last executing test programs:

6m27.799810571s ago: executing program 4 (id=93):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, 0x0, 0x0)

6m26.580190425s ago: executing program 4 (id=96):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000000c0)=0xfffffffd)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

6m25.024251393s ago: executing program 4 (id=99):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000456000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x511383, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
close(r2)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000040)={0x0, 0x382000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8})

6m22.952351913s ago: executing program 4 (id=102):
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

6m20.036642346s ago: executing program 4 (id=104):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r4}, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r6, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)

6m8.986980542s ago: executing program 4 (id=120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ptrace(0x10, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
futimesat(r4, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300))
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0)
keyctl$join(0x1, 0x0)

5m52.446633277s ago: executing program 32 (id=120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ptrace(0x10, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
futimesat(r4, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300))
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0)
keyctl$join(0x1, 0x0)

4m49.658541367s ago: executing program 2 (id=215):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket(0x10, 0x3, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r5=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x1, r5, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000080)={0x0, r5, r4})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/528])

4m49.06022133s ago: executing program 2 (id=216):
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000), 0x4)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

4m43.311201815s ago: executing program 2 (id=222):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x4)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x7ff)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r3}, 0x38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r5, 0x2)

4m33.773937418s ago: executing program 2 (id=232):
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000), 0x4)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

4m26.442785515s ago: executing program 2 (id=237):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2}, 0x94)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
r0 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7c8, 0x80, 0x3, 0x124}, 0x0, &(0x7f0000000200))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x126c5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r6], 0x27)
getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
close_range(r1, 0xffffffffffffffff, 0x0)

4m24.527179799s ago: executing program 2 (id=239):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000e10300000008000000da00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
listen(r2, 0x4)
close(r2)
fanotify_init(0xa00, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x2000081)

4m9.293937469s ago: executing program 33 (id=239):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000e10300000008000000da00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
listen(r2, 0x4)
close(r2)
fanotify_init(0xa00, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x2000081)

37.957448812s ago: executing program 0 (id=467):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000600)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x408, 0x8d, 0x8, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

35.903867618s ago: executing program 0 (id=468):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
close(0xffffffffffffffff)
fanotify_init(0xa00, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x2000081)

29.921826721s ago: executing program 6 (id=475):
pipe(&(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r3)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r4, &(0x7f0000000100)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1)
write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xffe0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d", @ANYRES8, @ANYRES16], 0x0)
fsopen(&(0x7f0000000140)='erofs\x00', 0x0)

28.49524211s ago: executing program 0 (id=476):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x9, 0x0)
r3 = io_uring_setup(0x1b7b, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
mount$pvfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2008041, &(0x7f0000000140)={[{'\x00'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x7e92}}, {@smackfshat={'smackfshat', 0x3d, '${'}}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

24.417342649s ago: executing program 1 (id=478):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_unlink(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r3)
timerfd_create(0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x14)

23.027585138s ago: executing program 1 (id=479):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2}, 0x94)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
r0 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7c8, 0x80, 0x3, 0x124}, 0x0, &(0x7f0000000200))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x126c5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x27)
getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
close_range(r1, 0xffffffffffffffff, 0x0)

22.762115268s ago: executing program 5 (id=480):
r0 = socket$inet6(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800f5ff}}], 0x62, 0x6000000000000000)

21.545256165s ago: executing program 1 (id=481):
socket$l2tp(0x2, 0x2, 0x73)
syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
dup(r4)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
socket$nl_xfrm(0x10, 0x3, 0x6)

21.126116562s ago: executing program 3 (id=482):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r7 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'})

19.186559216s ago: executing program 6 (id=483):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r1 = userfaultfd(0x801)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0xffffffff}, 0x10)
semctl$GETPID(0x0, 0x4, 0xb, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30000000001400000011"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

17.795298795s ago: executing program 6 (id=484):
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

17.589497019s ago: executing program 0 (id=485):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
poll(0x0, 0x0, 0xa)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000080)={0x0, r6, r5})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/528])

15.913624465s ago: executing program 0 (id=486):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
close(0xffffffffffffffff)
fanotify_init(0xa00, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x2000081)

