})
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x20010, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000001800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x11, r0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/51, 0x33}, {&(0x7f0000001400)=""/118, 0x76}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000001540)=""/138, 0x8a}], 0x9, &(0x7f00000016c0)=""/237, 0xed}, 0x0, 0x2021, 0x0, {0x1}}) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000001800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x11, r0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/51, 0x33}, {&(0x7f0000001400)=""/118, 0x76}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000001540)=""/138, 0x8a}], 0x9, &(0x7f00000016c0)=""/237, 0xed}, 0x0, 0x2021, 0x0, {0x1}})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x88, r3, 0x70891e722ec64ebd, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000001a40)=0x5e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x140, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xfc, 0x45, "bbcb13f14c92166aa54d56f3806d7b963b8782c6120e5e216caae676a822686b9ee6c06eca125e03df26c7750d53fecd82541edd6510183940523cd5e04fed1201c5b6d86784a201c0b47490cc5572855b6c0a976d553d69fc2bebfea3082a79a60b7b14e268df5a28a49679ae56a6c31c048bed0a9647c6e3ded0e9af3774c5400870ad1eb941b27cb899b42cfa8f9045055ea8c132c9774417710c9b7898f65d96c1ae24112a54c10e2ed0914b9eaa2eaeac9e64a1191824fc3e0ffb4e9bc977c1dc7386d367d47e18a93f33a6b74e8671954f0638cbcdee4e19225f701b0e6368081e03acd952e5b1e20bb7b22a828d6a337890e11df8"}, @NL80211_ATTR_TESTDATA={0x25, 0x45, "87b5ee6131834c9b9c8c372c10addd1a2fb61c60608cdeeba01fdc0574b3b6cde7"}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x404c0e0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c80), 0x244102, 0x0) (async)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c80), 0x244102, 0x0)
ioctl$SNDCTL_SYNTH_ID(r6, 0xc08c5114, &(0x7f0000001cc0)={"befa03866525a3bd217875fa68ba78256bfbcfd056d4e7edc76b22a002a1", 0x3c, 0x2, 0x401, 0xf27, 0x7, 0x3, 0x1, 0x5, [0x9, 0x274, 0x6, 0xd87, 0xfffffff1, 0xd0, 0x0, 0x7, 0x401, 0x3, 0x9, 0x6, 0x2, 0x7, 0x1000, 0xf, 0x5, 0x7, 0x7]})
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001dc0)=@buf={0x0, &(0x7f0000001d80)}) (async)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001dc0)=@buf={0x0, &(0x7f0000001d80)})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000001e00)=0x8, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001e40)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
bind$rxrpc(r7, &(0x7f0000001e80)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @loopback, 0x4}}, 0x24)
r8 = syz_open_dev$sndpcmp(&(0x7f0000001ec0), 0x3, 0x22c200)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000001f00)=0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f80), r5)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008085}, 0x4) (async)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008085}, 0x4)
memfd_secret(0x0) (async)
r10 = memfd_secret(0x0)
name_to_handle_at(r0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0xa, 0x6, 0x8, 0x2}}, &(0x7f0000002100), 0x1000)
open_by_handle_at(r6, &(0x7f0000002140)=@reiserfs_6={0x18, 0x6, {0x5, 0x6, 0x1, 0xf511, 0x6, 0x9cba2272}}, 0x535241) (async)
open_by_handle_at(r6, &(0x7f0000002140)=@reiserfs_6={0x18, 0x6, {0x5, 0x6, 0x1, 0xf511, 0x6, 0x9cba2272}}, 0x535241)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000021c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002180)={<r11=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000002200)={0x4, 0x8, 0xfa00, {r11}}, 0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000002240)='cubic\x00', 0x6) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000002240)='cubic\x00', 0x6)
epoll_create(0x9a) (async)
epoll_create(0x9a)

13m33.846255622s ago: executing program 6 (id=571):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x41595556}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000500)={&(0x7f0000000580)=""/213, 0xd5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802efffffff8524f37f4fd2a199f29b9f9c5e00000020000000950000000000d88229536995f12100000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = socket(0x23, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={<r5=>0x0, 0xb0, "5d1b61189b90d39e61f33486c1660d2263fc226dc9625c6070f7606dac6c3936ffa3b48b8854d3e23a71db21c9afdbf6a040df47f6c40a8c85c3f8ab2d2e8c94d72515ac5ba2654661d83faf52c11ef31d72e889cb69a22653b42a7a6fcb6ba86933417bdef109e4fa9b5dece226c13046f6ece04ce55b01c536b84d4ca9a5ce50564b13ec27f5f045f942e0ff46671115858c4c30ec0d4afa78ec383bcd2c22c9fa5835147e607a23aae3738c5120c1"}, &(0x7f0000000080)=0xb8)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000003c0), &(0x7f00000004c0)=0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x8009, 0x8, 0x2cb, r5}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0)

13m33.307319464s ago: executing program 8 (id=572):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x20, 0x31, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x3a) (async)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x20, 0x31, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) (async)

13m33.011798648s ago: executing program 2 (id=573):
add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x10001}, 0x0)
r0 = shmget$private(0x0, 0x1000, 0xa48, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000440))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000640)=0xe8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$peekuser(0x3, r4, 0x4)
r5 = getpgrp(0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xd76}, 0x18)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r7, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10)
shmctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x3, r1, r2, r3, 0x0, 0x287554a64d808e5, 0x1}, 0x3, 0x3, 0x80, 0x6, r4, r5, 0x7})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f0000000640), 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x2e4b5a2d, 0x81, 0xffffffff})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r11, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@map_val={0x18, 0xa, 0x2, 0x0, r11}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m29.347241245s ago: executing program 6 (id=574):
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0xb, 0xe9, 0x40, 0x5fc9, 0x61, 0xcd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0xa3, 0xc0, 0xfc, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4e, 0x7, 0x3}}]}}]}}]}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2400d0d4)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000d14130429bd7000ffdbdf250800ac440000000021f1917495c5a4b87a59d9014e52ddb83e57"], 0x18}}, 0x90)

13m28.342354747s ago: executing program 2 (id=575):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4084)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