14.562210009s ago: executing program 1 (id=487):
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/76, 0x4c}], 0x1}, 0x40008}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r2, 0x107, 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @multicast2, <r4=>0x0}, &(0x7f0000000380)=0xc)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0xfffffffffffffc61, @random="00010100"}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x33, @rand_addr=0x64010102, 0x4e23, 0x2, 'nq\x00', 0x6, 0x3ff, 0x64}, 0x2c)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)

14.446204535s ago: executing program 3 (id=488):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c"], 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1a, &(0x7f00000001c0)="0000006f456583a47c064da3340297b36e93fc6a777b65dd50f7"}, {0x2, 0x201, 0x0, 0x0}], 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
mknod(0x0, 0x8001420, 0x0)
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000200)=""/197, 0xc5}, {0x0}], 0x2, 0x2, 0x4)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32], 0x50)

13.711572241s ago: executing program 5 (id=489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)

12.686831015s ago: executing program 5 (id=490):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_unlink(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r3)
timerfd_create(0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x14)

10.999279922s ago: executing program 5 (id=491):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8})
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x8, @win={{0x3af, 0x80000005, 0x2bc, 0x6d}, 0x5, 0x5, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x25}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000400)=[0x6758, 0x8], 0x2)

10.371390507s ago: executing program 3 (id=492):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2}, 0x94)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
r0 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7c8, 0x80, 0x3, 0x124}, 0x0, &(0x7f0000000200))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x126c5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x27)
getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
close_range(r1, 0xffffffffffffffff, 0x0)

10.251731478s ago: executing program 0 (id=493):
pipe(&(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r3)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r4, &(0x7f0000000100)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{0x0}], 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1)
write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xffe0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d", @ANYRES8, @ANYRES16], 0x0)
fsopen(&(0x7f0000000140)='erofs\x00', 0x0)

9.952442337s ago: executing program 6 (id=494):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x4)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x7ff)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r3}, 0x38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r5, 0x2)

8.28853294s ago: executing program 1 (id=495):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r1 = userfaultfd(0x801)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0xffffffff}, 0x10)
semctl$GETPID(0x0, 0x4, 0xb, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

4.516883947s ago: executing program 6 (id=496):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
poll(0x0, 0x0, 0xa)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000080)={0x0, r6, r5})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/528])

4.494340957s ago: executing program 1 (id=497):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x800)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0)

2.690139299s ago: executing program 6 (id=498):
socket$l2tp(0x2, 0x2, 0x73)
syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
socket$nl_xfrm(0x10, 0x3, 0x6)

2.637928613s ago: executing program 3 (id=499):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_getattr(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x400448c9, 0x0)

2.028427701s ago: executing program 3 (id=500):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603c"], 0x0)

1.318754024s ago: executing program 5 (id=501):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, r6, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})

1.109931854s ago: executing program 3 (id=502):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket(0x10, 0x3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r7=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x0, r7, r6})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="1907000000000000030000000000000003000000f8ffffff09000000000000000a00000000000000807900000000000009000000000000000000000000000000000000000000000004200000000000000000000000000000ff0700000000000007000000000000000b00000000000000000000000000000000000000000000000b0600000000000000000000000000008300000000000000325e0a00000000000f0000000000000000000093f900000000000000000000000a00000000000000000000000000000085000000000000000400000000000000000000000000000000000000000000008c3100000000000000000000000000001000000020000000010000000000000006000000000000000000f3ff000000000000000000000000001800000000000000000000000000000900000000000000000000000000000007000000000000000000000000000000000000000000f10002000000000000000000000000000000010001000000000001000000000000000200000000000000000000000000000000000000000000008001000000000000000000000000000007000000000000000080000000000000ffffffffffffffff0000000000000000000000000000000080000000000000000000000000000000ffff00000000000080000000000000000b0000000000000000000000000000000000000000000000800800"/528])

0s ago: executing program 5 (id=503):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
close(0xffffffffffffffff)
fanotify_init(0xa00, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x2000081)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts.
[   92.069478][   T10] cfg80211: failed to load regulatory.db
[   92.843375][ T5823] cgroup: Unknown subsys name 'net'
[   93.070880][ T5823] cgroup: Unknown subsys name 'cpuset'
[   93.125390][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   95.128857][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   99.697651][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.703638][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.708769][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.710498][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.712203][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.713379][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.713946][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.715077][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.716244][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.765358][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.775899][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.778878][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.781730][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.788144][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.789174][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.922190][   T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.932107][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.941920][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.956740][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.959562][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.981866][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.988610][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.991326][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.998486][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  100.000666][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  100.882551][ T5836] chnl_net:caif_netlink_parms(): no params data found
[  100.980741][ T5837] chnl_net:caif_netlink_parms(): no params data found
[  101.053997][ T5841] chnl_net:caif_netlink_parms(): no params data found
[  101.463289][ T5848] chnl_net:caif_netlink_parms(): no params data found
[  101.547630][ T5849] chnl_net:caif_netlink_parms(): no params data found
[  101.790502][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.791183][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.791632][ T5836] bridge_slave_0: entered allmulticast mode
[  101.793687][ T5836] bridge_slave_0: entered promiscuous mode
[  101.825984][ T5847] Bluetooth: hci0: command tx timeout
[  101.826112][ T5847] Bluetooth: hci1: command tx timeout
[  101.904742][ T5846] Bluetooth: hci2: command tx timeout
[  101.984971][ T5846] Bluetooth: hci3: command tx timeout
[  102.066263][ T5846] Bluetooth: hci4: command tx timeout
[  102.068476][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.068641][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.068857][ T5836] bridge_slave_1: entered allmulticast mode
[  102.072217][ T5836] bridge_slave_1: entered promiscuous mode
[  102.147427][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.147576][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.147799][ T5837] bridge_slave_0: entered allmulticast mode
[  102.150862][ T5837] bridge_slave_0: entered promiscuous mode
[  102.337825][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.337996][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.338221][ T5837] bridge_slave_1: entered allmulticast mode
[  102.340768][ T5837] bridge_slave_1: entered promiscuous mode
[  102.343336][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.343498][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.343865][ T5841] bridge_slave_0: entered allmulticast mode
[  102.360419][ T5841] bridge_slave_0: entered promiscuous mode
[  102.565901][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.566049][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.566197][ T5841] bridge_slave_1: entered allmulticast mode
[  102.568364][ T5841] bridge_slave_1: entered promiscuous mode
[  102.614290][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.829484][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.911649][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.293909][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.308009][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.309000][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.309146][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.309348][ T5848] bridge_slave_0: entered allmulticast mode
[  103.312379][ T5848] bridge_slave_0: entered promiscuous mode
[  103.397794][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.397958][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.398221][ T5849] bridge_slave_0: entered allmulticast mode
[  103.401227][ T5849] bridge_slave_0: entered promiscuous mode
[  103.499029][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.499284][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.499427][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.499573][ T5848] bridge_slave_1: entered allmulticast mode
[  103.501521][ T5848] bridge_slave_1: entered promiscuous mode
[  103.504091][ T5836] team0: Port device team_slave_0 added
[  103.530556][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.530716][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.530995][ T5849] bridge_slave_1: entered allmulticast mode
[  103.536443][ T5849] bridge_slave_1: entered promiscuous mode
[  103.751126][ T5836] team0: Port device team_slave_1 added
[  103.828702][ T5837] team0: Port device team_slave_0 added
[  103.905359][ T5846] Bluetooth: hci1: command tx timeout
[  103.905396][ T5846] Bluetooth: hci0: command tx timeout
[  103.984768][ T5846] Bluetooth: hci2: command tx timeout
[  104.064659][ T5846] Bluetooth: hci3: command tx timeout
[  104.144694][ T5846] Bluetooth: hci4: command tx timeout
[  104.148178][ T5837] team0: Port device team_slave_1 added
[  104.152119][ T5841] team0: Port device team_slave_0 added
[  104.165735][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.479146][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.481320][ T5841] team0: Port device team_slave_1 added