13m27.527945882s ago: executing program 8 (id=576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r3=>0x0})
prlimit64(r3, 0x9, &(0x7f00000000c0)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000d00)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)="667cadfe3871376fb4eb191a9679cd9b130dd7149a055a41be8df616ea4ecd6b5ef7976c5509b0a3a98025cff6b7baab815f9eedcfece662e2c03db685a142d696d08790565d65f95f19a15518be6ab551af773bad73af72e4a523a96a1f2797a7069b45dcca119e4840ebd232eec0b8df65a2dfac4ec9e50fbca8bbb0659afc9217d47c1e8a178db195ae684f47bd917405a75e263258a2aa2c89069af21458ff7640e6d3b73d35e6f291be350b6a10b826c22de1a8ae898fc377b4bdeee6716726410d255ad3e53a84e80126a46281bd8d5e85d3fda4e694fd83e1759e2321383ac61de409", 0xe6}, {&(0x7f0000000040)="983946", 0x3}, {&(0x7f0000000580)="6699ff0b9bc61e7d9f24036d6a284323a441362597a51b937961ff1b8343b0526f489e825940fb00b558ba444bda0c9131fd16bd975e6a9219d7713e27731144b53a9992f0f0bb6a73b7d197beb458314909eb", 0x53}, {&(0x7f0000000600)="b5056881d077a64319a1a9d746850ffc", 0x10}, {&(0x7f0000000640)="c3b9140de06e89aea8590cdb1277f110588113914cc95c3a2c256356cae6cb423b9794eafee8edae6029f9ba425a6ebe9726dd6a132c7de34a374a74505e4e91d4678fe82c74bcbc1580f56649988be0e8b219b1edb15ebbf9151d99f79a8ab4a8bbec74335e4002870ce96300fb5a000b729b1858479fd19c4fe5c527f377baf2628e24a7c06693cd27d8fb11454bd23ddc92084cd55bb29f6db0a3239ad01acc1076ac3ac6b677a1f7259128422d0d6f34000cba00e75eccef1e8fae3bad47ae8c", 0xc2}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="e46171cc17bbc90c937ad0dfc867c609c387a23b1138531443765f66bbfd4380180dcef52bd21e736a061d58f50ef075a3ec079bd9be037381e6009dbbaade950073dc8d4ccfcd5f3d9c7c72dfaf2b39c784148a89854d0573f81517840708c825e781b8aefc6424a8200770bd150d38d99c188b053ef145a21c7c31684beb26ffddec029957ebda25983cca453aeaa2a4858ebe86b95999a2b8e731ee9d15932daaea4f6bf66817aa71fdd669fc69480cccdf2648a2ffa1fbd8868db7e64433ebc0adedb15beccc677007dd9d9e9b01b458083db39142405a03f8f4fae72d202a557db1ab5695a1202ef64b1e5f9e1e287107751f5dd14a4e2f7b6e26fa7c0b5e257b52a30a0843d43f53d13431f4025d52ca2474405adcccaf452e5b8d8f277f17ca5c66bec985258dce5136af2f997a3640afc858e49bbafbb8067109289bef4c744dd85be50959a18f0c3fd3f9ccc07b7df5c0b8d006f03ec61c38c7ab0929f4abf7e81506ba79323e6032ef3eb9eab74219243a912259c79830faf2fa51b691b5a4eb839e89e1479e191fb1ae68a1b0783d255213bea3f71e83a68e746bb16b42920d0d812961bf063ca871b1cfcbc17d6ee9ea50de13df3acfa8353f348e04ec74070e513ae5aa5d115b01518520e4c7fd80b1c7bb358b77e92478b666bcebe4aa43cd434bceb06fb1d5446e00dbdfe9fe4f2ab9825b8597550c10919112c0fdd29ae3ef75f983bd53c29929335f5aae70be460fb3db68a66292654ecf66ba5ea65c41fef24a38dc0db08c2c0d14f3fd1e8510273cc091268a3f687bf330baadedc7f1b07e2969c8269238f5a25e6366bbf897bc26c11c3fe9fe7dbbdd2e314895b089c56480c01e8f83ffd16e90cc2fbc2f3c2a4930d898f95d766f57c7b8ad6eec43aefb28771f8e3eea679d3ebd2d8e63eef6206fe1e45ac3fe46aedb7e3dc40df3b2515b1f69fd33d1c73cf0c6f6cc175a12f52276d78b43b13ad7b64d7a2c6a4d0ff9fe1b50f8e5b56e18d0a790f1b2f853f45761dcc55d462751630de761556c8cec547255bc240f1a5bec4aaa6b649c67e504b6e15d4eebd89cabc52e54f5b84263f3585c005275589e5ef2e646749985eb4e7f11753a06cc14f30c485fcbab127624e24544012d6702276ff812389f8259f5432dd7f4ddad566391a4a8751bb2486bb6dd45e9dd86a4653830cc4a993cffada5d8ee210f4453c7d9b609c501db916515ed731bf380182ff856bdd50b669113c5ef791c132650865b29967bf9c24fd7ff2acea98d0fea8e076876c6d0df69f7e17e9198668657e9b20a05ea48f750c1ffee232dbccb072a5973fe7cddfaa290213ba2c5dfdbf1309bbddfe21e158b2760d70a7a826a248ff8669f67fb7069c0974b4aeadf0724aa854b7b745182353bf57afc760bafc902db4a0db3682b2fe372f5fb4b987accc62fdcb778e6c6c8a50bf289ce00baa35e2833173f469656432e28043691a9e6a24a67ee55c6d46a95ab916c768c8cecf9bb09c911936647019bcc6abcb89424ee0b193cdf7beb500964f4031b63de88354c90f4d32e9d0dcd030ce9557b6e9964630bcaaf3a0f35836bf99a884a42a3ae764a744fd4b4b6f90c787fd969c2e6d38e9eb2fed3fdb0caefd39f0648213b448379afa6a33582e1fd896936258040a43bf52f67774e09d2c00711c98d08e4bb506d039da66eb96c00e8eda1e89af93872ee248842417a63aeb1bfa1964e6bbd6057ed1b0c674564bf5a3580eada31dd3d6752e315f798e0e0268a34527c45e2d814af696b71f1171f4f3efabdba8a473f9f570065ba864e4c7029cd12d56a92bdfbf4128adbe83f7c96363b09d871f1d8549d654e3f947193260dbaa4aa7a8d323b1ae6a9ba2bcb7270eeb29eddeff9e01c5e359d7fbab95758f079d713806e98777ed84761ef06eac143eef4ff894d63a186ad1691916629045e5ead19cc8c4aa9806434255db594e134a0545f35b0f7d5161f624bd9993e517aad406ce956cca0d651812df2f4f7c7c87db39f84cce92ceeca59eba039be427346bdc9e678d4083fc9a476fcafaaae28200de1cfbe715933057837d4ce5a7404e02101c9f28f30c32fefd355405228cdd2c8e7d4c7e6f6d3e6de5c3e448e8e03c290d4683945b32d23c27eef795e72bef1bbaa66f7edddfff761bc33f105437cfbc5c4e4e4bb3e1c35fa084aa88aef3509a8040605509cdd1227160248178711b8a62d676a5777bb99d5b7002cbddd11ecc1c95500d9aeb06b69def520466ee6f96167e0ca44edd0c761cc622daf52a389f3a4dab04b50ef649f1007fbf8749043a9985db2817be0cc436cd5c08e2d3af00894bb16f339ff46389fbb09460058c02d4158f1b9c0e7a986aa4d7466a90e3241645af5700880523dd13657e8fbe22b5c3cd4d15dde001c6766b8a446a798eeb5562d49849fb77ad8d9f967a944367362b18f4508e6a908ba2f31e147da4d6da208d55890422e972ca09e4514f22e16f3032c5840969d761c613e3ccef7c52843d079a42e751ba471cc51af81703b4bf99f65b665f07ba5661a2834daf3e46595bffd57d2dfc75f76756bf9594991cc5714c1665d3eb7ea796d7ac2a24c08fb93d80ba5d1aa5ad1916e98e0524812646906ab2d1588181cdd5af515708468a3b3ecaf206a9cee3682e81baf9dd920b65f5e3798ac3f63793f875084912eb09a1c1a8935061fe02e0cd8de69e69be8df9a8222ee520d20a800646a2d7934b3f69e1c3b390e18f684284163a4cc5722e546c2d3f36ceee1c7b42cd720192be9d62be68a3872e38b16aef8cce2a8a506450781e278f30403eca0358f8e48dde58bd29861861b1f060c5393c96f32c1878eda8c5fa1f86794afc51f94960cdc70e2b578d015852f60f662bd9afd7f413e82f129494eac6e3ebf1b6e7bfb5eaa90492cc95ed71099f6f4dd3be983a8ded306675fb18c87960fb632ccb6be21271c59b42cdba85d30259647b8b20850a60f98d0fc125058fecd1d5081e8f6521039cd0fd0fe980b148079d8104cfb58ec7f2e6898d06b5e87d1e83fcd90a59ed3e2c9ba656487348a518a9041d0670ba3e756c78484e0adc2b8b6e60c049c47f888a9a9ef83fb9c03798987f684b09c602e145e7ee77f27dfdf57508b6e13f770e0168a21721f435b5380d8bb28d095aa6f926f88980bb353b0cf8384b85b10e3950ed9c298d6b1f34b3c8b5c3ed58ea09e12cc2b891a4702c98cb6a107301940f4c9f33581cfa978bad181fb777c91ee08cc1e8a492ef4854bc75d1b61e0a4172ff3d91f73cded64e9169915d52440951df2fbbc0f66bdbaa1b0240e1c315ef54c760e3cb742ceb62e3b56d111cab0503d0f5de0851c3efba741f785f4800015ce52694aa141c573a33fe9a13169678e5c336d7487648986b9e794014426ef3d5215ed65f0a34a25e6475daac6eaef2fa039de7cccc1c6ec74cbf80a0373b4139f7b2fd229568b07944a247eed57e4595df2b0551d9884b41f56e47d0bf4350404e1010d9e511b151562406b3a0ced17264074c1b91f5ea6d59208283fbaff45448cadf8be9f2a9481bca862ed9ff6f8c33091fbb1ebe4d19b4ca0f689b80941973c2e086498333d87f1cd1a45d4873b263b8bc628eebe8b406efd581c90a87ac533b2a8c2bb127f9cfac029fd0986ab5c3775bc9867d2f151894c28a31e022521ef8b5c422b86c3c6f543ee7e4ff2e68426026dddafaa6266f35bea671da62032f2882ef60a4b9ff109fe918274c23f98c07cb3984daf0432bead659d9014f7d888fccb4b97fd7f7b97227d84ed04c243b9749ff1783959db19141369e7110b895466ba2529f2eb82bb83aa135419c3ac7078412381555924e4cc0c7540671e276cc2aeed28ac052df766307864e1b5326c7ad279fdd9ecfe552fd011d8e0cfe1e1a5d849eda9b03166d4d88f4b5de79c0c1032d96b62e34a68c8acff34987fa26c1f14f74dee5d5b234225a725183856f5bb16878c771395d77d3c2d3c446752b05dfee56c4a110b18292529b13a180d35bb4bb4750ec24f1f7e78850ded1bb936fa0e92495a1d2edde58bfd31bfa038ee1b1577892e4f507d964a1e978fe7af775b843d87286433e7eed267f90caeec517cd15cea8f97664f246072278bf23372e0f08186b2991accd4838add2631ead3450c3209529f2f9fa53fafe2e3503952f52ce1c02f689532ea25dd19384e1be635ebd664249a2c7941782b146ae71615ba1982e9f5f8980e86fe76dccec35195e1491377af66ecc2f8ab5667a233ca20d16a75c323bf345b00f5bb00078009bf5d719a0fd91d7b2a70d84b435efc62cbde39886473f62e6fe6b603e38ef67152c13dad7c020db33fa04e1adc2a1c1957035a67a3a18d75d543b7481b546aa7c772161e441320a3134069e028f77ea5ba2d7aeade0a907ff7826c187b06b04b4b32abf9771bf669ced36f43077357dd67f67fadaac7b5411e97dc1ea5d3b6223b3e8372fb1268d331400b621074d2e19ffa3f8d6e6a2b922679226af9d2e729a82e78585378032267f477a28c02472175308838b9cd1994738d248ea1c967763cc0d3dc8c22955bf01c5243843a6a41a3142bf5220316a42b0bc3eced5303a893c9536632ed28b74673238e8ad4a74c4e612ce111f72afd0e3f7d985a2ae6ec3fbfc3e3af1dffd9496f69ddcc0c90d56f79829b8dfb5cd9ffd4842c65070a6cda0c02bbddbe97dafa7b5cf66b01b5623301af65598130051a6f18b3fb915d89942a7c5841909fe2a4a6549029ea364b4da0bb04c7f4458678ecd0b43d0f938bb5ec06e54cc254f948a481a0b0fba81c6b602af8e8d47619acf47a955c3fca4c997d7d0b25bd5d8dbe5ac519620d25667f3a24f0bd0c1e81fd5769bd9d2981079deaaeb59c30ba4b119ffe3057148c1e23b7c1c1b270a6e008f2f2a9612d3a353c8ba71166081d962bbdabbb1e8978dfd2c0fd5a04f0567d4ac3844b503327bbbe74701685ba6965c88c7eeb78df867588834ad919cb08f48bcafd00b4bcbe7b915a933633b027c9a34eef607caa6438e26ba0831217b331c46f4d83151b27770a5b50e6c02728d51b780098964c1d2027f38eebb0d657a560f9f238c42e534b437d152714bf6ef2fdc6c580552e5b7d5bff9f407b01c5fbe39a615597a9f4f5a9bf3acbdee56f6ff7503814123a725e69ef756b5843f0c3e0fea8642ea66cfbdda80da6fbf688b5b9fa0e56bf79592250f3e421adb33332d076a3e06dcdb5ecd896586803ddb032c1663792b41cce3c3517d58dbf2dafb1cd7db87a360760d850ceb138dda9d975b47735f91cb80aa22bbc3852d91c4a3c2d07dc508fd4abb31d5533f96d6dc487bd562694bf2315c6b5fd02df80b14c90deebf677be5f092fa300db9d511cee6fe8036c8903fcdd34ab19934c034c459a57c7dc9029e321a0f9b5482da6a773a44d16b2d2bd805ccb8c355072ead6cb53e1df65edec99f5b1ea7a5ac0d9d88e9d1884877c0d6c7ba1ac705f261e3ebd7d327b5f20ab3b1b9b3c1ee24f5e7ada0e6b4c772e61287f646f2b5ac8c63abe6f437b7c9d1b1da74d6a6caa5229f01eeb3f3cf41366e409a0fc8d0e66282bfba325d2ae09e81d02ee4ccd4b25b14c96d7d82506cdcba319028d949b1f5d4863281e911a74a247a783283cfd224f1326f7554e1d6975df23cc387ac7990d53c385692e0d9139e705a31fa9c75e1036aa0996f3213f5db43a2bed4146f0058beec1df2713c3bd412bb2b164b29e0f3bfc5d30dd1b4d8c4a7e2ce665c28e", 0x1000}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000840)="cadae8575155ed23cefb979d9f38e86eb16e97d4c987c1e05cd6f9a40516a05d1079345312cec555e04994f07cbae284e3148d6621271aabf11842dbcd8778e41b80d6d7883dd7a1b27e10d1a5907a51b51dd49f8738160092268f8caadf1ce05f27a7b204bfecb06db24f0a499cdab6f9b5308b8c0da6542cbf1031fdf1bb42f2b94d31ffaddfea28489cb93134b81faf026cae8225bd5bdbbd7d38d261e3144f74c80aff3f54dfd77ccf3b6d410184b3c5ea68dcc7f62308ee1c9025b4c33cfbd6f5f4c14b56620f7d1ef0d146832b1642ea111a2f1982d78f82ac4aed8b382e502e826dea0d815524e329", 0xec}], 0x9, &(0x7f0000000a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r1, r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x20, 0x1, 0x1, [r5, r2, r1, r6]}}, @cred={{0x1c}}], 0x88, 0x20000000}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40000042, 0x0)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0x79, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x4, 0x2, "72027b507c8ea826eba4dd1758feb9b5a7195565a8d4c9c3ecdf3ee9bb69ba6eb8050000009ef67102a572942125b3356717724251de9fe64235ba13692de8e504445040c2bb3efc4f3c69b59897bfba83479209bab06f577ce23c53989ea4b72ca1652fb7bdb3ddecd96fe9fa41de79ec0f5feb4a9ee20b0fbfce7dbfde317d57b1cfcce871156dca6f4de18422018e0aaec2de03a6c01d6e7b6e55174b0b3b7795a9d262f76d5f1600f93051d80eb801e335bf609dfdb64c234538e081f8137b2ec84f8f5e661a4416ffbcc2ab592ad0ba03ffc711588601f9db1abb529b124e56c1d9187f87546054c82d7f7cb0d000"})
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r9)
mount(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x50a1, 0x0)
r10 = gettid()
r11 = syz_open_procfs(r10, &(0x7f00000001c0)='timers\x00')
exit(0x0)
syz_fuse_handle_req(r11, &(0x7f0000001600)="6a7228e8c0edb5fa681e6afa3e9bdc249b411f2619ba563792165b2dee34d81ccecaf9cf14992467db2aadac3ce86b79e4bc9946621220fb5edb992682a246f2f18a396671c197bbc35c47f6f356a23d7ff2e5141f637403c7b93abf7826bc3d3311af08b3a9202d4770a50e7f228987b0f1ecdc1bddadab471860a009dd0a509be4aea2d1b54225a8628a77d7b69352c7b66fe905cffd147a178745f44563dde0177b2b4c6859556c9221674e23319cd9a0c728f522e9e1ea84011cbcd85641523e13787ce303446b2fdf6782f9e13f85a39df938c5af9584ec525db399568a6c643a0c2f1ece72d97830960fa80b6d9e9048c8ee6f47620778406ccc9fbd1a8524bd2f4bf086bfb5eee7d26a211ff3cfd41cd75d552b57090899487ef86d20b581cf4c53978839000d35268994495fbb62238448eb3e6b4b3da5929cb72ec1d809128db8e9c3f2a6d8a993e9c525eb2fbe324c7451fb405bca143fcccf40d9534997bd722daa4e154e0cf542999324b3823394b1242f08ca03d84a64641c1fc17a12a7a40a7eb9266df1c4fbaa8a8021ef8f6143aac087f88dd9ab0b814035e1bc892eac2aa759a02fb1f52ba91d20b666a7a8f7514634a0a9fa8ce9135323f9f8373c01f5fd527453770f150cd1aa5b83f5eb90ad0986b44b0fe36874dee4d582de4b4b9db3211f93d0b10c3a6e43a56bd999386aec3c92cdd2af4fd7946dbc4e44a944b844b5d14eb69d8789a45273692f914b7191263e22b4900074b6186362c2738322386a229b409eea4f5b5ee413048fa3ff01308824755648c07c5a1c5da29b87f303ca5383ac84a70331624df66426ad39f513226a68b3f6f1e4905e58a7f3392a4b645ec5c552daa8f3dc1b7370b077c8643c65707cfa291ab662efad52472dd58b0b3278af1533cfdd00dc5bc175bac506dd95c0937466429c7c0b5b550023da6583e34084cc01aebfbf27c6d0a891212e6e13daef2a1be7e75132656e5b51177f8ea546b77aaf739a0314e6d5531aafa0446ad4f481ec1f5d6c8e0925c7a1d2d3b1e83ec3e799fcc7a69a456ce31a48b22e38a7d8c4f76f184f5b2096260292c059ceb33420d281736d0e84763acc2d9a2e3ad36a7376ddcaf69186e2ab754eb5fd551e893689e2b43bbb005bfb3832b7bc5675f9f33841d9c8c31e2033ad7171dba8b8ba84ff542e1bea6525900bcf560b4393ef7923651db7860b26b01634f8ab02093dd2d416e5b3657b3005486482556cf80e434a48c9a95debc0c448ff0265499b97058e727a71c412319a336c40d749d70a4ccd6190b609efe9795e7db7adb63f537d3a8b2ecc3b3da7ca521f1bc04ef77f509c42871209bf8343d53b7043bd1fd031c4ae0c9ad365f92080811f4a917d911bdfcb935c7e278d795e9969c7b25c98f02b77a07f5c1e6a68716159cb3ec2e9ce69d931a8632473180dc2a2535eea9c046e1490ceb502c88d7749c76102c9401d3325a46d6645c07830c9800e82b1e27f804788267a867272597ed46a486501f2aa67c789be994ba699ec54d64f2627052ea7847f339db8599e9aae03a87b680a5c94c2ea692f0e69494f842759fa317602c7b79121b59c7121a85a37cdb6993e478b2e481527eeb32781cea5f1ad97f992a6a6adbd627a63c34a308a89bff2e0c50bcd96ce66adb98e3637945af55cb150fec4deac6d1596b35491d9171ef24a6f1e1c8d25e230e0f59d837a8613495af98f1ea2867970fb0b3a78d5b43919f94c7a11fc4825ad27f50c8d51c24193c4ebbccb6fb7409c473f6476fe8745d1ff32c8f4abdab21e8e43d7e43c0bc28feb7c2899596f33cc05393b31b52d4d15b7ec5565c233245e1aa5f7d76ca7b944f091ce29b8533b99db28d10eebe37632ce9fdeb4172f9f4e13442c2fbda90c4d9bee720d61ce2a7c66ef4c1a8c7e28eb1e7547f6df9fcac3bbeb5ff37db7dc9b3a8bcf01d06fe06ada97e37dbffbc36ea754cdbe4817036111c0d7a5b05557ec2220fbc7e949702227e6df3d241aeaa1cf3a6c6e69ccde9628d53525d9434444f134f326b8fbf3f7b889e4427a27496f80166eb64aead31d2ccbac0093e355f0c76054d2810855e8794477f3f072955694a2c2397c8e463db8fa0e9fc2714b3fa86cc7ecd50e79c0e09436e3d629cc8d60257c72d55fa0bafbc5f6112c3edbc30b8b60952fe8817c71ad5f9832338a132b2d033ba319f377a241a97eefd4fd7fd966f8f039282d44de9cc44269ea38d523bc242ba8e0e1b5f7749198c0477b665e463f5d10359a08c0749ef76d8093dab675201a708642428a29929f78771a2d5a330515ace268583b04b3c0f647f8facf5f303d681630599aa418f1ff71dd43eeefdcf339cf8a76ba909542ee165749978ae78485829517bb133ab68d4b41efcf76bfeba106853734c28339cd54ab4ea085f6de90e70a5d40080e0c9b7559c07248cdffd80086453fd425e3cd497d9337528f9de7a9f7080ffa131ce49e0a8ee93a4870f6de08aa01032b982982632c05b33a5dba3cbc334e17cbca3dcc867ede5fe95b1f4374376d5056d0294b3025322aa7edba121962720f31d91f467de50cbb4ba6c11d89ee83ddb97f3229eef7cc5478f4385ed5553aea291604aa7dfdc0e08894e2e87d29f45ceb902006197a98273aea38c254294c9859da03300f7e57de0f7a8aa453477cc65a47cdc68dd219b099c849d04082fd33db1f67b08be98b9e89e990a4af0b816bb203d476a4abe2cca3f423d81d9ebbe6bf52ebfa63f2380a984953affffb07072ec734b5366065166c9f8b6cca402394b600f1a9efe5da7087c74d7052e4f52486cd075fe300143f061517dc6298061779d6382436a0b4321979e658cb1eeeee383736ce3fd9c956a9b23cd474307f362804dc6dc65460f8d9f259ae3475bc325946f2863b06944c163445f361a1021951e9b37f3bf88687fc29f60ffa93a6e902224cb49c1287cff4c834085b42e9917d7cf07e68966493404d03b21fb6e971cd0040d138dd233c535df383a279eeeb6e18cefbc92405f9bc69d3ba3fc5d6ab308c0e8e443bab5b19b2937d1cf5882645491ccb46663912a0d2f077151e1ec2754409a085afa5b0c931c97159a77f1204734b50dc02f1212ab329bde1dd1359de2dd37fd51968592409d096f2892499a7a73e4fe390936a2c1881f3c40544d654ac48e9a3bf450aadf0dd7dcaec890d16863ee4a2d1f0f1333fe5a2521c289b5968ec8f6ece2a9cb79efb7b70873228a5c58378be0f4f88424ab9c20ca9f3036ff65887bc67da57d769da640c757dca3ef5bb4c47ae4e624cee35cc39a07528fd1f333112734a1524e4d2ed180a8eba05e6c05643864cd03feba63db25c45142aa6fe54aa6d4a9ff1fb8abfe66dceb43c0bccc64f163c0c9772a068bb0fca45bb9763ff21fc4fade7767ced1cb1d408854fd28c7351f7f702dbcf1d6b9fd242a578720bc212bbb107d931c5cd500948d979ee869d46902d44ac19469b4e036aa3247964cb75292c0c62767de62e756d33e25de3fd2cf877d3aeae23dd6e4f7fe1746ecb21fc412c3276e9c275c13820f5bc5dd4d22f5ecff33e948d894b583b10ebfce290859e93e5561802400d03e8ee45625082a6d8c3e50b4efb76778f61f0d97bb9d92326bc27cdb683032f3daa04609f486d97d7621f25da2c490199039846549e4c5ced557863cb97643fb8efff36436ad1c6a6648e0a3c9d0c06f9c6f13cb5ff300cdcf5827cc01b6d32936e180614c5a80b6623924baabe35a29f27fa2f9108cde4625341dc650109be291b2f6f179ef7a7834bd6dd867780c39ad62ad1046f9efb20ecbf36e42a5f55304fbe96f6dba127a5fcff0a8b507cb6c1d748194b2764c083e38a3730bbc0893a718371204289d16fe695e01cb543bddaa6f94270a11ea987122a662cca18669595c8fd3fb4325b0fe1ff23edfee19484ad64ff5ce28378df2700bdb0ee34085e5dae5b3bd9e582a7c9470f14fae05467e215c1c43769ebfffdccb5a140859b1036082f285e4a6c8e52d5a9c07b89470691574c4a4307b3a18552fca3a419d20eaf8ad72af7703d4d21955d061db48dda1258ebc6b238fc625d038a86ad253e2f9e8c75b5730e7f951f403b3fccc461350364708dd12c83633e8d6cafb633b26dde1db67bd9b61b47af4176a89fa27fe7263a62a0291142bda830a8cb9e810f7da0bdeb2847f5eacb60d766739787a5695bf6bdeaa149ecc796f889ca72bd4a6bfde214e09a3da1cd1b552ba0ebcb8acff509e670413fd87e565c12cd396717c65ff6cccee4f315a089edf983986aeba93b0d3b0802c6ee0d16bb30e8ba4feadc5d275385fa2913a523d31a034b3d3873018128bf074e0faeb32cbe8cfa2856c19bc473a4c2646262d3ac7bd97fafd51af2aa76fa4a5b8c99c1c8be6c363dc267fc4db4201d72658295c3e68a2cef720d1f9a86b9bb7c0fd03377ae60462bb776c857ba3c485910bf48685286fc24b59f1f78072f8e97343cbcecf7bf42fc020b396404b8fb6804e582636799f8b8ccb605257154c835a470bf130c0e0dde5a6fe65c7ecc71f0b7a74cb26d46d7a57ad56fdd72ea5854d2e04edc9881e1c91a1381610a8293acaf0f59e1a248ff145d72662d741dad7fa0f40ff8bb2da9aaf4a6fe65208568e8c2245534e3894efc02eef030fa3b6cdf130160c0d224e3ed9b3b68d10316aa296cea0c214680657110c22577727aeabbacf6305b03d6c4d577aaf673a26b49d8bef544934974d0b802fdbbdd3515c36beb748c39d846f2e6446ae3efea2a2da66a6d98e4b6bd4dcbc170ccfbaa96a495528d825274d5bf354ecfbc7bd65f9f3d23d918438ba8419b929a8b8a1cf2a533580e8cfe0a920b9835eba84fa1667afb25871166ad72488903936286ae47c0ae0a8a377f070bb3cac77c40dd5068c50582c5051d192ac29bb96cc7d22231056d5315abd6381a6c16d41961e492e6f9d8e9f121891c644543ff1d77f2efdbaf1610ee9cc591597bb2823c8f1ca84dd3c8c64f3586a15acf29921be060054a97aaa66a54fdff810a5d79a2abdc58423157ab73d9c63469ab8856f63226bca45f96f103e296ecb93dafdc0ea43a570db78b89c74c5cfcefa14ea46db4dce3e3aa21571452566182dbe77e61f387ac1a08d80c756286bd71b0dd8f7f771ef8ecf11cb38028c8cc700c38a81f971f81a4c0b83b75609c56bf12f7a94f51e53bddaeaeecd705d6cf86d1975c2d5ffe2ede5607962bba08d78942e0b327961f4aebc10695e650cfd2e4af0af1ffe117a6ccba26309f4d1e0933fb25d8e616c7960be5d5d6b63cb47d60557a1281c4810e6b8a152d9b7efd5c353e21b6f4916913217d2e14a6dd18495e61474f39817baaea44b3fc9251045f89114869886100717082783986624294af382a9879775f2d773a4f52f21dc144d7268533e8801dc6b1960338f95071471633c69cd8573ca850510fa64ae585deecce9b21433b1857058c587f98c00889a69a96f5a2d2d5624ccc6d46ac4835e0af7eddd56f92eec318f91cda6c3634aaa15e4b19f8517a35a3165d06c0a26f4932e11dfacd960a996b606cae6cd164721a9489a29fc2f35084b66ca3306b4e4aa03ed494180b9513f149427c2365934ec970864a9617814a77922b742dcb068c1faf717abdfb8bad4b620cb3b2f2c2f3c86849f59561ed27364908aeeef9c85cbefbe8149d0ce074b49fe324ba9a889068ce740d5f4332d08d1ca3b5250c8b8b92e864dbb2bf30c36b994e3d3312580f1254d8c4aa65b1693676053d3fa37b6c574bf1965f4b9a9032e58d64fdc856dcb0edfb9f94cc1203c0897ff459836cd68d5932e413ca4718576662fd430f76de599e50d7b15fe4652bce53a7b51f616258cf2cb1d503d81ff9f772d89aaa48b6ea0df880804beb30f470a58fb4326a9d5629b5414b1e0e1f953a0760e9568e2986e1be2b9f07ed1851f6e934fbc8cd54146938f6567ca6d6fba60d81f587ccd12587bd35879fb7af1cca55b7dea92304fea70006c1b5106d3b9345ac9cf698779958579012dd7c306d039e82144f488105c01199467a9dcbd6e435dfb3c4c94e2d565816749c3bbecabc350edec27212d248819ca37e8e1e9193b18a06f5de6f3a9cd964bdc966fd7d91c9ed8b511b8c0b382dbfdb71fcbd4e0b4cbb7af321dbc2d15d735be15a051a481229e3fa258c1ad2a4f031fee03381ee9d25d271cccb38d5a96b668f75315d0b62f54f476f00f0a208d938b1d155e7a407d90af7b3109b8268a52935304f5a484964f65cee1fdd7040e0009e129cc7f7a89ee0267a81d11dc58e9988c75e71a4e151456f347af721030167b75ff3a5aa7682f4035173eeab5edac92bdef2a368ecb9ca2b677c4f035d2cc87663cfa938a5c2ee1354c5624ac1f8583cebb484999a054f0c3fca59b65324261d77e891dab20a5378c263158f62b15c3acb21814388654b020f698d02ea702109b02d080d39587471103b83599318b325c805b0bd07df550c82fe1eab17975f4877b15f8a447cdf4d44e4f5542dc221c999320657ba3ab54250e0d7abe6fb803b560fa5fd6cccc46c8a8d5b8fdf033464ce6d5025a4c3325dfd5eb39db05b2b9752e0caab489607a8578155c867b23eea1b08cbece1477d86640b5b8d19c8f1c4c56234e8ac462d4c389f0dd910d5ad13a1d32646ec01214dfc07db0301d958e0a11ec5d3a22461bc4e8e1947f9b4614b1d8bc1f8512ba15666aa421b5d34dda14bd7ea1541876312e152894783de78b4a6573f4ec859f458b1abee188c0d17665c80ee8bfa845bdd35c6ab17e2f22c1435c9df7a0fadd221cdd7cc4d86b92e0211c7c78ec47eed17d335f14a377210d8b8ccf75ec5170298760fe3835f54cdc4920399f66aa4d6ed841b56753c2a75dc79e5b4fd0c58cc28ce4aa407ed743dbe946f173b376dff7f907e372fc15b97bbfa21ccda0c4b8e367e5cd6dc2b8381c282600102b0abb910cd37fb8d016d249294d0729499d4e7223462b9828742243ba76a1417a85b3b9f6227ddb90175aa4cc9e0aa4711904153d95371b1c941d38d4723c1c46cbf73ed1835dc846f6869ce12fe2a27c8f16bd0bc3e302121316633a0042fc9d25c235566012dabc1866a0ef0a520337a37e45232bfc2ca28847c8b516d4fe8eca87f6fda82c8b4a62595dec4ce25cfdd40f390582ce8ae194aa98c07da7355fc03b02495bc822b284fe40df5b430b4488ea9549423384e7700e973a761049c20b32a565dd959a47cb791b878169d34fcb9b116b7ddd2aa9a6247ecc50abf670860d18e8be4d907b84aae09e015b3a0a1826f0ee81d80229fe26448e8032e053381bd9f7201b569f4dfa849c8331e08e205b73b0febe3132561b69c44f45bb61178212c072ab7e745a90bbd6eaec1ce515d9e8b7f39d2c3b481b1005c6edd1714d5fccbe134e251b5fea5a2fa974866879e1c704cccd28de09bffbbafddaa72bed09ac352110698d35f1c813b6bf1111050e28760c28f4773b34b2f70258dcd7aa8841df13f98d29fd5971e5e77b43be90df67c76b585c98eff0637fd89a2c7f43efc411e7174e1637b95c618c8d2c5819e5917ced8d8df6006f030e5dfca713baba18ba61e6abc2cefb58fcae7b0ccf6150bdb014cf1e5b2931eee3967a297b95796e7dd63f5b49cc7767cb5a485ce14da829f66583260c0e74cbfd0a7a4771f8e9a4243da67b895b0ba1c14e062f31d351a33ae558515bec2a33b4d622a88adb8f33c5766611f3d9a3e3081f9f1670fdda1f077ab31a55b82679f2d85eaf93b51dc2e09b768941e4c3dac212849ea62a20c7a28b7110ed436c02803fc9af81140afeaa8485ad4fa042d938c21714346a6f3ce250b948edaf79bc3ec4f839a6c4bef44af3d7b90bc1dff150f1b6c9f5dbbfb5d7063f161147363de41203b20fb5dfb0fb15339f532f7ce183627b16bb9600fb9804f939513c9ae36cb4791a521a4f3c018fb839966ca14e1d5051344a81ffed34a69e89340a87b06fd1acf9c757584e65eca01970b4872e3bc5e377fd7ade8ef14c5120efe45547e5628fa82d2c5fe175be9845aafa5f44273005bec06c8e32e667c28dfb97e23627e197c82a6478c770c07fa01cd4f7b1c51eb9626415fcfab192910fc828586033b4160fac8e16c2cd451b3eaef098c47b5e0268c7bab5fc54c8ad90876839425af4f2d7d6b1f427e7cde2005ed7d80885b21047cfec97cbed58c5b7f36b1a17187e7d883bc68d3faf9dcf3d937e6b50972ae1ed5f70bd76f7e82012f126d1d5b83ed3280755987dc9253b5a65fb9165d758986c3bf18ce48dc84e0199031b37df6e09a703b532361ca86e867f52f4beaa2bc58a2f5042c5383a842f64cb1fa850663d28dec2d3cf012e33c8769d7c7d97eb156b9aa6cf2fb9be3938f97127f6f6c5e252bbed4ee076189a7758a940c6c4629ed7b202cdccdef33c8e461a0d5d9213e729798a7548a4cd03855cf6e0dee492fe67397b2238ec4feedac94eb3eb484f482507ed846ac0f0edeacc4f9013ba8c01074d44a80d28506b173d13bc95cef5958451b15eea39fb4426eb830a0a90611434bb38553f0d401f4dec891b8ceeb86a9b235f205d32537ab991974e1226a794fe7605d584aa62a824e5c9f86e38f5ca75a26d439e126e616207c50193e83cdd7942381d4b093a3618add20e11959108298046e0276903658db1ebdc53f9e6823e1162e22496d5f15c25f90f3383a2557c5ede449db91fe38ff134bc60aa073022f48e88bad54044550faccb508f9b9d25117a67ca34fd4d9c686652bb6971ecadf8ccd8d6e57f41fba3f39cbd7b4d8cf0e2014edf5c972cd2faf7681abde34821bb6967b9ff3346479fe4a740b0819cc5ce91c988258c596f9f406cefa12bc745afd66c85b71221dddf218775864a343e23ad361dcbb09616018c67e3d5d4b455f0efe44541fc893fbecdc931ec28394e9933ffd5ff8cf02c12e43ae0ab982aceb11049e1ffd35332e1ea0781c63cb7318c8cd8a2c9b59147158e8e73cc3b5e82305859a866bffef8ca31076c98eb14a43b46500508eb4a94f075ea93d3a5e8c8162802dd703ebb58f8dbf2f4c2777ebdf49e9281b2660384da9149965e658fb4fd0c554c75d922e4b6c30a74af7d2f47888d0c41d0109aaa50a10292b92807d9269e5ee582830ee69f739e22196328e0533af2e58f53f5c14ea8b236d940d7ac4134c68709d0b6819e1a9fb880eb1c26f48f3868d8230bccd50c523f2bd5fd376c9db183366ec542d0b74763b5938e8322eeb6d29e41997a772fe85be82511e640f16a1510f84eec201ee9f9f7bcfe2de0662889025581d6269facadd4ea9f62c9cb6cec15de57c97ad6cf833ff3cd22ac358b0ae2ddbe1f72720dc21dd733f486349a00f334dcce6ad2145d6951cfa0339f4293a3aad6da8bd43b97cdad1fcfec90756d452839371e1c02d94c3e311c1736854520fae84cf036ee29ac6775e4c3da134ce46a8ae94ed30f729c28eb221230aa67aae74b3aa9c856f2b18cf6718f95c8058c0639387c5ec2a833b141981016b5c7e8e810c0d27bc798189ba13a53356f89bb70b02bba5ddc35e93ebd368a95c28f96ed60a7b65a8b39bfc11e00b57d3a1da92c781b79906cd1dac90b0ea1d457f67083fb2db92362a0e5a23187400bc5ac41e03d3d7e03dd6399751603e78fc0b6ac3ddb49d3883997ed4feea997482017cc589d11cadde05d3f61a06df4834392687f3df719e7c670aef7397cf908bb321d04ab9d4109e7940c42056791cc5255b1994aee5ac2b5ea221db7b08027d484902cda95a8450627cff6ebb8f3dc6664ea45544c2b590cbe61670ce23c51287518842dda36f7c8b45653a902719c7cecf285b19067dd46cbbdeabb1b8a7be90117a9d0056bb124efedc63121b7df9ad0f0d6ab29be66f2964e2c8967b022f435f69441099cc5709a1f8759a5d8e5c721efbef58abd03f43a9b68e3aa42efd23868c9d2177ac0cf3ab6ef08969db1cf1a2e43c6d8bc8c3315f9e2a221ad00b9da798f7a8a9157558c140e9294b232e1450047a18be6204ab6b461215748be06ca8762bf69647340ca82f966d338dfb0f84ac815722e1d1d1c333ca91cfba61689f12dc21eae514b7c143d7a5c5bbfeb5983b68f12bd2955dfb92e2856590bd1635e00757afd44ccbd97204b9826b8b0d6ea1203012544f2eb025f69b57460b88c43420ecf12eadc3ca23e89a927c75c0b42d693a04c34b9d68b9a583f370b9d7011df541c628c2aa01d7d9afeaacd0f8cbbfe745be99748e29cfd961dc23d4ceff92a0db945c1303ed47f4890ae35681520eee131307aef2d01957c1d7fec22bb8c7aa8445dbc868063769b05eaed477d2fa3f48bdfd1b370b7ad60882c55c75b10578c43277f2476d74b7ac24862c892c28a404d0668ef7e27b548e5ca11ccacb5c0636bd9c25623e571a7bbfd0b3dadb7e81a75c3efad008b910a1c5072ed6a14c2d38f028afee7d53e3b5ae1439c871dec5b7b421102212e55b4ba68115c3d39c0e3fd269a9cff44df321fd629b28d91295a590326dcb9fd85d9d2e046d07d3f8733cddf15a2325ca2cd5e38c7f3210b813918a6e96b8b23dbab72b1d309790ffe63d4ba33c8b61890f1f9fb89515f095cbdaeef18665ccdd53e2b167f519fb996842c90ffbf18e988b699fa389227255d762912427fa1a5d16174f1c6aa80995eb91828f93f4570aa97eda9fcd925313e0b1011a478446b1e922571d3fe5f16ffa9603d04c19146f8df2867c726b821bb713aaa2a15629350b33ae53c98bf370383dd1276f30f05716b11cb9133bc6bbb4b106fce0cf19cd92bea9bcf4396778a0f8536832a63ef942797de2f8d0badeb9b800b45a0f8da876fe85b9b2e16168866fcc2979d263fb0ea66fd49666c74db4cca1d6141416066267acdece449e05082becc43e15fb3645912b2914f2b3544f951daec21d56ef5bfb9044f41e45ecd9fd779f2558fb8ae380722ad2c8d2f8f01210e100381e440f75b05dcecbf6f8ec7baf3bbc60d7d197d54d3c7563bb1bc97b96193dac178433e3afab2b4e569342c9913ee7f11d03f8a893c5dd1fd573d0f055cd2dfcadfd8d9cef9377ceaf4855a7d9c4c4495c2061d3cf28150aa4d9b5b92f775e75e9edd069155a4b72fe23f74c6fbea68f9e1ebf151605d41c9ae2834c457f193f494718edafdfe4cb02713ffa8dce65e606837df06d7d33c633a7c05ef56fa03e201402c53ed957aad532a3ec30f2fbc88345549a84b143de09056c57d55b215c4db7896b488c9f61c2cd837169c739536b3081223760b9a9c31fad656ae79447cf0bd80b9859ffb63ee18d40becc9d40703aa4090fca0d65fd0aa38d1f88c2373d56d5890288eda664e138c37bb9b0f48511650cd84b85a8dd8b9e7dad1c065c38356fc5d9bb44485c2e57a76cf13c62764359176f2fdd3c076a25cc3728f6992ed8bb24c6c35c6d1ebcb11c9391598e86bd1d2d5584a968647b23439860299127af02133bc44210a40d1b7fc92b69ed0e7557700c9e7dbec8d58588", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x400000000010, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
syz_open_dev$sndpcmc(&(0x7f0000000140), 0x9, 0x131c00)