[  104.485516][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.496136][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.496155][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.496186][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.599860][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.743465][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.743481][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.743501][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.751937][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.751957][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.751988][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.999258][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.999276][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.999295][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.113135][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.113154][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.113183][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.125720][ T5848] team0: Port device team_slave_0 added
[  105.167907][ T5849] team0: Port device team_slave_0 added
[  105.171951][ T5848] team0: Port device team_slave_1 added
[  105.181095][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.181114][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.181147][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.353739][ T5849] team0: Port device team_slave_1 added
[  105.842561][ T5836] hsr_slave_0: entered promiscuous mode
[  105.853400][ T5836] hsr_slave_1: entered promiscuous mode
[  105.869072][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.869090][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.869117][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.984611][ T5846] Bluetooth: hci1: command tx timeout
[  105.984642][ T5846] Bluetooth: hci0: command tx timeout
[  106.075534][ T5847] Bluetooth: hci2: command tx timeout
[  106.101764][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.101783][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.101811][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.103100][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.103112][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.103130][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.122763][ T5837] hsr_slave_0: entered promiscuous mode
[  106.138830][ T5837] hsr_slave_1: entered promiscuous mode
[  106.142899][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[  106.143048][ T5837] Cannot create hsr debugfs directory
[  106.147107][ T5847] Bluetooth: hci3: command tx timeout
[  106.224761][ T5847] Bluetooth: hci4: command tx timeout
[  106.289142][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.289161][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.289189][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.504235][ T5841] hsr_slave_0: entered promiscuous mode
[  106.511584][ T5841] hsr_slave_1: entered promiscuous mode
[  106.512412][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[  106.512434][ T5841] Cannot create hsr debugfs directory
[  107.148956][ T5848] hsr_slave_0: entered promiscuous mode
[  107.150689][ T5848] hsr_slave_1: entered promiscuous mode
[  107.151817][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[  107.151851][ T5848] Cannot create hsr debugfs directory
[  107.297041][ T5849] hsr_slave_0: entered promiscuous mode
[  107.298466][ T5849] hsr_slave_1: entered promiscuous mode
[  107.299858][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[  107.299884][ T5849] Cannot create hsr debugfs directory
[  108.064858][ T5847] Bluetooth: hci0: command tx timeout
[  108.064931][ T5847] Bluetooth: hci1: command tx timeout
[  108.144792][ T5846] Bluetooth: hci2: command tx timeout
[  108.225065][ T5846] Bluetooth: hci3: command tx timeout
[  108.305174][ T5846] Bluetooth: hci4: command tx timeout
[  108.797516][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  108.847598][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  108.877165][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  108.937280][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  109.070367][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  109.122896][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  109.176976][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  109.241835][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  109.400905][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  109.440052][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  109.481471][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  109.552880][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  109.719189][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.772020][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.811389][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.882428][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.070979][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.121635][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.181096][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.241429][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.297954][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.493669][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[  110.553240][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.563017][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.563657][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.625637][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.625762][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.701516][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[  110.709994][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.769673][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.769859][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.834034][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.834200][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.879772][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[  110.892843][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.942341][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.942565][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.003400][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.003564][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.062425][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[  111.143712][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.144989][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.178981][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.239139][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.239484][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.365904][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  111.458061][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.458228][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.520735][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.521724][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.787243][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.910430][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.230928][ T5836] veth0_vlan: entered promiscuous mode