13m25.429450583s ago: executing program 2 (id=577):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="d60a000004000000611134000000000018000000000000000000000000a41250f7bb55d61383187aecf378b60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000009c0), 0x50044, 0x0)
ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/33, 0x21, <r8=>0x0, &(0x7f0000000540)=""/11, 0xb}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5, 0x5, 0x9, 0xc00, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x3}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x0, 0x3, 0x3, 0x4, 0x10000, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x28a4, 0x4, 0x81, 0x41072, 0xffffffffffffffff, 0x500, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x6}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044080)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r16, 0xae9a)
ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000200)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0x7, 0x1, 0xa, 0xfffffffffffffff4, 0x8}, @generic={0xb, 0x9, 0x2, 0x6, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0xdaab, 0x13, &(0x7f0000000400)=""/19, 0x41000, 0x48, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x9}, 0x10, r8, 0x0, 0x3, &(0x7f0000000880)=[r9, r10, r11, r12, r13, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x5, 0x2, 0x3, 0xb}, {0x5, 0x3, 0x7, 0xa}, {0x0, 0x4, 0xe, 0x8}], 0x10, 0x3}, 0x94)

13m24.467548088s ago: executing program 8 (id=578):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000110}, 0x4884)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x60a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180))
write$dsp(r6, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x3b, 0xff, 0x40})
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, 0x0, 0x0)
chown(0x0, 0x0, 0xee01)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m15.7868093s ago: executing program 38 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x1f, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfe2e, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0xfffffe4b)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'vxcan1\x00', <r2=>0x0})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000012c0)=0x1, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r0, r2, 0x25, 0x11, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f0000001100)=[0x2ad, 0x0, 0x75a, 0x4], 0x6}}, 0x30)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4c044)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[@ANYBLOB="2ca7fb8d30bc6765519498d6fa7fc6b9000000471400042bbd85257000fcdbdf25fcff010073797a3100000519080001000200000005005400010000001cbfa0a77d2d60c4cc7d90880c190e86971de461e1af44ee34337ed8f1dfd8edc1a7a3e5c41414573c45123275953e61a1f1bc4309c82f525409eb464d21595b0e2550f23c4843957781"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000280)=0x48, 0x4)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001080))
sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10}}], 0x1, 0x4802)
recvmsg(r5, 0x0, 0x10000)

12m51.484334152s ago: executing program 39 (id=565):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x57f81fd6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x103)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x20100, 0x0)
r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x1)

12m29.142912279s ago: executing program 40 (id=578):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000110}, 0x4884)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x60a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180))
write$dsp(r6, &(0x7f00000001c0)="5cba91", 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_open_dev$vbi(0x0, 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x3b, 0xff, 0x40})
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, 0x0, 0x0)
chown(0x0, 0x0, 0xee01)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12m28.981380407s ago: executing program 41 (id=577):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="d60a000004000000611134000000000018000000000000000000000000a41250f7bb55d61383187aecf378b60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000009c0), 0x50044, 0x0)
ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/33, 0x21, <r8=>0x0, &(0x7f0000000540)=""/11, 0xb}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5, 0x5, 0x9, 0xc00, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x3}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x0, 0x3, 0x3, 0x4, 0x10000, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x28a4, 0x4, 0x81, 0x41072, 0xffffffffffffffff, 0x500, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x6}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044080)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r16, 0xae9a)
ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000200)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0x7, 0x1, 0xa, 0xfffffffffffffff4, 0x8}, @generic={0xb, 0x9, 0x2, 0x6, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0xdaab, 0x13, &(0x7f0000000400)=""/19, 0x41000, 0x48, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x9}, 0x10, r8, 0x0, 0x3, &(0x7f0000000880)=[r9, r10, r11, r12, r13, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x5, 0x2, 0x3, 0xb}, {0x5, 0x3, 0x7, 0xa}, {0x0, 0x4, 0xe, 0x8}], 0x10, 0x3}, 0x94)

12m28.828166775s ago: executing program 42 (id=574):
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0xb, 0xe9, 0x40, 0x5fc9, 0x61, 0xcd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0xa3, 0xc0, 0xfc, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4e, 0x7, 0x3}}]}}]}}]}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2400d0d4)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000d14130429bd7000ffdbdf250800ac440000000021f1917495c5a4b87a59d9014e52ddb83e57"], 0x18}}, 0x90)

9m44.061101074s ago: executing program 4 (id=1110):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1401690432000f07fcffffff0000000000000000"], 0x14}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
r3 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="19a53ca26da92ddc93d26bf66dca6f01179f26c1347f7732c0d29577e3bae48c50323998dab64771df8371d40d9ce99c44133c69d37a79f2149d53835565ed64ccd2852e9f1208bbd576f6354e615b787e86f78a0a218d798218f6690ab6", 0x5e)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16=r5], 0xe0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x3a, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x7, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x6, 0x8}, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

9m42.048364878s ago: executing program 4 (id=1117):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28e643e8d13c03922ed35b88b5302d73eaaa42e6e944478f3d010f16"], 0x128}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

9m41.717338699s ago: executing program 4 (id=1122):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500000007"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x5, 0xffffffff}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f00000002c0)="cd31b963", &(0x7f0000000380)=""/100}, 0x20)
r3 = timerfd_create(0x0, 0x800)
timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) (async)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)="b7", &(0x7f0000000380), 0x2, r7}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000dc0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r7}, 0x38)
r8 = io_uring_setup(0x27e0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x1a4})
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x1b, 0x20000009, r9)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x48, 0x4004, @fd=r7, 0x7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000300)=""/34, 0x22}], 0x4, 0x11, 0x0, {0x0, r9}}) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x48, 0x4004, @fd=r7, 0x7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000300)=""/34, 0x22}], 0x4, 0x11, 0x0, {0x0, r9}})
io_uring_enter(r4, 0x847ba, 0x3e00, 0xe, 0x0, 0x0) (async)
io_uring_enter(r4, 0x847ba, 0x3e00, 0xe, 0x0, 0x0)

9m40.17627016s ago: executing program 4 (id=1125):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
r1 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)

9m39.818179183s ago: executing program 4 (id=1128):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x3c, 0x29, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x10, 0x3}, {0x1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0) (async)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) (async)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) (async)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

9m39.535350612s ago: executing program 4 (id=1130):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 64)
io_uring_enter(r1, 0x625, 0x4c1, 0xc1, 0x0, 0x0) (rerun: 64)
unshare(0x22020600) (async)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0)
move_pages(0x0, 0x1, &(0x7f0000001400)=[&(0x7f000050c000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10241, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r6, 0x3b83, &(0x7f0000000080)={0x28, 0xb16405bdec0730cd, 0x0, 0x0, 0x2aae75, 0xfffffffffffffffe, 0xc, 0x2f98d6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000180140003000e0007000900007e"], 0x3c}}, 0x4000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fc0300000000040000000000", @ANYRES32=r4, @ANYBLOB="0c009900000400001700000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (rerun: 32)

9m23.95062861s ago: executing program 43 (id=1130):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 64)
io_uring_enter(r1, 0x625, 0x4c1, 0xc1, 0x0, 0x0) (rerun: 64)
unshare(0x22020600) (async)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0)
move_pages(0x0, 0x1, &(0x7f0000001400)=[&(0x7f000050c000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10241, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r6, 0x3b83, &(0x7f0000000080)={0x28, 0xb16405bdec0730cd, 0x0, 0x0, 0x2aae75, 0xfffffffffffffffe, 0xc, 0x2f98d6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000180140003000e0007000900007e"], 0x3c}}, 0x4000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fc0300000000040000000000", @ANYRES32=r4, @ANYBLOB="0c009900000400001700000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (rerun: 32)

2m18.808351643s ago: executing program 3 (id=2680):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1e4, 0x2, 0x4, 0x7ee, 0x50acf567, <r2=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) (async)
r4 = syz_io_uring_setup(0x3734, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r4}, &(0x7f0000000780), 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000030000c74547794cee11ba0dcc23810000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r7, 0x58, &(0x7f0000000500)}, 0x10) (async)
syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000700), 0x0) (async)
io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) (async)
gettid() (async)
r8 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r9, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'RlblRrL\xbbDcn|\xd9F\x88\xee@\x9c\x0e\xec\xfd\xe4\xd1\xc0\x16\xbc\xd4\x7f--\xa9\x04\x00\xdc\xc7e\xad\x1f=\xbf\xe0\x8dl\x16\x92`\xf2\b\xd0\x0e'}]}, 0x3e)
writev(r8, &(0x7f0000000780)=[{&(0x7f0000000240)="5e05", 0x2}, {&(0x7f00000005c0)="3c1b", 0x2}], 0x2) (async)
socket$can_j1939(0x1d, 0x2, 0x7)

2m18.658604481s ago: executing program 3 (id=2682):
bind$unix(0xffffffffffffffff, &(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0xd, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x1, 0x8000000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb0}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r8, 0x4)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m18.008370374s ago: executing program 3 (id=2684):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0x100, 0x5, 0x0, 0x4f90b297, 0xfffffff7, 0x7fffffff, 0xffff})
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x10, 0x41, &(0x7f0000000100)="e3b03a7c5075ec91e071488db5c7c5010e0df41acd244aa54e66fe49f61e0c83334c7e5003cb2c43f23f9018bbe42a78705a2ae9756199b8454cd7655c84c2bfad21268e2b0ab72e88e624e68bd90030794e3f15056f525b671fc35531d7057966d7ffa2074e8808c22eaabc86b35ff6701cfcd658dbbc7291bba65c1fde9f5b9e7384a0797203575ab7aed7228393c3e3870a2d59fd4bebb35c3019cb2e65ef561120175d6d9722ccf2f19aad9d0256410ce7d52cb79a84b9f3d73e28a2ca56e00ddb2188", {0x2, 0x5, 0x32314d56, 0x2, 0xd0, 0x6, 0xc, 0x9}})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)={0x0, @reserved})
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x28)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, <r1=>0x0})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f00000003c0)={0x8, r1})
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000400))
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r0, 0x33, 0x0, @void}, 0x10)
syz_open_dev$dri(&(0x7f0000000480), 0x6, 0x0)
fanotify_mark(r0, 0x80, 0x20, r0, &(0x7f00000004c0)='./file0\x00')
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'veth0_vlan\x00', 0x1})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0), 0x240005, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000000740)={@rand_addr, <r5=>0x0}, &(0x7f0000000780)=0x14)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0xa, 0x5}, {0x9, 0x1}, {0x8, 0x7ff}, {0x3, 0xa4}, {0xb, 0x4}, {0x10, 0x3}, {0x1, 0x5}, {0xa}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000840)=""/103, 0x7b, 0x67, 0x1, 0x400, 0x10000, @value=r0}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000640)=@raw=[@alu={0x7, 0x1, 0x4, 0xb, 0x2, 0x8, 0x1}], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x4b, &(0x7f00000006c0)=""/75, 0x41100, 0x77, '\x00', r5, 0x17, r6, 0x8, &(0x7f0000000900)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xc, 0x3, 0x5481}, 0x10, 0x1f251, r0, 0x1, &(0x7f0000000980)=[r0, r4, r4, r0, r0, r0], &(0x7f00000009c0)=[{0x4, 0x4, 0x9, 0xb}], 0x10, 0x8}, 0x94)
ioctl$LOOP_SET_FD(r4, 0x4c00, r2)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000ac0)={0x6, {{0x2, 0x4e21, @remote}}, 0x0, 0xa, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x590)
r7 = syz_clone(0x8000000, &(0x7f0000001080)="10234438b4ec96c4befbac22546ed3af27828d7d1416d498a09678cef44722b37efb26615bccbca05a8b9e57cf4432bd913731b1eb569a18366508ef3bd9bdd9aef8dacefcce9f8e5820af9bdbbdaa7772027828c3fd9902daebb0cf6bc88a386472d29f3b73", 0x66, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="d088fac26c353ce1365c97d94a2fb794f3c8542f2d04fb5c7f982f4a827960153d7da07de8c14b544a235ee8186018eb3648cd3822edf652827c31a80ca95b68a52bb3e5d4c65bcf5623cfd2f23ad8bafbf6e705cd531ee1d5ab92149c95ee952e58e97cba9f2f78987743f0d67db31dbde007")
sched_setscheduler(r7, 0x0, &(0x7f0000001200)=0x993)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001240), 0x313600, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000001280)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001300)={'wlan1\x00'})

2m16.528789807s ago: executing program 3 (id=2690):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8800)
fchdir(r1)
close(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x137)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000001840)={0x1, 0x8, 0xffffff5e, 0x6, 0x0, 0x2, 0x104, 0x5, 0x0, 0x4, 0xffffffff, 0x2, &(0x7f00000017c0)=[0x32c0000], 0x1, 0x0})
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

2m15.781958429s ago: executing program 3 (id=2693):
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20c}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x4840400, 0x40, 0x62, 0x2, 0x2, 0x0, 0x0, 0x10, 0x1}}, 0x50)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000140)={0xf801, 0x2, 0x4, 0x2}, &(0x7f0000000200)=0x10)

2m15.011946756s ago: executing program 3 (id=2695):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x4040084)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x200, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
dup3(r2, r3, 0x6700000000000000)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6])
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0)
accept4(r8, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0xc0000) (async)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0x7ff})

1m59.942134213s ago: executing program 44 (id=2695):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x4040084)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x200, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
dup3(r2, r3, 0x6700000000000000)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r6])
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0)
accept4(r8, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0xc0000) (async)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0x7ff})

10.922659193s ago: executing program 5 (id=3120):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kvm_test_age_hva\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x2, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x7, 0x8}}}}, 0x30}}, 0x9004)

6.136199507s ago: executing program 9 (id=3126):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000340))
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1c, 0x2, 0x1, 0x7, 0x18004, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
dup3(r1, r2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40)
userfaultfd(0x801)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000044b802aa70bec0e4be307500000000000000009500000004000000c337b10534"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r9}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
getpid()
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

6.017620778s ago: executing program 1 (id=3127):
syz_open_dev$sg(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
chdir(0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r3, 0x7ffffffc, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

5.627138502s ago: executing program 5 (id=3129):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x58, r2, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random='vw'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x0, 0x7], 0x2}, {0xffffffffffffffff, [0x5, 0xb2cc575b459b5b35, 0x4, 0x2, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x7}, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x3}, 0x2, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040c007241500000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}})
dup3(r0, r0, 0x80000)

3.830180276s ago: executing program 1 (id=3130):
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x14, 0x601, 0x70bd27, 0x25dfdbfb, {0x29, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1, 0x0, <r3=>0x0})
r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000600)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3})

3.55199913s ago: executing program 9 (id=3132):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000100010009000000010000009e3cad92a2f7403872be8b54372f64b65c4dc0f8a03889ee8a3b1d9ef6c56d2bb7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000001010400000000000000000200000024000180140001"], 0x88}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x15)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create1(0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRESDEC=r1], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000300000000000019078ac1e0001ac1414aa0b0090781200022825200000000000002f2f00007ffa0040f23295ff"], 0x0)

3.434319562s ago: executing program 1 (id=3133):
socket$packet(0x11, 0x2, 0x300)
write$proc_mixer(0xffffffffffffffff, 0x0, 0xe4)
io_setup(0x30, &(0x7f0000000600))
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x222ac00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x800)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
close(r2)
socket(0x22, 0x2, 0x24)

3.373212705s ago: executing program 9 (id=3134):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x1)
sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="1c4a14bc227a78ac0eeb40e02c", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x3, 0x1c000)
ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x9a5, 0x2c0f73f8, 0x7fff, 0x80000001}, 0x10)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000200))

2.534902148s ago: executing program 1 (id=3136):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x4, 0x9, 0x48, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x10, 0x1, 0x4}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)={@loopback, @private, <r2=>0x0}, &(0x7f0000000180)=0xc)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x40000000)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)="875c3ea4e56ded83fdaf51ce5b2873cb349bbbfb911fcc644caa84a7b7ef63494ae09866d6bace3d0c7b2d1bcf7dc050f10c52eaf7792746240b8188435f89bca4d6701d35b84c0789347d757b2e155fbe2de28a104015c3fd40f73fb4d1954747b685438dfc1ef92a8e6678728a084f8c00d52d4f978a7efba61f9c411013eda41cf0193f32193f5dd46d02890fe5b20ecd4eeb93403b02819061d958723c36e55a37cfc699ea9041ae66b4178eb96096ae31ba9bfebe069c93e079369c613c2f63ccdb3e2d00bc8bc6c786f94acdccf03bf4bc7f5d161df8e93abb86c8f6a5a1b218e1ac599023a398eca3860dac6b589f7f226a2a04919656911e50de1eebd64c5fff65704803836dca4ab153c669991afbbf433bfebab9d5e0fdb092f4c267638bb7992886d806000b69becf2187331590f729bac6c868ca727ef9c2df0342c5b8ec29f4c737c35006a4a08b04c12e51f26266730d31cebaa13d44e0f17221cf8a6f2df59b3811803784bfedb8c0298d00ae0adab7f854ad65c197eea452afcb31007f4e7843373f4ce88dd0ed04ffc855ef733502c6d8bba30f2f3727008307cd216f94492388293f9c1e75484494c3979d4bf1f1a963ac5775cf24b16f68850117f7d4aa46676a64ba9b7f6af2ca0e3a19e5e3132a52a42d6b85734fc52ffebcf44df186a50d8fbcc803e23052e24a30ca80cd3493c70d3d76e334b9cc2074aee563658d6efabfd842e1fb0d24f156bae2a37fdf3d3b373e301756363d87de5c420b20c53ea0f4475572fe7257e50807cf3d54991397238d714c72d027740815efd4418c7bfeb39ac828f23898772412809b2d5dc067632bb589355f8b1e6cf5d7cf53f60ae01f89fd65b7ab250dddcb1c8ffa59e8e39627ef74233603a0c1f4d669d918c37381c9343f573f965f02b6287aa7959d4eb8c78f48168c92da6fe58aa7c03d8cfb55301e3e4497e62d6692de61845847647f69f46db4bc8ffb1907249a6aeb1b37c925c900d8733d703db250ae8152a5ec8606a5cbae6d0f0ebb277a4bfe2371ffbfa7b77a6a265d937eea503489f307356f68153b3f1816ac1919f6646a5e75412dc255049d944f7a522f4ae4216c2a01da390ede43383c88be31f810a33b6b0302be377be52226787c9bdb9f213dbe27dab0ce1e69a31409fdeab428ce783cac84c6137ef9dd28c7f42b7f1ad8d222d190d2eaa646dd0ee4d62377f0e431e02d31addc08509ff8a6192b3912cd0db0e0c11d398f5a7a13899995644415d260e9ee00e6bf95aa6a1930b91d912fa2808ee5ffc3f71e5a815c18efdf1d42de59ed555d681b4cd8bae3ccd14bfdb5f10b469d9375fe2fb6b9b5b7d6bfd3fdbd69c79c0429e22674e51dfbc812ff51623fc99c8bbcb7a42a2309a23e319f26c48ae5386f9475b8b26cd764aa9bb04ec5fb2ca2ced6eea16baa65609f59e57ead7c31750b878a8384acd943b665e85514c12198a39279b60dfcd57b69261f8f68d3956595d48e4935024ac3d716db23ce8d0f306d43abcbaa52243571e9cc26c74b4de4a3b3b04ebb855f3ac86a825c61404aeafaaa4837c5fd9d76d98ee4a846cce2aad3b3e6b46bcf649eb9c6f6d0216c186b62c5323e8e26d7025c3659d80bada42717903702b1601b9068d3b8dd296a8376604c588fbd1e732e208d5f1daba03428ae28b52fb7d2a66e988a0d7a0245bc180ae69d7ad8f626d8a4a09ff4c0d12bcf9af92caa55c39681d465b92de5a000ee8b784c192915a612d232eb1715d6c092d1cb13f63b8a25bfcab9d834c31342acc8b7ab024a8cdbbdee525beddac0505dc00c1a85879810f73e00dd3dc511fb9a6a783c47137fc6e16850cfd4714b8b4761a36aedf47d3a87cc18a87235545a9c0b6082fb5843be723d2314fe94cd4db6e7e7aed1293ed00e86a672c02efcbab6fadef3c964689e78312dd5e1d2a26e0c40fe47dc874050ccc0beb050d248a71bb9b1f71ff0f38d9696c96a323b246fd7a2deab556506a372defc589796338854f635fadb17bb5e064591a1311ad6ee4a8ade4635b784129eae3b6632407d310613546e923e9ba9c9e6896e3e5b30776af513373d727f105212b76eada5a09349092a53a7bdde5c2ce5187b8c8dcf8f00d54a0ef68443455f3063618d98a3bcc056c8e96e7897a2149fe8fcb68db0699f15e30483bc2e59ac09ec074cf9215ee4d2bf3cd13e3d50e6b712fe9ba78cad00c34c9eb12d317a8ef368a232133ae8170318489510fd1f79b86b3e6dfc1a8dc9308019346730a7680eed72d9f9c06f1b8cd689197b8f9e6f686b24203c5f72c53e856277763eac55de1a82e9a3f33b119fb9b554d85cbcb9f3df4e182467ae3cef47fb2c213bb665ac72ed39c04b55dc1a4da956a7893c145cab221fe2e4182b08a684b66176f52670c7ee037165c1e8f5d2160b3355fbec2c92e3adff222704bafa08d962a33a6290dc598fab749bd9302852c5644a826c896b907a5b49c8aad9412c0507d96fc5ff9ef6a5f61145ef4d2ddacb14f77166ed90800d2ecdcc6ae80bf7a0401e053b9fac62fefc4ac97486b35ddd79e307fe4da8e1c71e25f1f8ddff699194d5be244c713fe43ba77b39790f65c8c7d3444dc1de80b708d4cdb9e2160f841f36bdea32919f02803fc75581db8364c142ed96ba69db4d9a4a1d3028a75c11b28c86dd7046a9e93138f9dc3d7bcc76f73d1f14a6adeef3352f3a9cb509a6a9d213e488d19c51836c7e03b99d72425370dfaef488c07081070d013dc4c91fd2947798c2bacf6c501c9c9b120afc70e91e00ef275346a8c0a6df7201e73caf9d4b8322bbabdde3b6f5a73ee0b6b119f9cdf039d12cfb0f95b41a4b3eb7db7eb7cc07bc6168e10227ade49ebee0d41c44c065dfb456a1cf107ce45cd0ce9363915027961fa154c2c18a60d3e0bf569e353ceae8ecc40eebbe2e73b5bf88bef0d05c8a3619b5bb568668b26efa2230a6276ff101a43dc7fdccb3cba850848705e90b0d3375b0226c185bc4942481cc84871bc24a5cd22e482db3eadedc39855e40921beff683c2b6d56ef82ef0ef64789b4f02733eef6fe15076df38bc29dc2df9a872cc137d48e0022e1e463eb5fe9eb7a7f18c9df410094e9ef947343ab6a7aa841848bce2fa9a694276298e134ee29a6233e7012edfefa8af8e61da986c73e728ca55cd41d62f4cb4e1f111bb9c9188fa083d159bf9f5071ea3e42e28b1de3b358455e5431934d0e00af7668c61322541081c190c8a01e40bc60fa765658a7ebab68c507c44a441763dcd51a3e49f97e74b14c3b28501c2e3b1648edac83000d9774c78c91e9e9632ca4de6e7da83541adff6bf844535b1d0315d483c4e36ad01deb60042336df4def9baf57e5e531ae17d73210531309be5282e7d2f796dc5a621fdea08352d44777d5e65909762d8239a1a3c9e658ad5fa60f00bef59f50d700e27bfaf2f531df8f119b2cc8ea5f4cdecbf8df2fd00e8d6fcd72954c582beed64dcbe2e94138a8d664fc80fbd1b69ed71ae0326bd4734b460a75235705f9527e8105847d7c821e1a96b9f5564e36b2447dffc7b30ca657bee7ea71a6145639bdf900fb1ed7c6185225d81a06b054e1ae478dea6b49a3bdee247bb2fab34c69dd9cbd7e879db1e80a7d91aa3d64ea87ea9dde09624044b21e83fb48d5282eb1b0907bfa0963bf76922921b3ff3c1fdf112487974d8b352b07d0805c16592505cd7405fa1876de3966ff03e1c5893f613e1920da21244e9d83ac98989e2f0a342789d1575c8f2bafbb908eed4ceaea9af8e0dc2f8f4f45cb82d3ce6238067bf625ab3d0f8f5ebf288695a123c968165ff72b26487acfc06e8a0429e39d278b10101616fb05e165cad6b2058f5d94d9d8137c0afed76c1c6746c43894e6dfdad85dc6732c5dd92b62de25097b7ad0bae979a2700c729283e001a66947c825e8bddf15b5c455b32f883c12d34a5b818ec55277c841fbb3c1b5bcd5697384815896663a05ad8401eddb207715b09124696f984dafab6d7228aace281718717be7672d4771fb6c670b82d12f9fa501fda7df3581fa3b8959d599b4d51bacc1d2ef78146f78c92a9a8945ca8e49566f38bd35978f04de9a26b78a9a61655a3a7d74dad9f320e514654ba27a68b6d6d2879d7ef563b509a778ad66c5f47e3b605cf8821fc07d6e0968a2627051324c1a7d5829e591938162ea7bc24e5b2976172438343b573f598f5a1da00a396c0fd8ded5a2f752366a1e0f9fc85dce950d1629ff3bf7f21c9e51abb3943d2d1d320b04621479f19069750b28d161eee40f1adbb7cbcbe5ad62f1a4620301acc322321772c779c7e4d5a464408f55beb82f92777055132e6ab183345c981ab96655453b102fa1566c7182075d23d5a5aa6cb69a76d7f0adc22d17ef803331882d7d56a82e3be51d0f24f802ceca7abb9145c9683755c8368d09035f7237cf8cff225d26c49dbfa249d402de58777a46313409bba28ad2550d9c6c5c1ec2082c0ba2cf24f55f78b7fc833569275a3665a19bfef1395e1f616dce6d66ef3f9fe7a87d67802c09a6a757baf94e83ba42f0ad58953f8315adeb8bbbf83113d2b1423ceeff5695764d6c31507dcde7915ca2c1fa3ed312fd2cc8a982e939af5b58dcabd1e800c4f81cd411abdd977736680b9f5548870a87bfb6f12fb83433af771302bd67212baee6f23e1832c212fc172b805049bd3792dd90c2eab70a2f17416b3e05c46c5f83d12e1d321daf9b935c435e4d3520137df62482ca4abd7a2b58ef11154d6183f07a60aa44bf9bdf91d99acfe5934f560d419ae164e8179afadd4e05fcc7483d89dd808888ccc5053f1d290073a3a5bd2ad7c55fdde5e0a978ee8ff6d258631b3ad881f06b1e84f6ecfa1f347d1ea68c12a6faa368fa40ebf889c61ab39996c06ee0099cf71843009414ab847a5056f840792f60825582845e388c571c9152651aa4b2ca25d2afbbbe3426ac775c74217f696e5155c5c970620a13799471dc520860e1c240fb96a0755fd7180c2ee092d4c88a321b048009e7879a47a9d290b0e0295338540a23f6720a908929e1af556706164bbd7240621d25833b593f1f602ee5040ae0fa56c28cd5d668543fb3984775fdbc6eedc133d8c079756951a7349d6f868df7c5738eec0a3cee2be0f52d4fd617d3abe921aed14e9ccd020d1606dfd5367085c928a6f0a9857da86447ad50a838321bbd196d1fe8738e45aec3d56e813436d1d533148f2e98fcbd6cdf4b1bd8aaaf085aaeb83865178c9b154ce2713fb62f9b6bb90b66a42b0bd42bc0fc88a56d12a0469a7ac02103cde1a114f4b7f2b3037360adfa0ea479c050c833dd376fa24f2671f171c3ea3fc96b9c51d3aa2765f196beed23a6d7abaf7895ab2a6179cea03fa7ead6305d08548f8c5afa397c20453b69983a4ce834f2ecd955b65edba50f30852e06a7b4478f88707715a2d33776c98b59e1cecff77d6a3c421c8cf78e96f41aa9b22b6971a8506504bbb52b87999a0655079be45fdebdf05c3ef44460b6462bf92305ff1cfa455d1c9414421430066e0c1dc60ccefd16cf34a8e460a811378ff83fe85be79b3204b3cb7e7ec56a5fbb58acb95336c0c375c231cb83040e718f5f6e6d6e3fae3a1ee0cfb57c82ef6ea42a3091d3350d2fea6b4a241c211b07b306b3e8b4ba17d32c694aca192de5df755bc997f9218761876e4fcc7d4280e9641a16e88eab4c18c3d37eb5b9601d5dab78de6bd32eace81228747aa4cacefbe7aad5bd7ce26f490f561a0a6b0", 0x1000}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3b37}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0xe, [{@empty, 0x7}, {@multicast2, 0xb}, {@multicast2, 0x98}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x8d}]}, @lsrr={0x83, 0x23, 0x21, [@multicast1, @rand_addr=0x64010100, @local, @loopback, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @remote}}}], 0x150}}], 0x1, 0x800)
syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002369d7b10210435032c56010203010902400001070870bc090430fc0002feff09052406000005240002000d240f010e00000004000900010524"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})