[  112.323722][ T5841] veth0_vlan: entered promiscuous mode
[  112.343748][ T5836] veth1_vlan: entered promiscuous mode
[  112.358424][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.389166][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.432598][ T5841] veth1_vlan: entered promiscuous mode
[  112.550247][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.657165][ T5836] veth0_macvtap: entered promiscuous mode
[  112.705264][ T5841] veth0_macvtap: entered promiscuous mode
[  112.708217][ T5836] veth1_macvtap: entered promiscuous mode
[  112.769031][ T5848] veth0_vlan: entered promiscuous mode
[  112.770967][ T5841] veth1_macvtap: entered promiscuous mode
[  112.824321][ T5849] veth0_vlan: entered promiscuous mode
[  112.876338][ T5848] veth1_vlan: entered promiscuous mode
[  112.897872][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.928250][ T5849] veth1_vlan: entered promiscuous mode
[  112.938802][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.943153][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.009340][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.063820][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.088587][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.112165][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.137098][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.144123][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.216642][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.222884][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.239981][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.365358][ T5848] veth0_macvtap: entered promiscuous mode
[  113.475815][ T5848] veth1_macvtap: entered promiscuous mode
[  113.497327][ T5849] veth0_macvtap: entered promiscuous mode
[  113.622365][ T5849] veth1_macvtap: entered promiscuous mode
[  113.683182][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.683214][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.778940][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.807616][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.807638][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.840555][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.871364][ T5837] veth0_vlan: entered promiscuous mode
[  113.874351][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.948280][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.953583][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.953604][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.011350][ T3595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.043536][ T3595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.055376][ T5837] veth1_vlan: entered promiscuous mode
[  114.059618][ T3595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.092071][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.092095][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.121093][ T3595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.159276][ T3595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.173525][ T3595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.213821][ T3595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.294136][ T3595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.061691][ T5837] veth0_macvtap: entered promiscuous mode
[  115.073455][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.073475][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.157889][ T5837] veth1_macvtap: entered promiscuous mode
[  115.181428][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.181453][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.487387][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.487409][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.727389][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.916953][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.916975][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.946415][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.017579][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  116.063996][ T1474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.081524][ T1474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.145061][ T1474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.147786][ T1474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.804470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  116.833846][ T6015] netlink: 604 bytes leftover after parsing attributes in process `syz.3.4'.
[  116.894576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.006722][ T6012] netlink: 'syz.3.4': attribute type 29 has an invalid length.
[  117.646433][ T6018] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  117.745243][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  117.800927][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.800950][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.944583][ T6018] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  117.944613][ T6018] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.955144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.955774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.955957][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  117.975225][ T6018] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  117.975264][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.975287][ T6018] usb 2-1: Product: syz
[  117.975304][ T6018] usb 2-1: Manufacturer: syz
[  117.975320][ T6018] usb 2-1: SerialNumber: syz
[  118.034510][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  118.537333][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.537349][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.539528][ T6018] usb 2-1: 0:2 : does not exist
[  118.834884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  119.039244][ T5909] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  119.196032][ T6018] usb 2-1: USB disconnect, device number 2
[  119.220171][ T5909] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  119.220209][ T5909] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  119.220232][ T5909] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  119.220276][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  119.220300][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.539402][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  119.652991][ T6029] Bluetooth: MGMT ver 1.23
[  119.685328][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.932765][    C1] vkms_vblank_simulate: vblank timer overrun