2.391867245s ago: executing program 0 (id=3139):
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'netdevsim0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x6a00)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000001c0)=0x9)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r7, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x50, 0x7f, 0x7, 0x2}, {0x1, 0x0, 0xff, 0x5}]})
write$ppp(r9, &(0x7f0000000200)="620f", 0x2)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.241805709s ago: executing program 5 (id=3141):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4084)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.122331082s ago: executing program 7 (id=3142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$xdp(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)='\"a', 0x2}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r1, 0x0, 0x0, 0x28101, 0x0)

2.035780515s ago: executing program 7 (id=3143):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000500ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86d902000f1d012e02000280160012000a000000000000000008000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x200040d4, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x35f004e0ed6c2564}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x35f004e0ed6c2564}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2c4}) (async)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2c4})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
socket$inet6(0xa, 0x3, 0x1) (async)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0xfffffffffffffff7, 0x6, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=<r4=>0x0)
capset(&(0x7f0000000080)={0x20080522, r4}, &(0x7f00000000c0)={0x8, 0x3, 0x200, 0xef})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
io_uring_setup(0x177f, &(0x7f0000000140)) (async)
io_uring_setup(0x177f, &(0x7f0000000140))
epoll_create1(0x80000) (async)
epoll_create1(0x80000)
epoll_create1(0x80000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="f40000000000000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r6 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async)
io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

1.882916321s ago: executing program 7 (id=3144):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x123082)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x400400d1}, 0x0)
pipe(0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
fsetxattr$security_evm(r5, &(0x7f0000000000), &(0x7f00000000c0)=@md5={0x1, "b3a75974477652f1a3c4b961e80e2a68"}, 0x11, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x13)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r6, 0x29, 0xcf, &(0x7f0000000140)=0x3, 0x4)

1.667303111s ago: executing program 7 (id=3145):
r0 = msgget$private(0x0, 0x8)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000340)=""/35)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0277e2086f70b4eac8a7c74f81c6ef944ef636371b45a6a004aba8bb6eb1f5c50b74ccb0cc5e4f17a5ee4782d7ea8d9c4206b3df952d37604234e75f5d31a92b0477c61db5849d26220fd5db2d680be22211987ff1ff75717f4864143a4e42c64575b1c1f6", @ANYRESDEC=r1, @ANYRES16], &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff83, 0x0}) (async)
syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0277e2086f70b4eac8a7c74f81c6ef944ef636371b45a6a004aba8bb6eb1f5c50b74ccb0cc5e4f17a5ee4782d7ea8d9c4206b3df952d37604234e75f5d31a92b0477c61db5849d26220fd5db2d680be22211987ff1ff75717f4864143a4e42c64575b1c1f6", @ANYRESDEC=r1, @ANYRES16], &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff83, 0x0})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = fcntl$dupfd(r3, 0x406, r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8008}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8008}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') (async)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) (async)
read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000))
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x1000003, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})
ioctl$COMEDI_SETRSUBD(r7, 0x6410) (async)
ioctl$COMEDI_SETRSUBD(r7, 0x6410)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt(r8, 0x3, 0x1, &(0x7f0000000000)="5a70cc2c49477909cf3f8735166d88d5890cd1ef6522eb9a3eaf081928d0685e02c88974ef0985fc56d8fe5ebd10031515c026cb8e36a0620de8c477c302cafb5174382a9e7ca49c082c3728094d", 0x4e)

1.664646737s ago: executing program 9 (id=3146):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async)
syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0xe, 0x2, 0x5, 0xfff9}, 'syz1\x00', 0x16}) (async)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket(0x1e, 0x4, 0x0) (async)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="3062efcbb594334e5f347598c5607e94d351b184afbed9fce6f00571a5817321cf29d6287429b11283157a6386eee094afe6bea107ea0a1b89483133cdd35695f28c074fd2f4b87b9e7d3ca7109900df61c067617f63b52b5bb81d6390caf7ad1e3853e9d2892d740bae3c730d3608d666fbca0c775d68e7e1a4a7a69ea4d94041f3175cc48dc6b889663ebd59ef953264361936d95c922ecce0721c5b8054dfa01ecdd5d05aa65d6922fa33f0900088cd56f7a81dc230fef90d", 0xba, 0x10, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10)
connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) (async)
write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001069b8440f905fffff4f00102030109090220070904510701587c690709050b021000af000239156a6ced569b0d6a9ed1efd274749438690e95e136886c799ff35c4bbb89b700a6ed28f4d9a937dc3bfa65b87e384583dea7f62620e4b12abba383ee7f804a7c1d729aeb0bd25f9c3ff4bf1860b13a3a938e51a559e24b516e25cff2557bddc200000000"], 0x0)
r7 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="b8d75941eb7d226ea75baaaaaaaaaa01010d040000e00f0000003e844732e3ae7860ee6c598a11fd913bf4d5d052bcf764798abafa4c5d97c73a3c283cf0be4e0f3034d4b24bbf823e5866b4e2c3dc086e3519d963ac455d7981", @ANYRESOCT=r7, @ANYRES16=r0, @ANYRES8=r3, @ANYRES32=r3, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES64=r2], &(0x7f0000000000)={0x0, 0x4, [0x2c0, 0x6e3, 0xfce, 0xb]}) (async)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xd093, 0x10, 0x3, 0x13f}, &(0x7f00000003c0), &(0x7f0000000300))

1.53226802s ago: executing program 0 (id=3147):
r0 = syz_open_dev$ndb(&(0x7f0000004d80), 0x0, 0x80002)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3)
signalfd4(r0, &(0x7f0000000000)={[0xce0]}, 0x8, 0x40800)

1.528854529s ago: executing program 9 (id=3148):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="5000000013002f0a253d70000000000007006800", @ANYRES32=r2, @ANYBLOB="400900006522020030001a8009000100766c616e00000000200004801c0005800c0001"], 0x50}}, 0x8004)
r4 = socket$netlink(0x10, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
set_tid_address(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setgid(0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffff3, 0x3, {<r5=>0x0}, {}, 0x3, 0xffff})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
syz_open_procfs(r5, &(0x7f0000000140)='uid_map\x00')
getegid()
setpgid(r5, r5)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="1c00000000000000000000000a00806e0800000000000000"], 0x1c}}, 0x0)

1.447868306s ago: executing program 0 (id=3149):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x7, @remote, 0x5}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000080)=0x10) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000400)=0x800, 0x4)
r2 = socket$kcm(0x29, 0x1, 0x0) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000049c0)={0x0, 0xc, 0x1, [0x9]}, &(0x7f0000004a00)=0xa) (async, rerun: 64)
fremovexattr(0xffffffffffffffff, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000004840)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000003140)=""/30, 0x1e, 0x98, 0x1, 0x101, 0xe000, 0x3}}, 0x120) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async, rerun: 64)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000100)={0x1, 0x30000, 0x40, 0x6dd, 0x20, 0x1, 0x2, 0x801, 0xffffff6f, 0x9, 0x100, 0x8, &(0x7f0000000000)=[0x8, 0x6, 0x1], 0x3, 0x0}) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0) (rerun: 32)
syz_usb_control_io(r5, &(0x7f0000004a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
fcntl$notify(r4, 0x402, 0x4) (async, rerun: 32)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) (async)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000004980))
fcntl$notify(r6, 0x402, 0x26) (async)
close_range(r3, 0xffffffffffffffff, 0x2)
sendmmsg(r2, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="d5b2bd6d9e7e45b47ad3ed7a70", 0xd}], 0x1, &(0x7f0000000180)=[{0x110, 0x112, 0x1, "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"}, {0xe8, 0x101, 0x8, "6b594ac962f26c16dbfe181b9256f2276636a0ed674c4593e313522ce63128295b72942773f371e265ba426a3c7556afaf482c053bd938e2b15e819a209c761e86d9baf469c421788d02c4cb94a2fdc3c15292b72052b49235f8e23b26a2daee4a1dcb6560d985b84fffd01262c4e590beed29ca800014fd673b307cb56ecf30080f7c9a1d6fbf35207fa31d0e4ce386c214b80c7a8c1c9e9caf6ece4f286be9c19774e1bb0c6a66056f4e683d43dbb0bc3bbe66bda81ef43bc1933f30a9cb672e5e4f926eca91b07bdfc951842a3fa69e25b266"}, {0xa8, 0x116, 0x25, "491d91b9aae57b262341cc447c54306430985f74c08f286ce6d460cda24ddc7a2e8d215b173a058c5793303569a1f7d6e361a0a7b2bc01166275dd050d9eb4b47ad3300bff18b8d979722671d99cd77c39977b0da8de9ddf3b41a409ed92822c616cb6cb84808eb3b69fd8f18c1342d00db743f21529f72f751db0f6ddde7ddffcc560bf058720c191b8b477b58c1b434676fc5a0f5a62"}, {0xc0, 0x111, 0x0, "f31023a3fd491d27f8dc6a4891a05db3b58d6b697de1d08218140f90fdfcda8db74418c96cca033647e0ee0bf639a7a48a2b78c39f733e01b436f4aa35e71c1a58bb39dde67634703c579de09ddb4272a387014730e6ead2825231472f83fcab483bd5b1240e39481832b4f9681dbe998f630b7747a3cf5677fca0f4ed4d4ed9f8cf8bc8be9f100ed233faa66afc76f0301b0ed8a398ae92aa60ee1e021e6d8902f6d96354b4e0e5b6"}, {0x50, 0x10d, 0x7, "4da7293202bf47245b2bdeaed9f3154f2d800ef9f5eede24a52874651db2613b9d7e3fedfc3ec3bdee4ee7ad295880a5e48240d32e8e38424cd006e4159d"}, {0xa8, 0x19b, 0x1, "fe7476b260d5f94bfcdce0fb7ba892fd06beaf27376ea9f62f8af66fd346e4a8b28ec0be2d206e656b7dff00fc18830791e6e584c570ef8c514958c23dd2c799b990c6a60a43223c3af2e3dd70a0b90c0cb0cde451ef3da5710665066a759f607d2bb645116355b561cdc2aae8b7e781dc6452de550d701e18e2aea83fa4e039e3d09e0a89985f8d34e6b2dbd1a21163a472d12a"}], 0x458}}, {{&(0x7f0000000600)=@generic={0x10, "fce5195ea9bc923b6888e64082132eff2a20d907fa748c2e75c423c9ce4c74ce04c3788c900f463968d6de56edf5ce56bb807182a3a2f23f0d7875a30b96812d742c5fe525cb0fcaff3361e698a2480b9346e0018480b746a8b2dfc4249476fb56be378059ef0e31e7464eec607809ef1e082680a1d81f16a07dcc8b9096"}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000680)="498fbdde7a60bf1f26b96b8c833dc287", 0x10}, {&(0x7f00000006c0)="848de073ec8b3f90b8b1903893ac292bfbc2cbffe7b4da2b73955be461bca76f991a66c639830f0ad64c0a029ead0e8199de5aa72253d7e81f7f85305e7a0543fd567c1e212cd0f8f2c9a6f378160cf769818534be8b20af5d75998a6ecbecb86345d23d73aa1b23172940f20180b444ce5c420ab9bf542696e08d43149c5a5405ce1019acf479cb2c60b32489f6c69404ef39ed0bc79824c4706ff8b0c6da690715c530947e66fcc7025162eb6df894d30e4de51c0d519e41e11c93", 0xbc}, {&(0x7f0000000780)="aece06a3628816c77d59e4319aaa0c70213bd185f65a09f72654bd1fb1ea162f33e2248015c75de65666e713c4309ae6be8a81513efc0b788dd55d11886ef8f7b8155f2045415ffae8f9c5c689938d14835a", 0x52}, {&(0x7f0000000800)="be078f14759d4b3a164923df0599321980247b24408e295959d86e0745936563a2197e8ab3694911c04ed445ef43d4893118c2aa2f042837be1e3833646bbce79c202dcd1176d137d95d9ad268590ed77d164e5e82240f521a3471f6fc85810c2f56888cc4d1364da2ce6406340b01b3101fc6bf9c36410b6ecae26cb85a8372e76f9f628214e29089dbd51ca1750e52cfb96fd8c9a4aa52c84ed1640266a3f9174759389ed866f5d4bd98cdd49697264f7022dffa3ec636f1d83ae5e9378f8aa20b29f57d84040aa2a581fc4fb195a9bf28556cf55880983e7a25756c4bfa5f6bb453b4ac22688446d33dd8", 0xec}, {&(0x7f0000000900)="c7e207a2f9ba4a8a706e93c306821492812cda0242f38c0ca68a180ecbc902ea34b1e39c0610cb5c83ba70393210eddf8105e19d85135f9650dafab08e1ee51032ef32b019de4c885a5b4f0bb3bf5002f4b0eb834f2e6cc7af672bdbbcc044dfa973dbb1e67ea2af65e4038895953358f68b5841c1f3dd09700ec2a40b11634bbb903f615fd8cfd3d5fab04ffee48eb22307e707e63e21669f85740edfc23479a59fb768922c28085aa796d23f9e27a9ccdef069cd4e622f191eb50734a9d4a316a4336a7161dfca67768901662916a051e6a496b8bf8781dbd24c2d3fb4fa513c7f1cd6565530a98d01683985ec899ea170584d1add645031", 0xf9}, {&(0x7f0000000a00)="2d8b317c8fddd1b01ab6fd8453f23f6711e64b7e16d534a6e4dbd6deb9edc042920c26771b98f3585c262427b6b3fa394a9d4ef9453da909f0c3307d4799eaa31c579002a7deeb37046c2723c7ebc0b83b0f70240d3e67c08677f0d5f75252082012df964454aad37c14f5f55a3d7bae35f415309eb103f02683cadcc5ae07e28e2ec74dd81a077c824f1d3762487dcae99e76c7eed50eca14c822e09423cff53f41b918e43bca9237eb665924bebea7724b7f1c15c6cc857a08fd5fe2b741693b98acfe27e32c4eecf25db44a4e8fac04ba2be1d36d2dbf2f43982c6d35db8f36722aca", 0xe4}, {&(0x7f0000000b00)="6332ee0093f0a6b5b8e59a376d38ab1e7f596b37c13269d784dafafadb6e5be03016be87b71980307ee7942e2b93d737094ff31df359118b0c3ca77e72cd86f713a022a20ccf9228a62cc99cb11a26c1e9d5e02b2fca5b34f788fb32f7b96e9315ff4844c8bbc2bf5f0f6752ef6e5b31a0e326d4ab6a9a2899b6d309380615e1617ad00160438a16588b35a561c21e57edc609219c80724b477838df49e1814d0900f1e04e9735e73af27b0e48", 0xad}, {&(0x7f0000000bc0)="8c90e1e66d125df80be8cfafa9b6218628a961517d3be42e82b59044adc8cfbf19c1a3b215c150997a68b72a288ff177b2031cb76244e53fd7fe6ff0a38a7f24ed42c9fccdc30cf29bbd6706e67112ce8c98fe176d271d85d974c4254dd2987894a15455a01865b5957b1913dd0cf014b0ab82739268c93c162202a4c7ba5ec4ad7e79eda0d5ce876527bb3844cfc741a96b2ebe846ae213f1355247cf59711cb0d328a47ddf1cbf685a261bd83036fc183f0689b8303295", 0xb8}, {&(0x7f0000000c80)="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", 0x1000}], 0x9, &(0x7f0000001d40)=[{0x58, 0x104, 0xe, "794809f89176a6754745d54e3ca974a86cb0efc8e0b413f26a478355e93f3b5cff3a16f500164cd92517fa99942e64cab69692a512559be69be6f93fc14a0e80906860f05ef7"}, {0x90, 0x10f, 0x3, "f5d4ed3c3b1929364d9b7df6a9566ef49524e4ba7296e1694692a812bea74e41caa931f70c038f14288ab2aedce95908c37ee4b23d056ff088738b6f34b9efc52fbc5ac84703b7281f727591128ba7e822239d75832d42b785097d8e36cff84cf8dec8bdba38196b608b89ca57ec5f375e1fcf6577f0c2ef034afafa70715982"}, {0xf8, 0x109, 0x2, "d7f31a912d5d942c6ed762f008d0b311b1e603d80ee6d9af953d3a2c6d51b0558ef2c51c176f48d78cee34b12af54f48bcda7007ce5fbd42508e984ae68a3da6948c581e3d469f2aca72683527f8e8ce98de841ca1e314632041b9612e358cf140bed717985874ba07cbf43c3454de8fc2b45b662cb8bb6c2826be043de9f3c904b6c8df14abb0f6733ae9e26eba717c7c7355d1bd070913fc5da7978c20b42b04c2a184cd7b55cd1db01db161d7bf806d903661ac712e7f3e33f1f3f88871d3bd0447fe7656b9746f1b28ca70f355bae59a1c3c6ed6586e84d6415ba4f851c346b019d166"}, {0x1010, 0x101, 0x1, "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"}, {0x108, 0x103, 0xfe, "6c996888fa51d3f51c742b6410c988e6916dba3a38b503ca8f1a0e9b1fde2db94fe28decaad17a1038bcabca33ef54407db85fc4f64e0b70afd96002445d812b3f7a0f951edd288073678cba92939cb977bc52684ffa563d90050de7a6c3fa4976962c4f392c952c26b2c2f9470d148fc6621e3ed559a083221c80093137c633080a092c69e6a7970384702c3f458b2c215e64180216756798297aa837ee843212dfee3b893c1f39f7164249502c73bc38feeb5c5a6d7cdd1f40f40ab7dcc45a898dc3c086933be4892d7c9546d8230c888e869205d39e3d3b42e4cba58345fa214b680fdda4220bf15021d91a3bda66329be36a079a"}, {0x78, 0x112, 0x2, "c64567a8c54973c94e516b01cf2f9884ee60f51cb04cde20f49cf7b451b8ed5681d79a6bd10ca7d8ca62e4924e4ddfe2f97abc03a51ba64908f00c019d813a8d9ff9603fae458b57c2494b61c10ac4be30123b7ffb705ffd0e68b0734c15e7cf71a37891"}, {0x70, 0x1, 0x7, "4c4b2597b0a208e6756489aec02265a39294f8c0ca512da7dc83f7d15217d62196898378901cdb0d99a5400cb06326d94907059fb1db3310545727e7f1543dce20e05118cbc4361dccd0ff7b798bcf8138812d482a723f43d265779a54b9"}], 0x13e0}}, {{0x0, 0x0, &(0x7f0000003140), 0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x258}}, {{&(0x7f0000003400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003480)="c37c9d9fd9648d9be8146879568747f5f251e583ed5398c791990dc7e7f0114d1fc1bd26def44f08747f76223a89c4cb213158f8666a0cd951c9a61f09774b982122e594e3a4bccfcb464461e163273cc74034ff189929e667ff1bafdd24096ab892441816958e12c2d5c6e4", 0x6c}, {&(0x7f0000003500)="6e9ddb3686edb411c61924802ea5274df3ecb7514d96143f594260835eba4ce3613e65f14bcf9a6bd3323b095ce0c8d532cf50bdbcf429beffa16a6e158275e4d985d572d6417e7ee85557cf3043ed30f8b4409e1cf52179470f01b1f0b38293f5e11551081938f695493cc560446e3eeec035bf169a6b83d2f35df009ff73067d42c07fc26775d6", 0x88}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x1110}}], 0x4, 0x4008014) (async, rerun: 64)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})

1.359598281s ago: executing program 5 (id=3150):
socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000001840)=""/135, 0x87}], 0x2}, 0xdfb}], 0x1, 0x2001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c0001840800028004007280080009000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc0850}, 0x20004040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x44, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x7}, 0x10)
fsmount(r7, 0x0, 0x3)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

1.280279775s ago: executing program 0 (id=3151):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = open(&(0x7f0000000100)='./file0\x00', 0x82, 0x4)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x5580)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0440, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f00000000c0)="b76e486a6793eb065775fef8950408b7cb5506098fd9fbbe5a8a84e1a37ac0f47e9017eb63c1477049a583a43d7a1f8cda6dc497e1e51c7bbb1e0b3fe3", 0x3d)

1.249499662s ago: executing program 0 (id=3152):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000b00000000000119078ac1e00010000000000004e22009c907801000000020000004d19308fd4716602fc42c5775b3ff4b8e478957a9fd9906c6ba70a16c9e7ec5ec5790620ed1b0020002f7fa35fc287a470366ddc51d8159e9877f3d8ac2693fb8f0141d835bf05f1db39a966306a49f2b7f980d9c55898610dabc5ac55d75cb262ebde140eb5113eb922a75976ae2f8d752bcefe6973ea968b32b310d379abea32e2772a33f5d6add3496fc6"], 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0x8}, {0x1, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.182768067s ago: executing program 1 (id=3153):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$xdp(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)='\"a', 0x2}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r1, 0x0, 0x0, 0x28101, 0x0)

1.032163996s ago: executing program 1 (id=3154):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18)
read$dsp(r2, &(0x7f0000001380)=""/229, 0xe5)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r3, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x803, 0x0)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x201, 0x0, 0x0, 0x81, 0x42}, 0x10)
syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="f2450043"], 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

391.026501ms ago: executing program 9 (id=3155):
unshare(0x2000400)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x8, 0x4)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03"], 0x0)

312.526835ms ago: executing program 5 (id=3156):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x5}, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r2, 0xa, 0x12)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
poll(&(0x7f0000000080)=[{r6, 0x8400}, {r0, 0x282}, {r0, 0x108}, {r6, 0x9}, {r4, 0x412}, {r0, 0x200}, {r3, 0x203}, {r7, 0x1}, {r4, 0x10000}, {r5}], 0xa, 0x1000003)
dup2(r2, r3)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x8, 0x81, 0x81, 0xe}, {0x0, 0x81, 0x7d, 0x8}, {0x1, 0x91, 0x3, 0x1}, {0x7, 0x40, 0x4, 0x6}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x8, 0x81, 0x81, 0xe}, {0x0, 0x81, 0x7d, 0x8}, {0x1, 0x91, 0x3, 0x1}, {0x7, 0x40, 0x4, 0x6}]})
fcntl$setown(r2, 0x8, r1) (async)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13) (async)
tkill(r1, 0x13)
close_range(r0, 0xffffffffffffffff, 0x0)

259.947482ms ago: executing program 7 (id=3157):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x488083, 0x0)
fsetxattr$smack_xattr_label(r1, &(0x7f0000000380)='security.SMACK64\x00', &(0x7f00000003c0)={'\x00'}, 0x2, 0x2)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000200)={0x2ddb800f, 0x2, 0x810e, 0x36, &(0x7f0000000080)=""/54, 0xb4, &(0x7f0000000280)=""/180, 0x29, &(0x7f0000000100)=""/41})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f22837", 0x4b, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000680)={[0xdddd1000, 0xdddd1000, 0xf000, 0x1000], 0xfffffffffffffff8, 0x14})
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

168.359159ms ago: executing program 0 (id=3158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept4(r7, 0x0, 0x0, 0x80800)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

86.28432ms ago: executing program 7 (id=3159):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$alg(0x26, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000300)=0xa22)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa, 0x9}]}})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x300000c, 0x7f, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
process_mrelease(0xffffffffffffffff, 0x0)
r10 = dup(r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r8}, 0x10)
io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdb, 0x2000, 0x3, 0x1cf, 0x0, r10})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