[  120.044454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.045519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.247770][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.439966][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.465992][   T38] audit: type=1326 audit(1757882103.345:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  121.466060][   T38] audit: type=1326 audit(1757882103.355:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  121.512756][   T38] audit: type=1326 audit(1757882103.355:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  121.538158][   T38] audit: type=1326 audit(1757882103.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  121.538226][   T38] audit: type=1326 audit(1757882103.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6019 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  121.782679][ T5909] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[  122.099323][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.517285][    C0] vkms_vblank_simulate: vblank timer overrun
[  123.187069][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.511457][    C1] vkms_vblank_simulate: vblank timer overrun
[  124.713143][    C1] vkms_vblank_simulate: vblank timer overrun
[  124.818415][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.202271][ T5895] udevd[5895]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.440831][    C1] vkms_vblank_simulate: vblank timer overrun
[  127.038258][ T6068] netlink: 604 bytes leftover after parsing attributes in process `syz.1.15'.
[  127.867782][ T6077] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  129.747890][ T5923] usb 4-1: USB disconnect, device number 2
[  131.014804][ T6093] =======================================================
[  131.014804][ T6093] WARNING: The mand mount option has been deprecated and
[  131.014804][ T6093]          and is ignored by this kernel. Remove the mand
[  131.014804][ T6093]          option from the mount to silence this warning.
[  131.014804][ T6093] =======================================================
[  134.307563][ T6144] netlink: 'syz.0.22': attribute type 29 has an invalid length.
[  134.309228][ T6144] netlink: 604 bytes leftover after parsing attributes in process `syz.0.22'.
[  137.340109][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.468590][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.246271][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  138.246375][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  138.910281][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.510683][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.914576][   T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  141.232848][   T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  141.232875][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.264653][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.264688][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.264709][   T31] usb 3-1: Product: syz
[  141.264724][   T31] usb 3-1: Manufacturer: syz
[  141.264739][   T31] usb 3-1: SerialNumber: syz
[  141.902949][    C0] vkms_vblank_simulate: vblank timer overrun
[  142.541737][    C0] vkms_vblank_simulate: vblank timer overrun
[  142.660417][   T31] usb 3-1: 0:2 : does not exist
[  142.774956][   T31] usb 3-1: USB disconnect, device number 2
[  143.328720][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.797400][    C1] vkms_vblank_simulate: vblank timer overrun
[  145.950345][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.572481][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.778307][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.323889][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.324599][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.424359][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.984625][ T6044] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  153.113379][    C0] vkms_vblank_simulate: vblank timer overrun
[  153.365060][ T6044] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  153.365081][ T6044] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.543484][ T6044] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.543508][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.543523][ T6044] usb 5-1: Product: syz
[  153.543534][ T6044] usb 5-1: Manufacturer: syz
[  153.543544][ T6044] usb 5-1: SerialNumber: syz
[  154.499487][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.902629][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.970750][ T6044] usb 5-1: 0:2 : does not exist
[  155.134618][ T6044] usb 5-1: USB disconnect, device number 2
[  155.584343][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.535770][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.505701][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.261886][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.270506][ T6277] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.348979][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'.
[  162.107845][ T6336] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET)
[  164.004919][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.505190][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.219062][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.599637][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'.
[  169.808128][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.284006][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.613895][    C0] vkms_vblank_simulate: vblank timer overrun
[  172.366315][    C0] vkms_vblank_simulate: vblank timer overrun
[  173.066757][ T6399] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.437967][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[  177.220739][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.996364][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.914602][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  182.075925][ T5902] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  182.075961][ T5902] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  182.075976][ T5902] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  182.076005][ T5902] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  182.076022][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.103819][ T5902] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  182.399195][ T5902] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12