0s ago: executing program 5 (id=3160):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1}, './file2\x00'})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r2, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="3802000007000000000000000000000085000000bc0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ed: batadv_slave_1
[  945.016039][T15428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.041597][T15428] bond0: (slave bond1): Releasing backup interface
[  945.279385][T15445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2395'.
[  945.470804][ T5904] usb 1-1: new low-speed USB device number 74 using dummy_hcd
[  945.701332][ T5904] usb 1-1: device descriptor read/64, error -71
[  945.821349][T15465] tc_dump_action: action bad kind
[  946.330744][ T5904] usb 1-1: new low-speed USB device number 75 using dummy_hcd
[  946.420061][T15478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2405'.
[  946.431631][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'.
[  946.491354][ T5904] usb 1-1: device descriptor read/64, error -71
[  946.611778][ T5904] usb usb1-port1: attempt power cycle
[  946.846305][T15496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.965943][ T5904] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[  946.993201][ T5904] usb 1-1: device descriptor read/8, error -71
[  947.030902][ T5905] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  947.057305][T15498] tipc: Started in network mode
[  947.062452][T15498] tipc: Node identity c, cluster identity 4711
[  947.068612][T15498] tipc: Node number set to 12
[  947.160740][ T5905] usb 2-1: device descriptor read/64, error -71
[  947.231021][ T5904] usb 1-1: new low-speed USB device number 77 using dummy_hcd
[  947.261837][ T5904] usb 1-1: device descriptor read/8, error -71
[  947.371895][ T5904] usb usb1-port1: unable to enumerate USB device
[  947.401803][ T5905] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[  947.540721][ T5905] usb 2-1: device descriptor read/64, error -71
[  947.891196][ T5905] usb usb2-port1: attempt power cycle
[  948.060651][ T5903] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  948.190839][ T5903] usb 6-1: device descriptor read/64, error -71
[  948.214390][T15522] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  948.301310][ T5905] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  948.330368][ T5905] usb 2-1: device descriptor read/8, error -71
[  948.377894][T15524] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2422'.
[  948.470726][ T5903] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  948.593539][ T5905] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  948.610834][ T5903] usb 6-1: device descriptor read/64, error -71
[  948.621480][ T5905] usb 2-1: device descriptor read/8, error -71
[  948.731211][ T5905] usb usb2-port1: unable to enumerate USB device
[  948.772500][ T5903] usb usb6-port1: attempt power cycle
[  948.778685][   T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  948.930706][   T24] usb 1-1: Using ep0 maxpacket: 16
[  948.937288][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.948891][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  948.958795][   T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  948.968064][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.980061][   T24] usb 1-1: config 0 descriptor??
[  949.120817][ T5903] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  949.143012][ T5903] usb 6-1: device descriptor read/8, error -71
[  949.381253][ T5903] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  949.397003][   T24] usbhid 1-1:0.0: can't add hid device: -71
[  949.403284][   T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  949.411373][ T5903] usb 6-1: device descriptor read/8, error -71
[  949.419507][   T24] usb 1-1: USB disconnect, device number 78
[  949.544790][ T5903] usb usb6-port1: unable to enumerate USB device
[  950.186209][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'.
[  950.240810][ T5905] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  950.507092][ T5905] usb 2-1: config 4 has an invalid descriptor of length 172, skipping remainder of the config
[  950.519919][ T5905] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  950.532959][ T5905] usb 2-1: New USB device found, idVendor=0731, idProduct=0528, bcdDevice=75.8d
[  950.542228][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.550368][ T5905] usb 2-1: Product: syz
[  950.554645][ T5905] usb 2-1: Manufacturer: syz
[  950.559284][ T5905] usb 2-1: SerialNumber: syz
[  950.590718][  T978] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  950.718548][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  950.718566][   T30] audit: type=1326 audit(1755471115.359:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.748440][   T30] audit: type=1326 audit(1755471115.359:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.771619][   T30] audit: type=1326 audit(1755471115.359:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.774675][  T978] usb 1-1: Using ep0 maxpacket: 16
[  950.806104][   T24] usb 2-1: USB disconnect, device number 96
[  950.827566][   T30] audit: type=1326 audit(1755471115.359:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.828757][  T978] usb 1-1: config 252 has an invalid interface number: 15 but max is 0
[  950.854044][   T30] audit: type=1326 audit(1755471115.359:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.858018][  T978] usb 1-1: config 252 has no interface number 0
[  950.884921][   T30] audit: type=1326 audit(1755471115.359:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.887007][  T978] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  950.908532][   T30] audit: type=1326 audit(1755471115.439:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.941833][   T30] audit: type=1326 audit(1755471115.439:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.3.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ec78ebe9 code=0x7ffc0000
[  950.952229][  T978] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  950.977500][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.985717][  T978] usb 1-1: Product: syz
[  950.990062][  T978] usb 1-1: Manufacturer: syz
[  950.995416][  T978] usb 1-1: SerialNumber: syz
[  951.029411][  T978] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  951.642957][T15566] netlink: 'syz.3.2435': attribute type 15 has an invalid length.
[  951.857180][ T8460] usb 1-1: Failed to submit usb control message: -71
[  951.857561][   T24] usb 1-1: USB disconnect, device number 79
[  951.870960][ T8460] usb 1-1: unable to send the bmi data to the device: -71
[  951.878082][ T8460] usb 1-1: unable to get target info from device
[  951.887224][ T8460] usb 1-1: could not get target info (-71)
[  951.896454][ T8460] usb 1-1: could not probe fw (-71)
[  951.911459][T15577] xt_TPROXY: Can be used only with -p tcp or -p udp
[  952.778960][T15583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  952.960811][   T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  953.122621][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  953.132918][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  953.146916][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  953.158059][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  953.171747][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  953.181767][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.195964][   T24] usb 2-1: config 0 descriptor??
[  953.397919][T15596] /dev/nullb0: Can't lookup blockdev
[  953.415515][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2445'.
[  953.436196][   T24] hdpvr 2-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½�ËDŠ^jvi0ì
[  953.436196][   T24] †Ã“‘êpY
[  953.657801][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  953.666832][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  953.688292][   T24] hdpvr 2-1:0.0: device init failed
[  953.696125][   T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  953.706278][   T24] usb 2-1: USB disconnect, device number 97
[  955.161382][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2450'.
[  955.170339][T15614] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2450'.
[  956.309530][   T24] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[  956.832120][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  956.841883][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  956.855139][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c
[  956.868322][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.878452][   T24] usb 2-1: Product: syz
[  956.885781][   T24] usb 2-1: Manufacturer: syz
[  956.892203][   T24] usb 2-1: SerialNumber: syz
[  956.911909][   T24] usb 2-1: config 0 descriptor??
[  958.742198][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'.
[  958.771155][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'.
[  959.098728][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33
[  959.130318][   T24] usb 2-1: USB disconnect, device number 98
[  959.419989][T15649] netlink: 'syz.0.2459': attribute type 11 has an invalid length.
[  959.514346][   T24] usb 2-1: new low-speed USB device number 99 using dummy_hcd
[  959.680727][   T24] usb 2-1: device descriptor read/64, error -71
[  959.940637][   T24] usb 2-1: new low-speed USB device number 100 using dummy_hcd
[  960.070850][   T24] usb 2-1: device descriptor read/64, error -71
[  960.090843][ T8064] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  960.181435][   T24] usb usb2-port1: attempt power cycle
[  960.272712][ T8064] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.282983][ T8064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  960.296364][ T8064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  960.306276][ T8064] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  960.324076][ T8064] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  960.333648][ T8064] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  960.343023][ T8064] usb 1-1: Manufacturer: syz
[  960.349473][ T8064] usb 1-1: config 0 descriptor??
[  960.364901][T15662] netlink: 'syz.7.2463': attribute type 4 has an invalid length.
[  960.403290][T15662] netlink: 'syz.7.2463': attribute type 4 has an invalid length.
[  960.477099][T15664] fuse: Unexpected value for 'allow_other'
[  960.484407][T15664] netlink: 'syz.5.2464': attribute type 10 has an invalid length.
[  960.520682][   T24] usb 2-1: new low-speed USB device number 101 using dummy_hcd
[  960.541389][   T24] usb 2-1: device descriptor read/8, error -71
[  960.558314][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.567448][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.652867][ T8064] rc_core: IR keymap rc-hauppauge not found
[  960.658814][ T8064] Registered IR keymap rc-empty
[  960.666589][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.690766][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.721808][ T8064] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  960.736397][ T8064] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34
[  960.752694][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.776823][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.790826][   T24] usb 2-1: new low-speed USB device number 102 using dummy_hcd
[  960.800809][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.811447][   T24] usb 2-1: device descriptor read/8, error -71
[  960.820801][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.841355][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.860858][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.883555][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.910856][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.926261][   T24] usb usb2-port1: unable to enumerate USB device
[  960.932974][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.950789][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.970763][ T8064] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  960.993452][ T8064] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  961.007701][ T8064] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  962.475614][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'.
[  962.577046][ T5905] usb 1-1: USB disconnect, device number 80
[  962.591728][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'.
[  962.908468][T15697] CIFS mount error: No usable UNC path provided in device string!
[  962.908468][T15697] 
[  962.919128][T15696] CIFS mount error: No usable UNC path provided in device string!
[  962.919128][T15696] 
[  962.962444][T15696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  962.979289][T15697] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  963.238079][T15706] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2476'.
[  966.670876][ T5905] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  966.847695][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.869278][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  966.879324][ T5905] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  966.887990][T15771] 9pnet_fd: Insufficient options for proto=fd
[  966.897989][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.926615][ T5905] usb 6-1: config 0 descriptor??
[  968.578585][ T5905] hid (null): usage index exceeded
[  968.588772][ T5905] wacom 0003:056A:00F4.001A: ignoring exceeding usage max
[  968.601295][ T5905] wacom 0003:056A:00F4.001A: ignoring exceeding usage max
[  968.608467][ T5905] wacom 0003:056A:00F4.001A: usage index exceeded
[  968.619524][ T5905] wacom 0003:056A:00F4.001A: item 0 1 2 2 parsing failed
[  968.627528][ T5905] wacom 0003:056A:00F4.001A: parse failed
[  968.638934][ T5905] wacom 0003:056A:00F4.001A: probe with driver wacom failed with error -22
[  968.879752][T15813] Invalid ELF header magic: != ELF
[  969.028197][ T5905] usb 6-1: USB disconnect, device number 57
[  970.306579][T15886] fuse: Unknown parameter 'ÿ'
[  970.415072][ T5905] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  970.623510][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  970.667766][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  970.678819][ T5905] usb 2-1: config 0 has no interface number 0
[  970.699316][ T5905] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  970.711540][ T5905] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  970.723988][ T5905] usb 2-1: config 0 interface 1 has no altsetting 0
[  970.731062][ T5905] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00
[  970.741299][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.786399][ T5905] usb 2-1: config 0 descriptor??
[  971.405110][ T5905] chicony 0003:04F2:0418.001B: item fetching failed at offset 0/4
[  971.421240][ T5905] chicony 0003:04F2:0418.001B: Chicony hid parse failed: -22
[  971.428720][ T5905] chicony 0003:04F2:0418.001B: probe with driver chicony failed with error -22
[  972.417374][ T8064] usb 2-1: USB disconnect, device number 103
[  973.325048][ T5156] Bluetooth: hci4: command 0x0406 tx timeout
[  973.624981][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2519'.
[  973.638655][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'.
[  973.650281][T15913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2520'.
[  973.660180][T15914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2520'.
[  973.719664][T15912] random: crng reseeded on system resumption
[  974.001155][T15925] comedi comedi4: comedi_config --init_data is deprecated
[  975.892531][T15933] @: renamed from vlan0 (while UP)
[  976.081166][ T5977] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  976.279740][ T5977] usb 1-1: device descriptor read/64, error -71
[  976.567201][ T5977] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[  976.761910][ T5977] usb 1-1: device descriptor read/64, error -71
[  976.883210][ T5977] usb usb1-port1: attempt power cycle
[  977.260764][ T5977] usb 1-1: new low-speed USB device number 83 using dummy_hcd
[  977.326166][ T5977] usb 1-1: device descriptor read/8, error -71
[  977.630577][ T5977] usb 1-1: new low-speed USB device number 84 using dummy_hcd
[  977.691113][ T5977] usb 1-1: device descriptor read/8, error -71
[  977.790598][T15957] binder: 15952:15957 ioctl 400c620e 200000000280 returned -22
[  977.860860][ T5977] usb usb1-port1: unable to enumerate USB device
[  980.077989][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'.
[  983.538853][T16017] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  983.780656][ T5977] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  983.935344][ T5977] usb 2-1: Using ep0 maxpacket: 32
[  983.942498][ T5977] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[  983.951098][ T5977] usb 2-1: config 0 has no interface number 0
[  983.957601][ T5977] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6
[  983.970660][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.982820][ T5977] usb 2-1: config 0 descriptor??
[  983.991651][ T5977] speedtch 2-1:0.168: speedtch_bind: wrong device class 176
[  984.004987][ T5977] speedtch 2-1:0.168: usbatm_usb_probe: bind failed: -19!
[  984.207035][ T5977] usb 2-1: USB disconnect, device number 104
[  985.768149][T16060] IPVS: Unknown mcast interface: syzkaller1
[  985.906486][T16070] tmpfs: Bad value for 'mpol'
[  989.070759][   T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  989.130907][ T8064] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  989.230833][   T24] usb 1-1: Using ep0 maxpacket: 8
[  989.238770][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  989.248333][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.260714][ T8064] usb 2-1: device descriptor read/64, error -71
[  989.271766][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  989.279131][   T24] pvrusb2: **********
[  989.283762][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  989.307955][   T24] pvrusb2: Important functionality might not be entirely working.
[  989.328416][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  989.359783][   T24] pvrusb2: **********
[  989.363326][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'.
[  989.377210][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'.
[  990.086067][T16104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.118957][T16104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.370681][ T8064] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  990.610825][ T5905] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  990.640789][ T8064] usb 2-1: device descriptor read/64, error -71
[  990.958109][ T8064] usb usb2-port1: attempt power cycle
[  991.528410][ T2342] pvrusb2: Invalid write control endpoint
[  991.530773][   T24] usb 1-1: USB disconnect, device number 85
[  991.550225][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.574892][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  991.603854][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.650875][ T2342] pvrusb2: Invalid write control endpoint
[  991.656922][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  991.666584][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  991.675003][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  991.685597][ T2342] pvrusb2: Device being rendered inoperable
[  991.691703][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  991.698988][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  991.710289][ T2342] pvrusb2: Attached sub-driver cx25840
[  991.718165][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  991.728669][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  991.740340][ T5905] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  991.749846][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.757991][ T5905] usb 6-1: Product: syz
[  991.762629][ T5905] usb 6-1: Manufacturer: syz
[  991.767574][ T8064] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  991.775657][ T5905] usb 6-1: SerialNumber: syz
[  991.789310][ T5905] usb 6-1: config 0 descriptor??
[  991.806013][ T8064] usb 2-1: device descriptor read/8, error -71
[  992.509658][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  992.554130][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  992.733266][ T5905] usb 6-1: USB disconnect, device number 58
[  993.125569][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  994.013948][ T8064] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  994.151539][ T8064] usb 2-1: device descriptor read/64, error -71
[  994.400918][ T8064] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  994.420835][T16152] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  994.540644][ T8064] usb 2-1: device descriptor read/64, error -71
[  994.540752][ T5905] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  994.577014][T16152] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  994.587624][T16152] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  994.608354][T16152] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  994.618463][T16152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.627390][T16152] usb 6-1: Product: syz
[  994.631880][T16152] usb 6-1: Manufacturer: syz
[  994.636576][T16152] usb 6-1: SerialNumber: syz
[  994.711320][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  994.724317][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  994.747532][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  994.761142][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  994.777087][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  994.791814][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.802823][ T8064] usb usb2-port1: attempt power cycle
[  994.837424][ T5905] usb 1-1: config 0 descriptor??
[  994.845894][T16193] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  994.861893][ T5905] hub 1-1:0.0: USB hub found
[  994.876431][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  994.885658][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.531014][ T8064] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  995.561492][ T8064] usb 2-1: device descriptor read/8, error -71
[  995.590093][ T5905] hub 1-1:0.0: 2 ports detected
[  995.597531][T16152] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  995.610149][T16152] usb 6-1: USB disconnect, device number 59
[  995.810657][ T8064] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  995.831249][ T8064] usb 2-1: device descriptor read/8, error -71
[  995.944445][ T8064] usb usb2-port1: unable to enumerate USB device
[  996.070779][T16152] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[  996.188555][ T5905] hub 1-1:0.0: set hub depth failed
[  996.196880][ T5905] usb 1-1: USB disconnect, device number 86
[  997.041355][T16152] usb 6-1: config index 0 descriptor too short (expected 301, got 72)
[  997.049590][T16152] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  997.059935][T16152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  997.069934][T16152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[  997.090591][T16152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  997.102312][T16152] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  997.112355][T16152] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  997.121865][T16152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.158303][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2600'.
[  997.209712][T16152] usb 6-1: usb_control_msg returned -71
[  997.216328][T16152] usbtmc 6-1:16.0: can't read capabilities
[  997.223386][T16152] usbtmc 6-1:16.0: Failed to submit iin_urb
[  997.229476][T16152] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -90
[  997.246815][T16152] usb 6-1: USB disconnect, device number 60
[  997.632726][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'.
[  997.641843][T16241] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2608'.
[  997.701144][ T8064] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  997.867415][ T8064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  997.879653][ T8064] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d
[  997.897463][ T8064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.908617][ T8064] usb 2-1: config 0 descriptor??
[  997.917254][ T8064] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  997.926820][ T8064] command write [95] error -22
[  998.140436][T16152] usb 2-1: USB disconnect, device number 113
[  999.384953][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  999.393264][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.329413][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'.
[ 1001.339701][T16291] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2621'.
[ 1001.384551][ T5156] Bluetooth: hci4: command 0x0406 tx timeout
[ 1003.039502][T16309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2627'.
[ 1003.941167][T16152] usb 6-1: new low-speed USB device number 61 using dummy_hcd
[ 1004.491118][T16152] usb 6-1: device descriptor read/64, error -71
[ 1004.772550][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'.
[ 1004.782777][T16343] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2636'.
[ 1004.794015][T16152] usb 6-1: new low-speed USB device number 62 using dummy_hcd
[ 1005.073126][T16152] usb 6-1: device descriptor read/64, error -71
[ 1005.942502][T16152] usb usb6-port1: attempt power cycle
[ 1005.970465][T16350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'.
[ 1006.000177][T16352] x_tables: duplicate underflow at hook 3
[ 1006.640573][ T5977] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1006.823775][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.844964][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.877229][ T5977] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[ 1006.893403][ T5905] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1006.919417][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.950440][ T5977] usb 1-1: config 0 descriptor??
[ 1007.078971][ T5905] usb 2-1: config 0 has no interfaces?
[ 1007.097280][ T5905] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1007.309088][T16380] ptrace attach of "./syz-executor exec"[8473] was attempted by "./syz-executor exec"[16380]
[ 1007.319604][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.343083][ T5905] usb 2-1: Product: syz
[ 1007.347673][ T5905] usb 2-1: Manufacturer: syz
[ 1007.352744][ T5905] usb 2-1: SerialNumber: syz
[ 1007.364772][ T5977] usbhid 1-1:0.0: can't add hid device: -71
[ 1007.382303][ T5905] usb 2-1: config 0 descriptor??
[ 1007.394587][ T5977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1007.435375][ T5977] usb 1-1: USB disconnect, device number 87
[ 1007.506703][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2649'.
[ 1007.515957][T16392] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2649'.
[ 1009.584431][T16406] netlink: 'syz.5.2652': attribute type 1 has an invalid length.
[ 1009.599362][T16404] netlink: 'syz.7.2653': attribute type 21 has an invalid length.
[ 1009.607722][T16404] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2653'.
[ 1009.616928][T16404] netlink: 'syz.7.2653': attribute type 1 has an invalid length.
[ 1009.631240][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'.
[ 1009.635643][T16406] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2652'.
[ 1010.243779][ T5905] usb 2-1: USB disconnect, device number 114
[ 1010.256413][T16407] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[ 1010.332642][T16401] delete_channel: no stack
[ 1010.342378][T16415] autofs: Unknown parameter './file0'
[ 1010.521789][T16417] kvm: vcpu 0: requested 98 ns lapic timer period limited to 200000 ns
[ 1010.772369][T16434] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1011.226529][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'.
[ 1011.235867][T16450] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2663'.
[ 1012.491970][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2667'.
[ 1012.710764][T16465] CUSE: unknown device info "�KJéH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,�°
ð<Ö_e¤FÀÆ"
[ 1012.722618][T16465] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[ 1012.728521][T16465] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q	´ƒ
[ 1012.728521][T16465] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pøVdY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[ 1012.747471][T16465] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô"
[ 1012.758993][T16465] CUSE: DEVNAME unspecified
[ 1012.785521][   T30] audit: type=1326 audit(1755471177.429:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16460 comm="syz.1.2666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb698b8ebe9 code=0x0
[ 1013.486279][T16473] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2670'.
[ 1013.666067][T16480] autofs: Unknown parameter './file0'
[ 1015.238489][T16496] binder: BINDER_SET_CONTEXT_MGR already set
[ 1015.246343][T16497] binder_alloc: 16494: pid 16494 spamming oneway? 1 buffers allocated for a total size of 5304
[ 1015.259144][T16496] binder: 16494:16496 ioctl 4018620d 2000000002c0 returned -16
[ 1015.440976][ T5903] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1015.545688][T16512] input: syz0 as /devices/virtual/input/input36
[ 1015.601079][ T5903] usb 1-1: Using ep0 maxpacket: 32
[ 1015.635202][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1015.707215][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1015.836690][ T5903] usb 1-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67
[ 1015.923393][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.985843][ T5903] usb 1-1: Product: syz
[ 1016.024744][ T5903] usb 1-1: Manufacturer: syz
[ 1016.036087][ T5903] usb 1-1: SerialNumber: syz
[ 1016.066583][ T5903] usb 1-1: config 0 descriptor??
[ 1016.080368][ T5903] gspca_main: spca501-2.14.0 probing 0733:0402
[ 1016.199552][T16518] GUP no longer grows the stack in syz.5.2683 (16518): 200000005000-200000008000 (200000004000)
[ 1016.211152][T16518] CPU: 1 UID: 0 PID: 16518 Comm: syz.5.2683 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1016.211167][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1016.211176][T16518] Call Trace:
[ 1016.211181][T16518]  <TASK>
[ 1016.211186][T16518]  dump_stack_lvl+0x189/0x250
[ 1016.211207][T16518]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1016.211220][T16518]  ? __pfx__printk+0x10/0x10
[ 1016.211235][T16518]  ? find_vma+0xe7/0x160
[ 1016.211253][T16518]  fixup_user_fault+0x661/0x720
[ 1016.211272][T16518]  fault_in_user_writeable+0x72/0xe0
[ 1016.211286][T16518]  futex_lock_pi+0x283/0xa60
[ 1016.211306][T16518]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1016.211319][T16518]  ? get_futex_key+0x880/0x1640
[ 1016.211347][T16518]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1016.211370][T16518]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[ 1016.211391][T16518]  do_futex+0x292/0x420
[ 1016.211407][T16518]  ? __pfx_do_futex+0x10/0x10
[ 1016.211421][T16518]  ? __vm_munmap+0x301/0x3d0
[ 1016.211439][T16518]  __se_sys_futex+0x36f/0x400
[ 1016.211456][T16518]  ? __pfx___se_sys_futex+0x10/0x10
[ 1016.211469][T16518]  ? rcu_is_watching+0x15/0xb0
[ 1016.211483][T16518]  ? __x64_sys_futex+0x21/0xf0
[ 1016.211497][T16518]  do_syscall_64+0xfa/0x3b0
[ 1016.211510][T16518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1016.211519][T16518]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1016.211529][T16518]  ? clear_bhb_loop+0x60/0xb0
[ 1016.211542][T16518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1016.211551][T16518] RIP: 0033:0x7fc70f38ebe9
[ 1016.211563][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1016.211573][T16518] RSP: 002b:00007fc7102d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1016.211585][T16518] RAX: ffffffffffffffda RBX: 00007fc70f5b5fa0 RCX: 00007fc70f38ebe9
[ 1016.211602][T16518] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[ 1016.211608][T16518] RBP: 00007fc70f411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1016.211615][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1016.211621][T16518] R13: 00007fc70f5b6038 R14: 00007fc70f5b5fa0 R15: 00007ffd64293f38
[ 1016.211638][T16518]  </TASK>
[ 1016.455051][T16518] Invalid source name
[ 1016.459099][T16518] UBIFS error (pid: 16518): cannot open "usrquota", error -22
[ 1017.239561][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'.
[ 1017.833995][T16538] autofs: Unknown parameter './file0'
[ 1017.937844][ T5903] gspca_spca501: reg write: error -71
[ 1017.944522][ T5903] spca501 1-1:0.0: Reg write failed for 0x00,0x00,0x05
[ 1017.952027][ T5903] spca501 1-1:0.0: probe with driver spca501 failed with error -22
[ 1017.969838][ T5903] usb 1-1: USB disconnect, device number 88
[ 1018.010727][   T24] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[ 1018.163171][   T24] usb 6-1: config 0 has an invalid interface number: 176 but max is 0
[ 1018.172069][   T24] usb 6-1: config 0 has no interface number 0
[ 1018.181206][   T24] usb 6-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[ 1018.197734][   T24] usb 6-1: config 0 interface 176 has no altsetting 0
[ 1018.209632][   T24] usb 6-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76
[ 1018.219257][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.227685][   T24] usb 6-1: Product: syz
[ 1018.232533][   T24] usb 6-1: Manufacturer: syz
[ 1018.237246][   T24] usb 6-1: SerialNumber: syz
[ 1018.261601][   T24] usb 6-1: config 0 descriptor??
[ 1018.269343][T16534] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1019.235837][T16532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2688'.
[ 1019.375044][T16532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2688'.
[ 1019.668358][   T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1019.690699][ T5903] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1019.770805][   T24] usb 6-1: USB disconnect, device number 64
[ 1019.842492][ T5903] usb 1-1: device descriptor read/64, error -71
[ 1020.080710][ T5903] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1020.096942][T16567] overlayfs: failed to get index nlink (file1/bus, err=-61)
[ 1020.220641][ T5903] usb 1-1: device descriptor read/64, error -71
[ 1020.348477][ T5903] usb usb1-port1: attempt power cycle
[ 1020.720812][ T5903] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1020.744821][ T5903] usb 1-1: device descriptor read/8, error -71
[ 1021.040820][ T5903] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1021.935269][ T5903] usb 1-1: device descriptor read/8, error -71
[ 1022.056794][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2702'.
[ 1022.059058][ T5903] usb usb1-port1: unable to enumerate USB device
[ 1022.252841][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2703'.
[ 1023.701544][ T5905] usb 6-1: new low-speed USB device number 65 using dummy_hcd
[ 1023.769368][T16608] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[ 1023.777310][T16608] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1023.832657][T16608] vhci_hcd vhci_hcd.0: Device attached
[ 1023.850249][T16609] vhci_hcd: connection closed
[ 1023.850924][T15858] vhci_hcd: stop threads
[ 1023.870644][ T5905] usb 6-1: device descriptor read/64, error -71
[ 1023.876563][T15858] vhci_hcd: release socket
[ 1023.894373][T15858] vhci_hcd: disconnect device
[ 1024.073157][T16614] trusted_key: encrypted_key: insufficient parameters specified
[ 1024.082004][T16614] trusted_key: encrypted_key: insufficient parameters specified
[ 1024.230896][ T5905] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[ 1024.248369][T16615] could not allocate digest TFM handle rmd128
[ 1024.411032][ T5905] usb 6-1: device descriptor read/64, error -71
[ 1024.551796][ T5905] usb usb6-port1: attempt power cycle
[ 1025.430751][ T5948] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1025.480711][ T5905] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1025.553476][ T5905] usb 6-1: device descriptor read/8, error -71
[ 1025.588208][T16629] block device autoloading is deprecated and will be removed.
[ 1025.598260][T16629] syz.0.2714: attempt to access beyond end of device
[ 1025.598260][T16629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1025.616762][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2716'.
[ 1025.627695][T16633] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2716'.
[ 1027.979397][ T5948] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6
[ 1027.989195][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.997688][ T5948] usb 2-1: Product: syz
[ 1028.004958][ T5948] usb 2-1: Manufacturer: syz
[ 1028.009621][ T5948] usb 2-1: SerialNumber: syz
[ 1028.174941][T16652] 9pnet_fd: Insufficient options for proto=fd
[ 1028.209445][ T5948] pwc: Visionite VCS-UC300 USB webcam detected.
[ 1028.217393][ T5948] pwc: Failed to set LED on/off time (-71)
[ 1028.229829][ T5948] pwc: send_video_command error -71
[ 1028.235782][ T5948] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1028.244082][ T5948] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71
[ 1028.257078][ T5948] usb 2-1: USB disconnect, device number 116
[ 1028.340660][ T5903] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1028.504215][T16663] can0: slcan on ttyS3.
[ 1028.543065][ T5903] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1028.558002][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.569622][ T5903] usb 1-1: config 0 descriptor??
[ 1028.582481][T16663] can0 (unregistered): slcan off ttyS3.
[ 1028.683607][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'.
[ 1028.692813][T16674] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2727'.
[ 1028.872673][ T5903] kaweth 1-1:0.0: Firmware present in device.
[ 1029.118660][ T5903] kaweth 1-1:0.0: Statistics collection: 0
[ 1029.143434][ T5903] kaweth 1-1:0.0: Multicast filter limit: 0
[ 1029.178348][ T5903] kaweth 1-1:0.0: MTU: 0
[ 1029.202145][ T5903] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[ 1029.331147][ T5903] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[ 1029.459075][ T5903] usb 1-1: USB disconnect, device number 93
[ 1029.820957][ T5948] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[ 1029.847707][T16685] overlayfs: failed to resolve 'smackfsdef=&:': -2
[ 1029.855787][T16686] overlayfs: failed to resolve 'smackfsdef=&:': -2
[ 1030.742216][ T5948] usb 6-1: device descriptor read/64, error -71
[ 1031.200832][ T5948] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[ 1031.315789][T16703] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[ 1031.340697][ T5948] usb 6-1: device descriptor read/64, error -71
[ 1031.451860][ T5948] usb usb6-port1: attempt power cycle
[ 1031.581931][T16710] x_tables: duplicate underflow at hook 4
[ 1032.024835][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'.
[ 1032.162806][ T5905] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1032.513961][ T5905] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1032.533529][ T5905] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1032.694428][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1032.703722][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.712471][ T5905] usb 2-1: Product: syz
[ 1032.717141][ T5905] usb 2-1: Manufacturer: syz
[ 1032.722229][ T5905] usb 2-1: SerialNumber: syz
[ 1032.732932][ T5905] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1032.743123][T16720] mkiss: ax0: crc mode is auto.
[ 1033.024393][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2739'.
[ 1033.033389][T16724] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2739'.
[ 1033.515205][T16141] usb 2-1: USB disconnect, device number 117
[ 1034.158327][T16732] netem: change failed
[ 1035.621006][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1035.632156][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1035.641304][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1035.651917][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1035.659784][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1035.730885][ T5903] usb 2-1: new low-speed USB device number 118 using dummy_hcd
[ 1037.044158][ T5903] usb 2-1: device descriptor read/64, error -71
[ 1037.281876][ T5903] usb 2-1: new low-speed USB device number 119 using dummy_hcd
[ 1037.422016][ T5903] usb 2-1: device descriptor read/64, error -71
[ 1037.575158][ T5903] usb usb2-port1: attempt power cycle
[ 1037.776924][ T5156] Bluetooth: hci0: command tx timeout
[ 1037.926939][T16759] chnl_net:caif_netlink_parms(): no params data found
[ 1038.041771][T15850] wlan1: Trigger new scan to find an IBSS to join
[ 1038.642086][T16799] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2756'.
[ 1038.662705][T16759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.682616][T16759] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.691851][T16799] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2756'.
[ 1038.711737][T16759] bridge_slave_0: entered allmulticast mode
[ 1038.743385][T16759] bridge_slave_0: entered promiscuous mode
[ 1038.750926][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2757'.
[ 1038.788912][T16759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1038.812649][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'.
[ 1038.832730][T16759] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1038.840415][T16759] bridge_slave_1: entered allmulticast mode
[ 1038.898939][T16759] bridge_slave_1: entered promiscuous mode
[ 1039.294787][T16759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1039.369310][T16759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1039.737378][T16759] team0: Port device team_slave_0 added
[ 1039.835352][T16759] team0: Port device team_slave_1 added
[ 1039.844524][ T5156] Bluetooth: hci0: command tx timeout
[ 1039.981306][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'.
[ 1040.481165][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb6000: rx timeout, send abort
[ 1040.492052][T16759] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1040.499011][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1040.573490][T16759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1040.604615][T16759] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1040.611982][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1040.638972][T16759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1040.989593][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb6000: abort rx timeout. Force session deactivation
[ 1041.479308][ T5903] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1041.567293][T16759] hsr_slave_0: entered promiscuous mode
[ 1041.594402][T16759] hsr_slave_1: entered promiscuous mode
[ 1041.605490][T16759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1041.613735][T16759] Cannot create hsr debugfs directory
[ 1041.677941][ T5903] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1041.687799][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.829481][ T5903] usb 6-1: Product: syz
[ 1041.834256][ T5903] usb 6-1: Manufacturer: syz
[ 1041.838979][ T5903] usb 6-1: SerialNumber: syz
[ 1041.858784][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2765'.
[ 1041.867775][T16843] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2765'.
[ 1041.878503][ T5903] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1041.920796][ T5848] Bluetooth: hci0: command tx timeout
[ 1041.953196][T16141] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1042.000801][T15840] wlan1: Trigger new scan to find an IBSS to join
[ 1042.371952][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.534960][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.736481][T16853] overlay: Unknown parameter 'subj_user'
[ 1043.597046][T16141] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1043.622692][T16141] ath9k_htc: Failed to initialize the device
[ 1043.640262][T16856] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1043.696053][T16141] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1043.788410][T16855] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1043.832452][T15833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.002746][ T5848] Bluetooth: hci0: command tx timeout
[ 1044.257943][T16863] netlink: 'syz.7.2770': attribute type 10 has an invalid length.
[ 1044.385801][T16863] : (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1044.446016][T16152] usb 6-1: USB disconnect, device number 72
[ 1045.426655][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2777'.
[ 1045.437441][T16888] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2777'.
[ 1045.642096][T16759] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1045.668635][T16759] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1045.699353][T16759] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1045.714341][T16759] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1046.167966][T16759] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1046.376390][T16759] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.390323][T15848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.397585][T15848] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.567037][T15840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.574863][T15840] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1049.153347][T16759] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.282497][ T5903] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1049.752551][ T5903] usb 1-1: Using ep0 maxpacket: 32
[ 1049.761612][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'.
[ 1049.780278][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1049.807614][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[ 1049.838273][ T5903] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1049.877652][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.908721][ T5903] usb 1-1: Product: syz
[ 1049.923730][ T5903] usb 1-1: Manufacturer: syz
[ 1049.940763][ T5903] usb 1-1: SerialNumber: syz
[ 1049.999071][ T5903] usb 1-1: config 0 descriptor??
[ 1050.127134][ T5903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38
[ 1050.128965][ T5905] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1050.307724][ T5903] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[ 1050.444418][T16759] veth0_vlan: entered promiscuous mode
[ 1050.467465][ T5903] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90
[ 1050.482663][T16759] veth1_vlan: entered promiscuous mode
[ 1050.530441][T16759] veth0_macvtap: entered promiscuous mode
[ 1050.545299][T16759] veth1_macvtap: entered promiscuous mode
[ 1050.776410][T16759] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.802800][T16759] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1051.427897][T16759] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.440129][T16759] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.449869][T16759] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.459203][T16759] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1051.507290][ T5905] usb 6-1: Using ep0 maxpacket: 16
[ 1051.520440][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.540075][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1051.555601][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1051.568051][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1051.624963][T15840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.633457][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1051.635816][T15840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.662998][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1051.696139][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1051.715330][ T5905] usb 6-1: Manufacturer: syz
[ 1051.715381][T15847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.732197][ T5905] usb 6-1: config 0 descriptor??
[ 1051.745678][T15847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.749159][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2794'.
[ 1051.767289][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2794'.
[ 1051.888201][T16977] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.2744'.
[ 1051.903977][T16977] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[ 1051.915489][T16977] openvswitch: netlink: Message has 1 unknown bytes.
[ 1052.059363][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'.
[ 1052.068976][ T5905] rc_core: IR keymap rc-hauppauge not found
[ 1052.095456][ T5905] Registered IR keymap rc-empty
[ 1052.111668][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1052.170087][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1052.238896][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1052.279179][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39
[ 1052.307757][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1052.333090][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1052.351029][T16994] netlink: 'syz.5.2799': attribute type 21 has an invalid length.
[ 1052.358978][T16994] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2799'.
[ 1052.368346][T16994] netlink: 'syz.5.2799': attribute type 1 has an invalid length.
[ 1052.558246][  T978] usb 1-1: USB disconnect, device number 94
[ 1052.592088][ T5903] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1052.636559][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1052.751948][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.052334][ T5903] usb 10-1: Using ep0 maxpacket: 32
[ 1053.221801][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.234889][   T30] audit: type=1326 audit(1755471217.879:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1053.271019][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1053.280087][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.360679][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1053.361430][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.406968][   T30] audit: type=1326 audit(1755471217.879:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb698b8d69f code=0x7fc00000
[ 1053.512635][ T5903] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1053.556772][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.573003][   T30] audit: type=1326 audit(1755471217.879:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1053.637059][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.652007][   T30] audit: type=1326 audit(1755471217.879:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1053.671825][ T5903] usb 10-1: Product: syz
[ 1053.678471][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1053.679180][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.709901][   T30] audit: type=1326 audit(1755471217.879:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1053.714965][ T5903] usb 10-1: Manufacturer: syz
[ 1053.736290][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1053.761462][   T30] audit: type=1326 audit(1755471217.879:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1053.788978][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1053.863492][ T5903] usb 10-1: SerialNumber: syz
[ 1054.039382][ T5903] usb 10-1: config 0 descriptor??
[ 1054.182514][ T5903] usb 10-1: no audio or video endpoints found
[ 1054.557021][   T30] audit: type=1326 audit(1755471217.879:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1054.590473][ T5905] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1054.600885][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1054.609757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.616215][   T30] audit: type=1326 audit(1755471217.879:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1054.644664][ T5156] Bluetooth: hci0: command 0x0405 tx timeout
[ 1054.645007][ T5905] usb 6-1: USB disconnect, device number 73
[ 1054.664178][   T30] audit: type=1326 audit(1755471217.879:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1054.692058][   T30] audit: type=1326 audit(1755471217.879:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698b8ebe9 code=0x7fc00000
[ 1054.817875][ T5948] usb 10-1: USB disconnect, device number 8
[ 1055.030864][ T5905] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1055.201714][ T5905] usb 6-1: Invalid ep0 maxpacket: 9
[ 1055.365579][ T5905] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1055.910677][ T5905] usb 6-1: Invalid ep0 maxpacket: 9
[ 1055.916505][ T5905] usb usb6-port1: attempt power cycle
[ 1056.221744][ T5948] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1056.821810][ T5905] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1056.855375][ T5905] usb 6-1: device descriptor read/8, error -71
[ 1056.926400][ T5948] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1056.945734][ T5948] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1056.972999][ T5948] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1057.007975][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.028830][ T5948] usb 2-1: Product: syz
[ 1057.036915][ T5948] usb 2-1: Manufacturer: syz
[ 1057.048367][T17042] netlink: 'syz.9.2812': attribute type 21 has an invalid length.
[ 1057.057113][T17042] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2812'.
[ 1057.068600][T17042] netlink: 'syz.9.2812': attribute type 1 has an invalid length.
[ 1057.259225][ T5948] usb 2-1: SerialNumber: syz
[ 1057.266577][ T5948] usb 2-1: config 0 descriptor??
[ 1057.315011][ T5948] usb 2-1: selecting invalid altsetting 0
[ 1058.430884][ T5948] usb 2-1: USB disconnect, device number 121
[ 1058.558330][T17058] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2815'.
[ 1059.659771][ T5905] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1059.811304][ T5905] usb 1-1: device descriptor read/64, error -71
[ 1060.283413][ T5905] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1060.520560][ T5905] usb 1-1: device descriptor read/64, error -71
[ 1060.752379][ T5905] usb usb1-port1: attempt power cycle
[ 1061.862183][ T5905] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1061.930607][ T5905] usb 1-1: device descriptor read/8, error -71
[ 1062.441397][ T5905] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1062.453465][T17092] netlink: 'syz.1.2824': attribute type 21 has an invalid length.
[ 1062.462066][T17092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2824'.
[ 1062.472674][T17092] netlink: 'syz.1.2824': attribute type 1 has an invalid length.
[ 1063.010106][ T5905] usb 1-1: device descriptor read/8, error -71
[ 1063.151186][ T5905] usb usb1-port1: unable to enumerate USB device
[ 1063.257113][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'.
[ 1063.361726][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'.
[ 1063.500213][T17100] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2826'.
[ 1063.530243][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'.
[ 1063.719684][T17110] binder: 17109:17110 ioctl 4018620d 0 returned -22
[ 1063.796106][T17113] binder: 17109:17113 ioctl c018620c 0 returned -14
[ 1064.016174][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1064.016198][   T30] audit: type=1326 audit(1755471228.639:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17109 comm="syz.5.2829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc70f38ebe9 code=0x0
[ 1064.380891][ T5903] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1064.581237][ T5903] usb 10-1: Using ep0 maxpacket: 16
[ 1064.595827][ T5903] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1064.620902][ T5903] usb 10-1: config 0 has no interface number 0
[ 1064.628208][ T5903] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.675575][ T5903] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.701126][ T5903] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1064.715573][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.745255][ T5903] usb 10-1: config 0 descriptor??
[ 1064.953570][T16141] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1064.955737][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'.
[ 1065.053171][T17132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2834'.
[ 1065.137897][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'.
[ 1065.149512][T17131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2834'.
[ 1065.346672][T16141] usb 6-1: Using ep0 maxpacket: 16
[ 1065.394614][T16141] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[ 1065.405674][T16141] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.421992][T16141] usb 6-1: config 0 has no interface number 0
[ 1065.429487][T16141] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1065.454732][T16141] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[ 1065.471096][T16141] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1065.488366][T16141] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1065.534326][T16141] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1065.550287][T16141] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1065.573431][T16141] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[ 1065.610843][T16141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.644497][T16141] usb 6-1: config 0 descriptor??
[ 1065.655873][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2832'.
[ 1065.661887][T17128] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1065.679387][T17137] netlink: 'syz.9.2832': attribute type 14 has an invalid length.
[ 1065.684227][T16141] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1065.694477][T17137] netlink: 'syz.9.2832': attribute type 11 has an invalid length.
[ 1065.836985][T16141] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -12
[ 1065.907238][T17128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1065.953097][T17128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1066.135561][T17135] cgroup: fork rejected by pids controller in /syz9
[ 1066.229649][T16141] usb 6-1: USB disconnect, device number 78
[ 1067.515781][ T5903] uclogic 0003:28BD:0071.001C: failed retrieving string descriptor #100: -71
[ 1067.559023][ T5903] uclogic 0003:28BD:0071.001C: failed retrieving pen parameters: -71
[ 1067.603597][ T5903] uclogic 0003:28BD:0071.001C: pen probing failed: -71
[ 1067.644812][ T5903] uclogic 0003:28BD:0071.001C: failed probing parameters: -71
[ 1067.671694][ T5903] uclogic 0003:28BD:0071.001C: probe with driver uclogic failed with error -71
[ 1067.692544][T18017] binder: 18016:18017 ioctl c0306201 200000000540 returned -14
[ 1067.704231][ T5903] usb 10-1: USB disconnect, device number 9
[ 1067.751490][ T5905] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1067.800439][T18017] binder: BINDER_SET_CONTEXT_MGR already set
[ 1067.821014][T18017] binder: 18016:18017 ioctl 4018620d 2000000000c0 returned -16
[ 1067.852437][T18017] binder: BINDER_SET_CONTEXT_MGR already set
[ 1067.859775][T18017] binder: 18016:18017 ioctl 4018620d 200000000040 returned -16
[ 1067.970778][ T5905] usb 1-1: Using ep0 maxpacket: 16
[ 1068.020104][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1068.043722][ T5905] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1068.091533][ T5905] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1068.126966][ T5905] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1068.169719][ T5905] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1068.200899][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1068.234481][ T5905] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1068.263322][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.314800][ T5905] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[ 1068.396774][T18032] pim6reg1: entered promiscuous mode
[ 1068.404168][T18032] pim6reg1: entered allmulticast mode
[ 1068.525212][ T5905] scsi host1: usb-storage 1-1:1.0
[ 1068.723242][ T5948] usb 1-1: USB disconnect, device number 99
[ 1069.186875][T18038] netlink: 'syz.5.2851': attribute type 21 has an invalid length.
[ 1069.196437][T18038] __nla_validate_parse: 3 callbacks suppressed
[ 1069.196449][T18038] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2851'.
[ 1069.214077][T18038] netlink: 'syz.5.2851': attribute type 1 has an invalid length.
[ 1069.543448][T18042] netlink: 'syz.9.2852': attribute type 2 has an invalid length.
[ 1069.600675][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2852'.
[ 1070.350747][ T5948] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1071.800942][ T5948] usb 10-1: Using ep0 maxpacket: 32
[ 1071.830410][ T5948] usb 10-1: config 8 has an invalid interface number: 203 but max is 0
[ 1071.850720][ T5948] usb 10-1: config 8 has no interface number 0
[ 1071.869577][ T5948] usb 10-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1071.892012][ T5948] usb 10-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1071.962372][T16923] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1071.971457][ T5948] usb 10-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[ 1072.009420][ T5948] usb 10-1: config 8 interface 203 has no altsetting 0
[ 1072.026205][ T5948] usb 10-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[ 1072.041439][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.052247][ T5948] usb 10-1: Product: syz
[ 1072.061302][ T5948] usb 10-1: Manufacturer: syz
[ 1072.067539][ T5948] usb 10-1: SerialNumber: syz
[ 1072.080220][T18056] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1072.088355][   T30] audit: type=1326 audit(1755471236.729:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.111426][T18056] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1072.119129][   T30] audit: type=1326 audit(1755471236.729:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.142768][T16923] usb 1-1: Using ep0 maxpacket: 8
[ 1072.149754][   T30] audit: type=1326 audit(1755471236.749:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.156083][T16923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1072.177024][   T30] audit: type=1326 audit(1755471236.789:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.237492][T16923] usb 1-1: config 0 has no interface number 0
[ 1072.239202][   T30] audit: type=1326 audit(1755471236.819:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.247687][T16923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1072.313119][   T30] audit: type=1326 audit(1755471236.819:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.329551][T16923] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1072.339890][   T30] audit: type=1326 audit(1755471236.819:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.384255][T16923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.397479][   T30] audit: type=1326 audit(1755471236.849:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.428997][    C0] port100 10-1:8.203: NFC: Urb failure (status -71)
[ 1072.436534][    C0] port100 10-1:8.203: NFC: Urb failure (status -71)
[ 1072.464805][ T5948] port100 10-1:8.203: NFC: Could not get supported command types
[ 1072.493752][ T5948] usb 10-1: USB disconnect, device number 10
[ 1072.509998][   T30] audit: type=1326 audit(1755471236.859:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.548240][   T30] audit: type=1326 audit(1755471236.859:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70f38ebe9 code=0x7ffc0000
[ 1072.636788][T16923] usb 1-1: config 0 descriptor??
[ 1072.646765][T16923] iowarrior 1-1:0.1: no interrupt-in endpoint found
[ 1072.992723][T16923] usb 1-1: USB disconnect, device number 100
[ 1074.812531][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2871'.
[ 1074.824134][T18108] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2871'.
[ 1075.075430][T16141] hid-generic 0005:0004:0000.001D: unknown main item tag 0x0
[ 1075.082796][T18113] loop8: detected capacity change from 0 to 7
[ 1075.089184][T16141] hid-generic 0005:0004:0000.001D: unknown main item tag 0x0
[ 1075.107018][T16141] hid-generic 0005:0004:0000.001D: unknown main item tag 0x0
[ 1075.146796][T16141] hid-generic 0005:0004:0000.001D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[ 1075.190366][T18113] Dev loop8: unable to read RDB block 7
[ 1075.226094][T18113]  loop8: unable to read partition table
[ 1075.259981][T18113] loop8: partition table beyond EOD, truncated
[ 1075.297622][T18113] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1075.482374][T16923] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[ 1075.504143][T18113] Dev loop8: unable to read RDB block 7
[ 1075.520076][T18113]  loop8: unable to read partition table
[ 1075.526956][T18113] loop8: partition table beyond EOD, truncated
[ 1075.554301][T18113] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1075.753178][T16923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1075.770910][T16923] usb 10-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[ 1075.787862][T16923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.808339][T16923] usb 10-1: config 0 descriptor??
[ 1075.826716][T18114] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1075.836817][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2877'.
[ 1075.867532][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'.
[ 1075.990955][T18134] netlink: 'syz.0.2879': attribute type 21 has an invalid length.
[ 1076.000141][T18134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2879'.
[ 1076.012533][T18134] netlink: 'syz.0.2879': attribute type 1 has an invalid length.
[ 1076.030314][ T5948] usb 2-1: new low-speed USB device number 122 using dummy_hcd
[ 1076.138429][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'.
[ 1076.337820][T16923] belkin 0003:050D:3201.001E: unbalanced collection at end of report description
[ 1076.405718][ T3446] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1076.656335][T18144] dlm: no local IP address has been set
[ 1076.663322][T18144] dlm: cannot start dlm midcomms -107
[ 1076.778564][ T5948] usb 2-1: device descriptor read/64, error -71
[ 1077.401536][T16923] belkin 0003:050D:3201.001E: parse failed
[ 1077.408425][T16923] belkin 0003:050D:3201.001E: probe with driver belkin failed with error -22
[ 1077.421644][T16923] usb 10-1: USB disconnect, device number 11
[ 1077.664088][ T5948] usb 2-1: new low-speed USB device number 123 using dummy_hcd
[ 1078.176611][T18152] block device autoloading is deprecated and will be removed.
[ 1078.260729][ T5948] usb 2-1: device descriptor read/64, error -71
[ 1078.309845][T18160] Invalid logical block size (3)
[ 1078.392555][ T5948] usb usb2-port1: attempt power cycle
[ 1078.762258][ T5948] usb 2-1: new low-speed USB device number 124 using dummy_hcd
[ 1078.830806][ T5977] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1078.991037][ T5948] usb 2-1: device not accepting address 124, error -71
[ 1079.008480][ T5977] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1079.022131][ T5977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.031370][ T5977] usb 10-1: Product: syz
[ 1079.036962][ T5977] usb 10-1: Manufacturer: syz
[ 1079.044537][ T5977] usb 10-1: SerialNumber: syz
[ 1079.057912][ T5977] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1079.080422][ T5905] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1079.371053][ T5948] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1079.439925][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.498941][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1079.547498][ T5948] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1079.589773][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1079.629922][ T5948] usb 2-1: SerialNumber: syz
[ 1079.779168][T18174] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2889'.
[ 1080.086355][ T5948] usb 2-1: 0:2 : does not exist
[ 1080.102532][T16923] usb 10-1: USB disconnect, device number 12
[ 1080.120122][ T5948] usb 2-1: USB disconnect, device number 125
[ 1080.561717][ T5905] usb 10-1: Service connection timeout for: 257
[ 1080.583652][ T5905] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1080.729687][ T5905] ath9k_htc: Failed to initialize the device
[ 1080.847015][T16923] usb 10-1: ath9k_htc: USB layer deinitialized
[ 1081.271700][T16923] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1081.545923][T16923] usb 10-1: device descriptor read/64, error -71
[ 1081.820685][T16923] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1081.980866][T16923] usb 10-1: device descriptor read/64, error -71
[ 1082.103362][T16923] usb usb10-port1: attempt power cycle
[ 1082.358768][T18234] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1082.461634][T16923] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1082.551913][ T5903] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1082.671599][T16923] usb 10-1: device descriptor read/8, error -71
[ 1082.924959][ T5903] usb 6-1: Using ep0 maxpacket: 32
[ 1083.147410][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1083.177254][ T5903] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1083.197509][ T5903] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[ 1083.220904][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.229741][ T5903] usb 6-1: Product: syz
[ 1083.231922][T18240] overlay: Unknown parameter 'euid<00000000000000000000'
[ 1083.234007][ T5903] usb 6-1: Manufacturer: syz
[ 1083.247760][ T5903] usb 6-1: SerialNumber: syz
[ 1083.254220][T16923] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1083.264961][T18243] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2912'.
[ 1083.291319][T16923] usb 10-1: device descriptor read/8, error -71
[ 1083.416358][T16923] usb usb10-port1: unable to enumerate USB device
[ 1083.865370][ T5903] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input40
[ 1083.901803][ T5903] usb 6-1: USB disconnect, device number 79
[ 1085.033259][T16923] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1085.231751][T16923] usb 10-1: Using ep0 maxpacket: 16
[ 1085.265040][T16923] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1085.300732][T16923] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.348237][T16923] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1085.427650][T16923] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1085.449720][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2917'.
[ 1085.468666][T18278] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1085.495825][T16923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.886855][T16923] usb 10-1: config 0 descriptor??
[ 1085.933258][ T5977] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1086.112361][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1086.126725][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1086.161081][ T5977] usb 6-1: Using ep0 maxpacket: 32
[ 1086.188369][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1086.200801][ T5905] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1086.210054][ T5948] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1086.228898][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1086.248275][ T5977] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[ 1086.259703][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.269392][ T5977] usb 6-1: Product: syz
[ 1086.274581][ T5977] usb 6-1: Manufacturer: syz
[ 1086.279916][ T5977] usb 6-1: SerialNumber: syz
[ 1086.287932][ T5977] usb 6-1: config 0 descriptor??
[ 1086.299280][ T5977] qmi_wwan 6-1:0.0: bogus CDC Union: master=31, slave=0
[ 1086.307453][ T5977] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1086.341750][T16923] usbhid 10-1:0.0: can't add hid device: -71
[ 1086.348295][T16923] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1086.359808][T16923] usb 10-1: USB disconnect, device number 17
[ 1086.390659][ T5948] usb 2-1: Using ep0 maxpacket: 16
[ 1086.396888][ T5905] usb 1-1: Using ep0 maxpacket: 32
[ 1086.405799][ T5905] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1086.415602][ T5948] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1086.432025][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1086.459369][ T5905] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1086.478003][ T5948] usb 2-1: Product: syz
[ 1086.483200][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.492116][ T5948] usb 2-1: Manufacturer: syz
[ 1086.504193][ T5905] usb 1-1: Product: syz
[ 1086.508805][ T5948] usb 2-1: SerialNumber: syz
[ 1086.513158][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2918'.
[ 1086.523941][ T5905] usb 1-1: Manufacturer: syz
[ 1086.523966][ T5905] usb 1-1: SerialNumber: syz
[ 1086.537097][ T5835] usb 6-1: USB disconnect, device number 80
[ 1086.548660][ T5948] usb 2-1: config 0 descriptor??
[ 1086.558801][ T5905] usb 1-1: config 0 descriptor??
[ 1087.049696][ T5905] gs_usb 1-1:0.0: Configuring for 1 interfaces
[ 1087.320746][ T5948] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1087.860710][ T5948] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1087.891244][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.897560][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2926'.
[ 1087.900449][ T5948] usb 10-1: Product: syz
[ 1087.934268][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2926'.
[ 1087.956790][ T5905] usb 2-1: USB disconnect, device number 126
[ 1087.992435][ T5948] usb 10-1: Manufacturer: syz
[ 1087.997294][ T5948] usb 10-1: SerialNumber: syz
[ 1088.026696][ T5948] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1088.064541][ T5977] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1088.363689][T18304] netlink: 'syz.7.2928': attribute type 4 has an invalid length.
[ 1088.646139][T18312] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1088.656023][T18312] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1088.828318][T18316] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2933'.
[ 1088.936829][ T5948] usb 1-1: USB disconnect, device number 101
[ 1089.025922][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'.
[ 1089.043203][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'.
[ 1089.146909][ T5977] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[ 1089.265458][ T5977] ath9k_htc: Failed to initialize the device
[ 1089.597859][T18324] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 1089.657851][ T5977] usb 10-1: ath9k_htc: USB layer deinitialized
[ 1089.713727][T18321] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2935'.
[ 1091.641197][ T5835] usb 10-1: USB disconnect, device number 18
[ 1093.505424][T18348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1093.517280][T18348] netlink: 560 bytes leftover after parsing attributes in process `syz.9.2941'.
[ 1093.624571][T18358] loop6: detected capacity change from 0 to 63
[ 1093.638037][T18358] buffer_io_error: 4 callbacks suppressed
[ 1093.638060][T18358] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1093.669951][T18358] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1093.690914][T18358] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1093.699961][T18358] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1093.718136][T18360] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1093.727779][T18360] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1093.742501][T18358] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1093.756783][T18358] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1093.773301][T18360] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1093.784322][T18360] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1093.798986][T18360] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1093.886635][T18358] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1093.895567][T18358] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1093.965901][T18364] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1093.994513][T18364] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1094.055972][ T5835] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1094.250184][ T5835] usb 10-1: Using ep0 maxpacket: 16
[ 1094.278100][ T5835] usb 10-1: config 0 has an invalid interface number: 142 but max is 0
[ 1094.290935][ T5835] usb 10-1: config 0 has no interface number 0
[ 1094.313564][ T5835] usb 10-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=91.0d
[ 1094.341094][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.388496][ T5835] usb 10-1: Product: syz
[ 1094.405257][ T5835] usb 10-1: Manufacturer: syz
[ 1094.420673][ T5835] usb 10-1: SerialNumber: syz
[ 1094.441947][ T5835] usb 10-1: config 0 descriptor??
[ 1094.455875][ T5835] s2255 10-1:0.142: Could not find bulk-in endpoint
[ 1094.467965][ T5835] Sensoray 2255 driver load failed: 0xfffffff4
[ 1094.475448][ T5835] s2255 10-1:0.142: probe with driver s2255 failed with error -12
[ 1094.682336][ T5835] usb 10-1: USB disconnect, device number 19
[ 1094.880168][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2952'.
[ 1096.218243][ T5156] Bluetooth: hci4: command 0x0406 tx timeout
[ 1096.218268][ T5848] Bluetooth: hci0: command 0x0405 tx timeout
[ 1096.702546][T16141] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[ 1096.780579][ T5977] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1096.867330][T16141] usb 1-1: config 0 has an invalid interface number: 138 but max is 0
[ 1096.887583][T16141] usb 1-1: config 0 has no interface number 0
[ 1096.916403][T16141] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[ 1096.941569][T16141] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[ 1096.954744][T16141] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1096.983080][T18399] netlink: 'syz.1.2955': attribute type 4 has an invalid length.
[ 1096.988420][T16141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66