[  182.721839][   T38] audit: type=1326 audit(1757882164.615:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.721898][   T38] audit: type=1326 audit(1757882164.615:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.723505][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.847133][   T38] audit: type=1326 audit(1757882164.715:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.847203][   T38] audit: type=1326 audit(1757882164.715:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.847251][   T38] audit: type=1326 audit(1757882164.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.847297][   T38] audit: type=1326 audit(1757882164.735:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.847343][   T38] audit: type=1326 audit(1757882164.735:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  182.847388][   T38] audit: type=1326 audit(1757882164.735:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  183.189986][   T38] audit: type=1326 audit(1757882165.075:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  183.190041][   T38] audit: type=1326 audit(1757882165.085:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822e27eba9 code=0x7ffc0000
[  183.289572][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.623280][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.802848][ T5910] usb 5-1: USB disconnect, device number 3
[  187.537574][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.972271][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.161395][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.758675][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.903027][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.948236][    C1] vkms_vblank_simulate: vblank timer overrun
[  189.380334][    C1] vkms_vblank_simulate: vblank timer overrun
[  189.689790][    C1] vkms_vblank_simulate: vblank timer overrun
[  190.223583][    C1] vkms_vblank_simulate: vblank timer overrun
[  190.927974][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.150619][ T6539] netlink: 'syz.1.101': attribute type 29 has an invalid length.
[  191.156768][ T6539] netlink: 604 bytes leftover after parsing attributes in process `syz.1.101'.
[  192.734594][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  193.038324][   T45] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  193.038351][   T45] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  193.038367][   T45] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  193.038396][   T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  193.038412][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.149042][   T45] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  193.464913][ T6043] udevd[6043]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  193.465125][ T6043] udevd[6043]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  193.773432][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  193.773702][   T38] audit: type=1326 audit(1757882175.645:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.773950][   T38] audit: type=1326 audit(1757882175.655:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.773990][   T38] audit: type=1326 audit(1757882175.655:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774023][   T38] audit: type=1326 audit(1757882175.655:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774058][   T38] audit: type=1326 audit(1757882175.655:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774090][   T38] audit: type=1326 audit(1757882175.655:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774122][   T38] audit: type=1326 audit(1757882175.655:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774154][   T38] audit: type=1326 audit(1757882175.665:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774186][   T38] audit: type=1326 audit(1757882175.665:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  193.774223][   T38] audit: type=1326 audit(1757882175.665:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  194.077176][   T45] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  197.231516][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.386423][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.554595][ T5902] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  199.599011][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  199.599067][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  199.945623][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.973532][ T5902] usb 1-1: config 0 has an invalid interface number: 59 but max is 0
[  199.973555][ T5902] usb 1-1: config 0 has no interface number 0
[  200.074268][    C1] vkms_vblank_simulate: vblank timer overrun
[  200.565456][    C1] vkms_vblank_simulate: vblank timer overrun
[  200.853409][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd
[  200.853433][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.853447][ T5902] usb 1-1: Product: syz
[  200.853458][ T5902] usb 1-1: Manufacturer: syz
[  200.853467][ T5902] usb 1-1: SerialNumber: syz
[  200.878434][ T5902] usb 1-1: config 0 descriptor??
[  200.989281][ T5902] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000
[  201.678549][ T5902] usb 1-1: USB disconnect, device number 2
[  201.685720][ T2368] usb 1-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2
[  201.685748][ T2368] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw
[  201.971597][   T45] usb 3-1: USB disconnect, device number 3
[  202.339736][    C1] vkms_vblank_simulate: vblank timer overrun
[  203.072802][    C1] vkms_vblank_simulate: vblank timer overrun
[  203.572514][    C1] vkms_vblank_simulate: vblank timer overrun
[  203.862538][    C1] vkms_vblank_simulate: vblank timer overrun
[  204.577086][    C1] vkms_vblank_simulate: vblank timer overrun
[  205.101268][ T6635] netlink: 'syz.1.117': attribute type 29 has an invalid length.
[  205.147072][ T6635] netlink: 604 bytes leftover after parsing attributes in process `syz.1.117'.
[  206.920322][    C1] vkms_vblank_simulate: vblank timer overrun
[  208.910618][    C1] vkms_vblank_simulate: vblank timer overrun
[  209.672469][    C1] vkms_vblank_simulate: vblank timer overrun
[  210.453890][   T31] IPVS: starting estimator thread 0...
[  210.619895][ T6667] IPVS: using max 10 ests per chain, 24000 per kthread
[  217.154529][    T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  217.353199][    T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  217.353229][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  217.416517][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.416553][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.416574][    T9] usb 4-1: Product: syz
[  217.416590][    T9] usb 4-1: Manufacturer: syz
[  217.416606][    T9] usb 4-1: SerialNumber: syz
[  220.170161][    C1] vkms_vblank_simulate: vblank timer overrun
[  220.353949][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.182932][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.467724][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.534567][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.823011][    C1] vkms_vblank_simulate: vblank timer overrun
[  222.224703][ T5152] Bluetooth: hci4: command 0x0406 tx timeout