[ 1097.000707][ T5977] usb 10-1: Using ep0 maxpacket: 16
[ 1097.006599][T16141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.008880][ T5977] usb 10-1: config 0 has an invalid interface number: 80 but max is 0
[ 1097.050728][ T5977] usb 10-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1097.060097][ T5977] usb 10-1: config 0 has no interface number 0
[ 1097.061438][T16141] usb 1-1: config 0 descriptor??
[ 1097.074600][ T5977] usb 10-1: config 0 interface 80 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1097.130675][ T5977] usb 10-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[ 1097.167944][ T5977] usb 10-1: config 0 interface 80 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1097.210742][ T5977] usb 10-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[ 1097.241336][ T5977] usb 10-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[ 1097.258412][ T5977] usb 10-1: config 0 interface 80 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64
[ 1097.290930][ T5977] usb 10-1: Dual-Role OTG device on HNP port
[ 1097.297822][ T5977] usb 10-1: New USB device found, idVendor=0403, idProduct=eee9, bcdDevice= c.59
[ 1097.308145][ T5977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.317462][ T5977] usb 10-1: Product: syz
[ 1097.321981][T18407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[ 1097.329009][T18407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1097.337508][ T5977] usb 10-1: Manufacturer: syz
[ 1097.344462][ T5977] usb 10-1: SerialNumber: syz
[ 1097.351303][T18410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1097.366025][ T5977] usb 10-1: config 0 descriptor??
[ 1097.374641][T18407] vhci_hcd vhci_hcd.0: Device attached
[ 1097.384095][T18398] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1097.397629][ T5977] ftdi_sio 10-1:0.80: FTDI USB Serial Device converter detected
[ 1097.409978][T18407] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15)
[ 1097.417791][T18407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1097.435085][ T5977] ftdi_sio ttyUSB0: unknown device type: 0xc59
[ 1097.441233][T18407] vhci_hcd vhci_hcd.0: Device attached
[ 1097.480712][T18410] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18)
[ 1097.487509][T18410] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1097.503626][T18410] vhci_hcd vhci_hcd.0: Device attached
[ 1097.535670][T18407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17)
[ 1097.542348][T18407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1097.558048][T18407] vhci_hcd vhci_hcd.0: Device attached
[ 1097.571622][T18410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1097.601522][T18410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1097.620990][ T5977] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[ 1097.643978][T18407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1097.659549][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1097.678582][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1097.680670][T18407] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27)
[ 1097.693905][T18407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1097.753437][T18407] vhci_hcd vhci_hcd.0: Device attached
[ 1097.837510][  T978] usb 10-1: USB disconnect, device number 20
[ 1097.866420][  T978] ftdi_sio 10-1:0.80: device disconnected
[ 1098.109195][T18418] vhci_hcd: connection closed
[ 1098.112027][T18415] vhci_hcd: connection closed
[ 1098.118037][T15083] vhci_hcd: stop threads
[ 1098.120879][T18411] vhci_hcd: connection closed
[ 1098.123707][T18413] vhci_hcd: connection closed
[ 1098.130079][T18408] vhci_hcd: connection reset by peer
[ 1098.144525][T15083] vhci_hcd: release socket
[ 1098.159583][T15083] vhci_hcd: disconnect device
[ 1098.186749][T15083] vhci_hcd: stop threads
[ 1098.191621][T15083] vhci_hcd: release socket
[ 1098.196244][T15083] vhci_hcd: disconnect device
[ 1098.207778][T15083] vhci_hcd: stop threads
[ 1098.213647][T15083] vhci_hcd: release socket
[ 1098.218351][T15083] vhci_hcd: disconnect device
[ 1098.229186][T15083] vhci_hcd: stop threads
[ 1098.233922][T15083] vhci_hcd: release socket
[ 1098.239190][T15083] vhci_hcd: disconnect device
[ 1098.240733][ T5848] Bluetooth: hci0: command 0x0405 tx timeout
[ 1098.244536][ T5156] Bluetooth: hci4: command 0x0406 tx timeout
[ 1098.284950][T15083] vhci_hcd: stop threads
[ 1098.294432][T15083] vhci_hcd: release socket
[ 1098.303280][T15083] vhci_hcd: disconnect device
[ 1098.428314][T16141] usb 1-1: string descriptor 0 read error: -71
[ 1098.453590][T16141] usbtest 1-1:0.138: couldn't get endpoints, -22
[ 1098.470649][T16141] usbtest 1-1:0.138: probe with driver usbtest failed with error -22
[ 1098.490431][T16141] usb 1-1: USB disconnect, device number 102
[ 1098.956360][T18438] : entered promiscuous mode
[ 1099.590837][T18453] netlink: 'syz.1.2970': attribute type 21 has an invalid length.
[ 1099.609525][   T30] audit: type=1400 audit(1755471264.239:150): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=18449 comm="syz.9.2968" path="/proc/945/task/946/attr/current" dev="proc" ino=63800
[ 1099.689292][   T30] audit: type=1400 audit(1755471264.239:151): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=18449 comm="syz.9.2968" path="/proc/945/task/946/attr/current" dev="proc" ino=63800
[ 1099.790056][   T30] audit: type=1400 audit(1755471264.249:152): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=18449 comm="syz.9.2968" name="27" dev="tmpfs" ino=151
[ 1099.850426][T18453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2970'.
[ 1099.860334][T18453] netlink: 'syz.1.2970': attribute type 1 has an invalid length.
[ 1100.371658][ T5156] Bluetooth: hci0: command 0x0405 tx timeout
[ 1100.491556][T18443] comedi comedi2: reset error (fatal)
[ 1100.819547][T18475] netlink: 'syz.9.2978': attribute type 21 has an invalid length.
[ 1100.828863][T18475] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2978'.
[ 1100.840923][T18475] netlink: 'syz.9.2978': attribute type 1 has an invalid length.
[ 1100.877862][T18474] Bluetooth: MGMT ver 1.23
[ 1100.940755][T16141] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[ 1101.102423][T16923] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1101.135220][T16141] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[ 1101.150732][T16141] usb 1-1: config 0 has no interface number 0
[ 1101.162636][T16141] usb 1-1: config 0 interface 131 has no altsetting 0
[ 1101.181610][T16141] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=6c.e1
[ 1101.197475][T16141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.269565][T16141] usb 1-1: Product: syz
[ 1101.292822][T16141] usb 1-1: Manufacturer: syz
[ 1101.320944][T16923] usb 6-1: Using ep0 maxpacket: 32
[ 1101.379675][T16141] usb 1-1: SerialNumber: syz
[ 1101.397749][T16923] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[ 1101.481467][T16141] usb 1-1: config 0 descriptor??
[ 1101.510604][T16923] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[ 1101.540168][T16923] usb 6-1: Product: syz
[ 1101.550422][T16923] usb 6-1: Manufacturer: syz
[ 1101.556745][T16923] usb 6-1: SerialNumber: syz
[ 1101.565010][T16923] usb 6-1: config 0 descriptor??
[ 1101.575146][T16923] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[ 1101.584944][T16923] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1101.660997][T16152] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1101.728576][T18469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.748625][T18469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.796804][  T978] usb 6-1: USB disconnect, device number 81
[ 1101.845591][T16152] usb 2-1: Using ep0 maxpacket: 16
[ 1101.860335][T16141] usb 1-1: bad CDC descriptors
[ 1102.505119][T16141] usb 1-1: USB disconnect, device number 103
[ 1102.933820][ T5977] vhci_hcd: vhci_device speed not set
[ 1102.956316][T16152] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1102.979490][T16152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1103.001074][T18495] netlink: 'syz.9.2983': attribute type 21 has an invalid length.
[ 1103.012768][T16152] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1103.024452][T16152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.035702][T16152] usb 2-1: Product: syz
[ 1103.040318][T16152] usb 2-1: Manufacturer: syz
[ 1103.045724][T16152] usb 2-1: SerialNumber: syz
[ 1103.066954][T16152] usb 2-1: config 0 descriptor??
[ 1103.085150][T16152] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1103.138760][T16152] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1103.602022][T18495] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2983'.
[ 1103.611593][T18495] netlink: 'syz.9.2983': attribute type 1 has an invalid length.
[ 1103.685951][T16152] em28xx 2-1:0.0: chip ID is em2874
[ 1103.798149][   T30] audit: type=1326 audit(1755471268.439:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1104.196732][   T30] audit: type=1326 audit(1755471268.439:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1104.224574][   T30] audit: type=1326 audit(1755471268.439:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1104.250953][T18479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1104.259950][T18479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.431974][ T5948] usb usb36-port1: attempt power cycle
[ 1104.527043][   T30] audit: type=1326 audit(1755471268.449:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1104.532782][T18479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1104.552393][   T30] audit: type=1326 audit(1755471268.449:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1104.941501][T18479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.963352][   T30] audit: type=1326 audit(1755471268.449:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.049621][   T30] audit: type=1326 audit(1755471268.449:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.095217][T16141] usb 2-1: USB disconnect, device number 127
[ 1105.123542][T16141] em28xx 2-1:0.0: Disconnecting em28xx
[ 1105.124979][   T30] audit: type=1326 audit(1755471268.449:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.150777][T16141] em28xx 2-1:0.0: Freeing device
[ 1105.175322][   T30] audit: type=1326 audit(1755471268.449:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.204307][   T30] audit: type=1326 audit(1755471268.449:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.228125][   T30] audit: type=1326 audit(1755471268.459:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.232513][ T5948] usb usb36-port1: unable to enumerate USB device
[ 1105.252593][   T30] audit: type=1326 audit(1755471268.459:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.290068][   T30] audit: type=1326 audit(1755471268.459:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.345118][T18543] binder_alloc: binder_alloc_mmap_handler: 18542 200000ffd000-200001000000 already mapped failed -16
[ 1105.356771][   T30] audit: type=1326 audit(1755471268.479:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18511 comm="syz.7.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa2998ebe9 code=0x7ffc0000
[ 1105.394565][T18546] binder: BINDER_SET_CONTEXT_MGR already set
[ 1105.425124][T18546] binder: 18542:18546 ioctl 4018620d 200000000040 returned -16
[ 1105.450116][T18544] binder_alloc: 18542: binder_alloc_buf, no vma
[ 1105.497798][T18549] Invalid ELF header magic: != ELF
[ 1105.546337][T18551] netlink: 'syz.7.2997': attribute type 21 has an invalid length.
[ 1105.554996][T18551] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2997'.
[ 1105.565454][T18551] netlink: 'syz.7.2997': attribute type 1 has an invalid length.
[ 1106.209937][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'.
[ 1106.293353][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'.
[ 1108.182668][T18577] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1108.765581][T18589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1109.602082][ T3540] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1110.030814][  T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1110.150685][T16923] usb 1-1: new full-speed USB device number 104 using dummy_hcd
[ 1110.450346][  T978] usb 2-1: unable to read config index 0 descriptor/all
[ 1110.457249][T16923] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1110.497296][T16923] usb 1-1: can't read configurations, error -71
[ 1110.500709][  T978] usb 2-1: can't read configurations, error -71
[ 1112.300742][T16923] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1112.331802][T18635] block nbd0: server does not support multiple connections per device.
[ 1112.342716][T18635] block nbd0: shutting down sockets
[ 1112.531090][T16923] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1112.689356][T16923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.706384][T16923] usb 6-1: Product: syz
[ 1112.720681][T16923] usb 6-1: Manufacturer: syz
[ 1112.725576][T16923] usb 6-1: SerialNumber: syz
[ 1113.042996][T18651] usb usb7: usbfs: process 18651 (syz.0.3022) did not claim interface 0 before use
[ 1113.361560][T16923] usb 6-1: config 0 descriptor??
[ 1114.023912][T18632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1114.051648][T18632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1114.111329][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3024'.
[ 1114.151663][T16923] hso 6-1:0.0: Failed to find BULK IN ep
[ 1114.166377][T16923] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1115.366161][T16152] usb 6-1: USB disconnect, device number 82
[ 1116.006315][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.811505][T18683] FAULT_INJECTION: forcing a failure.
[ 1116.811505][T18683] name failslab, interval 1, probability 0, space 0, times 0
[ 1116.824422][T18683] CPU: 0 UID: 0 PID: 18683 Comm: syz.0.3029 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1116.824449][T18683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1116.824463][T18683] Call Trace:
[ 1116.824488][T18683]  <TASK>
[ 1116.824497][T18683]  dump_stack_lvl+0x189/0x250
[ 1116.824528][T18683]  ? __pfx____ratelimit+0x10/0x10
[ 1116.824550][T18683]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1116.824586][T18683]  ? __pfx__printk+0x10/0x10
[ 1116.824618][T18683]  ? __pfx___might_resched+0x10/0x10
[ 1116.824646][T18683]  should_fail_ex+0x414/0x560
[ 1116.824673][T18683]  should_failslab+0xa8/0x100
[ 1116.824697][T18683]  __kmalloc_noprof+0xcb/0x4f0
[ 1116.824716][T18683]  ? sock_kmalloc+0xd6/0x160
[ 1116.824742][T18683]  sock_kmalloc+0xd6/0x160
[ 1116.824765][T18683]  af_alg_alloc_areq+0x8d/0x260
[ 1116.824789][T18683]  skcipher_recvmsg+0x356/0x11c0
[ 1116.824833][T18683]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1116.824858][T18683]  ? sock_recvmsg+0x2a/0x270
[ 1116.824881][T18683]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1116.824900][T18683]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1116.824920][T18683]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1116.824943][T18683]  sock_recvmsg+0x22c/0x270
[ 1116.824971][T18683]  ____sys_recvmsg+0x1c9/0x460
[ 1116.825001][T18683]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1116.825040][T18683]  ? import_iovec+0x74/0xa0
[ 1116.825071][T18683]  ___sys_recvmsg+0x1b5/0x510
[ 1116.825088][T18683]  ? rcu_is_watching+0x15/0xb0
[ 1116.825116][T18683]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1116.825160][T18683]  ? __rcu_read_unlock+0x84/0xe0
[ 1116.825190][T18683]  ? __fget_files+0x3a0/0x420
[ 1116.825225][T18683]  do_recvmmsg+0x307/0x770
[ 1116.825256][T18683]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1116.825313][T18683]  __x64_sys_recvmmsg+0x190/0x240
[ 1116.825337][T18683]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1116.825364][T18683]  ? do_syscall_64+0xbe/0x3b0
[ 1116.825392][T18683]  do_syscall_64+0xfa/0x3b0
[ 1116.825415][T18683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.825434][T18683]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1116.825454][T18683]  ? clear_bhb_loop+0x60/0xb0
[ 1116.825478][T18683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.825498][T18683] RIP: 0033:0x7fe2bfb8ebe9
[ 1116.825517][T18683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1116.825534][T18683] RSP: 002b:00007fe2c09a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1116.825564][T18683] RAX: ffffffffffffffda RBX: 00007fe2bfdb6180 RCX: 00007fe2bfb8ebe9
[ 1116.825579][T18683] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006
[ 1116.825600][T18683] RBP: 00007fe2c09a4090 R08: 0000000000000000 R09: 0000000000000000
[ 1116.825613][T18683] R10: 0000000000028101 R11: 0000000000000246 R12: 0000000000000001
[ 1116.825626][T18683] R13: 00007fe2bfdb6218 R14: 00007fe2bfdb6180 R15: 00007ffe96447078
[ 1116.825666][T18683]  </TASK>
[ 1119.278262][   T30] audit: type=1326 audit(1755471283.919:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.9.3036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb89418ebe9 code=0x0
[ 1119.329982][T18705] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1119.425561][T18709] block nbd0: NBD_DISCONNECT
[ 1119.442026][T18709] block nbd0: Send disconnect failed -22
[ 1119.468745][T18704] block nbd0: Disconnected due to user request.
[ 1119.507953][T18704] block nbd0: shutting down sockets
[ 1119.628445][   T30] audit: type=1800 audit(1755471284.259:168): pid=18719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3040" name="bus" dev="overlay" ino=2446 res=0 errno=0
[ 1123.325937][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023d14400: rx timeout, send abort
[ 1123.335152][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023d15400: rx timeout, send abort
[ 1123.344101][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023d14400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1123.359080][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023d15400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1124.014652][T18756] netlink: 'syz.9.3051': attribute type 26 has an invalid length.
[ 1124.395337][T18778] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3055'.
[ 1124.534542][  T978] IPVS: starting estimator thread 0...
[ 1124.629096][T18782] syz_tun: entered allmulticast mode
[ 1124.691871][T18782] dvmrp1: entered allmulticast mode
[ 1124.765261][T18782] overlayfs: failed to resolve './file0': -2
[ 1124.800695][T18781] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1124.902209][T16923] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1125.157777][T18771] syz_tun: left allmulticast mode
[ 1125.258774][T16923] usb 10-1: config 0 has an invalid interface number: 229 but max is 0
[ 1125.305015][T16923] usb 10-1: config 0 has no interface number 0
[ 1125.326415][T16923] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[ 1125.345312][T16923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.384238][T16923] usb 10-1: config 0 descriptor??
[ 1125.616799][ T5948] usb 10-1: USB disconnect, device number 21
[ 1126.670752][T18801] netlink: 'syz.5.3063': attribute type 1 has an invalid length.
[ 1126.699427][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3063'.
[ 1126.788191][   T30] audit: type=1800 audit(1755471291.429:169): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3063" name="bus" dev="ramfs" ino=63369 res=0 errno=0
[ 1127.506335][T18806] 9pnet_fd: Insufficient options for proto=fd
[ 1127.674230][T18806] netlink: 'syz.9.3065': attribute type 1 has an invalid length.
[ 1128.154130][T18810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1128.217238][T18810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1128.240721][T18810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1128.864795][T18821] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1129.001075][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806cce3000: rx timeout, send abort
[ 1129.010168][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806cce0400: rx timeout, send abort
[ 1129.021424][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cce3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1129.041467][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cce0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1129.450576][  T978] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 1129.492795][T18844] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3077'.
[ 1129.503837][ T5948] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1129.596337][T18846] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1129.605976][T18846] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1129.642976][  T978] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[ 1129.653737][  T978] usb 2-1: config 8 has no interface number 0
[ 1129.662304][  T978] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D
[ 1129.682327][T18850] netlink: 'syz.7.3078': attribute type 10 has an invalid length.
[ 1129.692835][  T978] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64
[ 1129.707910][ T5948] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.723628][  T978] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1129.734195][T18851] netlink: 'syz.7.3078': attribute type 10 has an invalid length.
[ 1129.738597][ T5948] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1129.779207][  T978] usb 2-1: config 8 interface 177 has no altsetting 0
[ 1129.786493][T18852] siw: device registration error -23
[ 1129.790872][  T978] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1129.812919][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.813963][ T5948] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1129.844120][T18826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1129.853643][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.867927][T18850] 8021q: adding VLAN 0 to HW filter on device team0
[ 1129.879240][ T5948] usb 10-1: Product: syz
[ 1129.884574][ T5948] usb 10-1: Manufacturer: syz
[ 1129.889839][ T5948] usb 10-1: SerialNumber: syz
[ 1129.905576][T18850] : (slave team0): Enslaving as an active interface with an up link
[ 1129.943326][T18851] : (slave syz_tun): Enslaving as an active interface with an up link
[ 1130.278128][T18860] binder: 18853:18860 unknown command 0
[ 1130.282943][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'.
[ 1130.285122][T18860] binder: 18853:18860 ioctl c0306201 2000000003c0 returned -22
[ 1130.328459][T18863] vlan3: entered promiscuous mode
[ 1130.628332][T18870] netlink: 'syz.0.3084': attribute type 7 has an invalid length.
[ 1130.645557][T18870] netlink: 'syz.0.3084': attribute type 8 has an invalid length.
[ 1130.845012][  T978] usb 2-1: string descriptor 0 read error: -71
[ 1130.858950][  T978] ir_toy 2-1:8.177: required endpoints not found
[ 1130.878149][  T978] usb 2-1: USB disconnect, device number 4
[ 1130.988721][ T5948] cdc_ncm 10-1:1.0: bind() failure
[ 1131.062301][ T5948] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1131.071926][ T5948] cdc_ncm 10-1:1.1: bind() failure
[ 1131.214675][T16923] usb 10-1: USB disconnect, device number 22
[ 1131.430672][ T5835] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1131.630750][ T5156] Bluetooth: hci4: command 0x0406 tx timeout
[ 1131.682002][ T5156] Bluetooth: hci0: command 0x0405 tx timeout
[ 1131.717312][ T5835] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1132.303223][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.312479][ T5835] usb 1-1: Product: syz
[ 1132.317526][ T5835] usb 1-1: Manufacturer: syz
[ 1132.322348][ T5835] usb 1-1: SerialNumber: syz
[ 1132.477236][ T5835] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1132.542542][T16923] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1132.781282][T18902] autofs: Unknown parameter '00000000000000000000'
[ 1133.687818][T16923] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1133.709082][T16923] ath9k_htc: Failed to initialize the device
[ 1133.759638][T16923] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1133.863394][  T978] usb 6-1: new low-speed USB device number 83 using dummy_hcd
[ 1134.260961][  T978] usb 6-1: device descriptor read/64, error -71
[ 1134.530773][  T978] usb 6-1: new low-speed USB device number 84 using dummy_hcd
[ 1134.579528][T16141] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[ 1134.665288][T16141] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1134.750695][  T978] usb 6-1: device descriptor read/64, error -71
[ 1134.881214][  T978] usb usb6-port1: attempt power cycle
[ 1135.060645][ T5835] usb 1-1: USB disconnect, device number 106
[ 1135.244333][T18917] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3096'.
[ 1135.261535][  T978] usb 6-1: new low-speed USB device number 85 using dummy_hcd
[ 1135.315268][  T978] usb 6-1: device descriptor read/8, error -71
[ 1135.572747][  T978] usb 6-1: new low-speed USB device number 86 using dummy_hcd
[ 1135.623851][  T978] usb 6-1: device descriptor read/8, error -71
[ 1135.750932][  T978] usb usb6-port1: unable to enumerate USB device
[ 1136.057306][T18942] QAT: failed to copy from user cfg_data.
[ 1136.088943][T18943] QAT: failed to copy from user cfg_data.
[ 1136.511710][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3101'.
[ 1136.833200][T18956] netlink: 'syz.0.3107': attribute type 1 has an invalid length.
[ 1136.841191][T18957] netlink: 'syz.5.3106': attribute type 21 has an invalid length.
[ 1136.861243][T18956] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3107'.
[ 1136.870925][T18957] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3106'.
[ 1136.883653][T18956] NCSI netlink: No device for ifindex 767
[ 1137.741505][T18970] syzkaller0: entered promiscuous mode
[ 1137.747652][T18970] syzkaller0: entered allmulticast mode
[ 1139.370322][T18988] tmpfs: Unknown parameter 'usrquota_inodeOhardlimit'
[ 1139.400159][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1139.420024][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1140.330804][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3115'.
[ 1140.721469][T18997] FAT-fs (nullb0): bogus number of reserved sectors
[ 1140.729008][T18997] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1142.256399][T15824] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1143.916536][T19007] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1143.926292][T19007] overlayfs: missing 'lowerdir'
[ 1145.858403][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880583fe000: rx timeout, send abort
[ 1145.867169][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802715d000: rx timeout, send abort
[ 1145.876531][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583fe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1145.892120][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802715d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1148.594998][T19029] vlan3: entered promiscuous mode
[ 1148.600226][T19029] team0: entered promiscuous mode
[ 1148.625648][T19029] team_slave_0: entered promiscuous mode
[ 1149.586052][T19041] SET target dimension over the limit!
[ 1149.596994][T19029] team_slave_1: entered promiscuous mode
[ 1149.604054][T19029] vlan3: entered allmulticast mode
[ 1149.609321][T19029] team0: entered allmulticast mode
[ 1149.614858][T19029] team_slave_0: entered allmulticast mode
[ 1149.621046][T19029] team_slave_1: entered allmulticast mode
[ 1150.359927][T19029] bond0: (slave vlan3): Enslaving as an active interface with an up link
[ 1150.410838][ T5948] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1150.575651][T19046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1150.622410][  T978] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1150.644245][ T5948] usb 1-1: Using ep0 maxpacket: 16
[ 1150.670152][T19050] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3132'.
[ 1150.678155][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1150.686234][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3132'.
[ 1150.697594][ T5948] usb 1-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47
[ 1150.715282][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3132'.
[ 1150.728247][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.740332][ T5948] usb 1-1: Product: syz
[ 1150.748570][ T5948] usb 1-1: Manufacturer: syz
[ 1150.812275][T19048] cgroup2: Unknown parameter 'blkio'
[ 1150.820594][ T5948] usb 1-1: SerialNumber: syz
[ 1150.834877][  T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1150.848360][  T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1150.860241][  T978] usb 6-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00
[ 1150.871249][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.884660][  T978] usb 6-1: config 0 descriptor??
[ 1151.151186][ T5948] usb 1-1: palm_os_4_probe - error -71 getting connection info
[ 1151.215236][ T5948] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1151.372178][  T978] usb 6-1: USB disconnect, device number 87
[ 1151.453384][ T5948] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1151.478437][ T5948] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1151.523609][ T5948] usb 1-1: USB disconnect, device number 107
[ 1151.555565][T19052] delete_channel: no stack
[ 1151.568697][ T5948] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1151.581973][ T5948] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1151.592594][ T5948] visor 1-1:1.0: device disconnected
[ 1151.637519][T19061] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3135'.
[ 1151.864381][T19069] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3139'.
[ 1151.878272][T19069] netlink: 'syz.0.3139': attribute type 9 has an invalid length.
[ 1151.888022][T19069] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3139'.
[ 1151.917925][T19069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3139'.
[ 1151.967147][T19069] netlink: 'syz.0.3139': attribute type 10 has an invalid length.
[ 1151.978289][  T978] kernel write not supported for file bpf-prog (pid: 978 comm: kworker/0:2)
[ 1152.000728][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1152.014175][T19069] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[ 1152.023916][T19069] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1152.148908][T19080] netlink: 'syz.7.3143': attribute type 5 has an invalid length.
[ 1152.162275][T19080] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3143'.
[ 1152.174372][ T5948] usb 2-1: Using ep0 maxpacket: 16
[ 1152.184043][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1152.194888][ T5948] usb 2-1: config 7 has an invalid interface number: 48 but max is 0
[ 1152.205090][ T5948] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1152.215979][ T5948] usb 2-1: config 7 has no interface number 0
[ 1152.222508][ T5948] usb 2-1: config 7 interface 48 has no altsetting 0
[ 1152.233068][ T5948] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1152.243549][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.256642][ T5948] usb 2-1: Product: syz
[ 1152.261037][ T5948] usb 2-1: Manufacturer: syz
[ 1152.265860][ T5948] usb 2-1: SerialNumber: syz
[ 1152.482456][ T5948] cdc_phonet 2-1:7.48: probe with driver cdc_phonet failed with error -22
[ 1152.495968][ T5948] usb 2-1: USB disconnect, device number 5
[ 1152.685495][T19087] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1152.692788][T19087] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1152.718166][T19087] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1152.727578][T19097] netlink: 'syz.9.3148': attribute type 1 has an invalid length.
[ 1152.812236][ T5156] Bluetooth: hci0: unexpected event for opcode 0x1004
[ 1153.291294][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'.
[ 1153.868916][T19119] usb usb8: usbfs: process 19119 (syz.1.3154) did not claim interface 0 before use
[ 1154.331072][  T978] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1154.433168][T19142] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.447309][T19142] 
[ 1154.449974][T19142] ============================================
[ 1154.457160][T19142] WARNING: possible recursive locking detected
[ 1154.463948][T19142] 6.16.0-syzkaller #0 Not tainted
[ 1154.469778][T19142] --------------------------------------------
[ 1154.476136][T19142] syz.7.3159/19142 is trying to acquire lock:
[ 1154.482532][T19142] ffff88805ee58d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20
[ 1154.494805][T19142] 
[ 1154.494805][T19142] but task is already holding lock:
[ 1154.502736][T19142] ffff88805ee58d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990
[ 1154.513476][T19142] and the lock comparison function returns 0:
[ 1154.520277][T19142] 
[ 1154.520277][T19142] other info that might help us debug this:
[ 1154.529338][T19142]  Possible unsafe locking scenario:
[ 1154.529338][T19142] 
[ 1154.540239][T19142]        CPU0
[ 1154.543641][T19142]        ----
[ 1154.547591][T19142]   lock(&dev_instance_lock_key#20);
[ 1154.553731][T19142]   lock(&dev_instance_lock_key#20);
[ 1154.559406][T19142] 
[ 1154.559406][T19142]  *** DEADLOCK ***
[ 1154.559406][T19142] 
[ 1154.567744][T19142]  May be due to missing lock nesting notation
[ 1154.567744][T19142] 
[ 1154.576171][T19142] 2 locks held by syz.7.3159/19142:
[ 1154.581691][T19142]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990
[ 1154.591228][T19142]  #1: ffff88805ee58d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990
[ 1154.602129][T19142] 
[ 1154.602129][T19142] stack backtrace:
[ 1154.608131][T19142] CPU: 1 UID: 0 PID: 19142 Comm: syz.7.3159 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1154.608160][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1154.608173][T19142] Call Trace:
[ 1154.608185][T19142]  <TASK>
[ 1154.608194][T19142]  dump_stack_lvl+0x189/0x250
[ 1154.608212][T19142]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1154.608225][T19142]  ? __pfx__printk+0x10/0x10
[ 1154.608239][T19142]  ? print_lock_name+0xde/0x100
[ 1154.608257][T19142]  print_deadlock_bug+0x28b/0x2a0
[ 1154.608279][T19142]  validate_chain+0x1a3f/0x2140
[ 1154.608312][T19142]  __lock_acquire+0xab9/0xd20
[ 1154.608334][T19142]  ? __netdev_update_features+0xcb1/0x1a20
[ 1154.608354][T19142]  lock_acquire+0x120/0x360
[ 1154.608372][T19142]  ? __netdev_update_features+0xcb1/0x1a20
[ 1154.608396][T19142]  __mutex_lock+0x182/0xe80
[ 1154.608416][T19142]  ? __netdev_update_features+0xcb1/0x1a20
[ 1154.608434][T19142]  ? kasan_save_track+0x4f/0x80
[ 1154.608464][T19142]  ? kasan_save_free_info+0x46/0x50
[ 1154.608489][T19142]  ? __kasan_slab_free+0x62/0x70
[ 1154.608566][T19142]  ? kmem_cache_free+0x18f/0x400
[ 1154.608586][T19142]  ? netlink_broadcast_filtered+0x103e/0x1140
[ 1154.608612][T19142]  ? ethnl_multicast+0xb6/0x100
[ 1154.608637][T19142]  ? ethnl_default_notify+0x7c0/0x990
[ 1154.608652][T19142]  ? ethnl_netdev_event+0xe2/0x160
[ 1154.608668][T19142]  ? __netdev_update_features+0xcb1/0x1a20
[ 1154.608678][T19142]  ? __lock_acquire+0xab9/0xd20
[ 1154.608689][T19142]  ? __pfx___mutex_lock+0x10/0x10
[ 1154.608715][T19142]  __netdev_update_features+0xcb1/0x1a20
[ 1154.608743][T19142]  ? __pfx___netdev_update_features+0x10/0x10
[ 1154.608763][T19142]  ? __wake_up_common_lock+0x190/0x1f0
[ 1154.608786][T19142]  ? cfg80211_netdev_notifier_call+0x1ea/0x13c0
[ 1154.608801][T19142]  ? consume_skb+0xce/0xf0
[ 1154.608815][T19142]  ? netlink_broadcast_filtered+0x10c8/0x1140
[ 1154.608829][T19142]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[ 1154.608847][T19142]  ? __lock_acquire+0xab9/0xd20
[ 1154.608870][T19142]  ? do_raw_spin_lock+0x121/0x290
[ 1154.608899][T19142]  netdev_update_features+0x6d/0xe0
[ 1154.608925][T19142]  ? __pfx_netdev_update_features+0x10/0x10
[ 1154.608941][T19142]  macsec_notify+0x2f5/0x660
[ 1154.608958][T19142]  ? __pfx_macsec_notify+0x10/0x10
[ 1154.608975][T19142]  notifier_call_chain+0x1b3/0x3e0
[ 1154.608990][T19142]  netdev_features_change+0x85/0xc0
[ 1154.609016][T19142]  ? __pfx_netdev_features_change+0x10/0x10
[ 1154.609041][T19142]  ? security_capable+0x7e/0x2e0
[ 1154.609070][T19142]  dev_ethtool+0x1520/0x1990
[ 1154.609084][T19142]  ? __pfx_dev_ethtool+0x10/0x10
[ 1154.609097][T19142]  ? dev_load+0x21/0x1f0
[ 1154.609111][T19142]  dev_ioctl+0x392/0x1150
[ 1154.609125][T19142]  sock_do_ioctl+0x22c/0x300
[ 1154.609142][T19142]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1154.609164][T19142]  ? __lock_acquire+0xab9/0xd20
[ 1154.609183][T19142]  ? __asan_memset+0x22/0x50
[ 1154.609210][T19142]  ? smack_file_ioctl+0x24a/0x340
[ 1154.609224][T19142]  sock_ioctl+0x576/0x790
[ 1154.609235][T19142]  ? __pfx_sock_ioctl+0x10/0x10
[ 1154.609246][T19142]  ? __fget_files+0x2a/0x420
[ 1154.609257][T19142]  ? __fget_files+0x3a0/0x420
[ 1154.609267][T19142]  ? __fget_files+0x2a/0x420
[ 1154.609281][T19142]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1154.609322][T19142]  ? __pfx_sock_ioctl+0x10/0x10
[ 1154.609342][T19142]  __se_sys_ioctl+0xfc/0x170
[ 1154.609367][T19142]  do_syscall_64+0xfa/0x3b0
[ 1154.609379][T19142]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1154.609390][T19142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.609401][T19142]  ? clear_bhb_loop+0x60/0xb0
[ 1154.609413][T19142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.609426][T19142] RIP: 0033:0x7faa2998ebe9
[ 1154.609444][T19142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1154.609463][T19142] RSP: 002b:00007faa2a7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1154.609484][T19142] RAX: ffffffffffffffda RBX: 00007faa29bb6180 RCX: 00007faa2998ebe9
[ 1154.609507][T19142] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005
[ 1154.609521][T19142] RBP: 00007faa29a11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1154.609535][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1154.609548][T19142] R13: 00007faa29bb6218 R14: 00007faa29bb6180 R15: 00007ffcba85d818
[ 1154.609570][T19142]  </TASK>
[ 1155.551711][  T978] usb 10-1: device descriptor read/64, error -71
[ 1155.850716][  T978] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1155.990652][  T978] usb 10-1: device descriptor read/64, error -71
[ 1156.101016][  T978] usb usb10-port1: attempt power cycle
[ 1156.450926][  T978] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1156.471196][  T978] usb 10-1: device descriptor read/8, error -71
[ 1156.720718][  T978] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1156.742206][  T978] usb 10-1: device descriptor read/8, error -71
[ 1156.853058][  T978] usb usb10-port1: unable to enumerate USB device
[ 1156.890726][ T5156] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1156.899241][ T5156] Bluetooth: hci0: Injecting HCI hardware error event
[ 1156.906431][ T5156] Bluetooth: hci0: hardware error 0x00
[ 1158.970746][ T5156] Bluetooth: hci0: Opcode 0x0c03 failed: -110