[  222.464595][ T5152] Bluetooth: hci1: command 0x0406 tx timeout
[  222.466311][ T5152] Bluetooth: hci0: command 0x0406 tx timeout
[  222.467128][ T5152] Bluetooth: hci2: command 0x0406 tx timeout
[  222.467159][ T5152] Bluetooth: hci3: command 0x0406 tx timeout
[  222.550905][    T9] usb 4-1: 0:2 : does not exist
[  222.855689][ T5843] Bluetooth: hci2: unexpected event for opcode 0x0401
[  223.204750][ T5910] IPVS: starting estimator thread 0...
[  223.268193][   T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  223.324824][ T6726] IPVS: using max 9 ests per chain, 21600 per kthread
[  223.464640][   T31] usb 3-1: config 0 has an invalid interface number: 59 but max is 0
[  223.464671][   T31] usb 3-1: config 0 has no interface number 0
[  223.500418][   T31] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd
[  223.500450][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.500470][   T31] usb 3-1: Product: syz
[  223.500483][   T31] usb 3-1: Manufacturer: syz
[  223.500497][   T31] usb 3-1: SerialNumber: syz
[  223.505760][   T31] usb 3-1: config 0 descriptor??
[  223.532447][   T31] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000
[  223.756902][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  224.034635][ T6729] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[  224.034814][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  224.500387][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  224.515525][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  224.516780][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  224.613844][   T31] usb 3-1: USB disconnect, device number 4
[  224.646466][   T31] pvrusb2: Device being rendered inoperable
[  226.624932][ T5844] Bluetooth: hci5: command tx timeout
[  226.816424][   T31] usb 4-1: USB disconnect, device number 3
[  228.465436][ T6727] chnl_net:caif_netlink_parms(): no params data found
[  228.706291][ T5844] Bluetooth: hci5: command tx timeout
[  230.488809][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.490343][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.490556][ T6727] bridge_slave_0: entered allmulticast mode
[  230.534680][ T6727] bridge_slave_0: entered promiscuous mode
[  230.558605][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.558776][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.559032][ T6727] bridge_slave_1: entered allmulticast mode
[  230.562070][ T6727] bridge_slave_1: entered promiscuous mode
[  230.784524][ T5844] Bluetooth: hci5: command tx timeout
[  231.309933][    C1] vkms_vblank_simulate: vblank timer overrun
[  231.349868][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.054283][    C1] vkms_vblank_simulate: vblank timer overrun
[  232.398933][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.864645][ T5844] Bluetooth: hci5: command tx timeout
[  232.871947][ T6727] team0: Port device team_slave_0 added
[  232.936807][ T6727] team0: Port device team_slave_1 added
[  233.287375][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  233.732049][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.946235][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  233.946262][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  233.946278][ T5910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  233.946314][ T5910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  233.946331][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.018083][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.018102][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.018131][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.106985][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.107002][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.107030][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.200802][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  234.395806][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  234.395826][   T38] audit: type=1326 audit(1757882216.295:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.401799][   T38] audit: type=1326 audit(1757882216.295:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.401855][   T38] audit: type=1326 audit(1757882216.295:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.401906][   T38] audit: type=1326 audit(1757882216.295:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.401949][   T38] audit: type=1326 audit(1757882216.295:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.401992][   T38] audit: type=1326 audit(1757882216.295:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.402044][   T38] audit: type=1326 audit(1757882216.295:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.402091][   T38] audit: type=1326 audit(1757882216.295:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.402135][   T38] audit: type=1326 audit(1757882216.295:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  234.402185][   T38] audit: type=1326 audit(1757882216.295:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6776 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  235.041480][ T5895] udevd[5895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.266785][ T5910] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  235.510739][ T6727] hsr_slave_0: entered promiscuous mode
[  235.511911][ T6727] hsr_slave_1: entered promiscuous mode
[  235.513452][ T6727] debugfs: 'hsr0' already exists in 'hsr'
[  235.513479][ T6727] Cannot create hsr debugfs directory
[  238.635305][ T5926] usb 3-1: USB disconnect, device number 5
[  239.335251][ T6727] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  239.512792][ T6727] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  239.823288][ T6727] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  239.872967][ T6727] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  239.943134][ T6811] netlink: 'syz.3.154': attribute type 29 has an invalid length.
[  239.964777][ T6811] netlink: 604 bytes leftover after parsing attributes in process `syz.3.154'.
[  240.855684][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.035504][ T6727] 8021q: adding VLAN 0 to HW filter on device team0
[  241.101514][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.101678][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.168379][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.174691][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.803218][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.159497][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.498994][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.337111][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  247.489341][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  247.489376][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  247.489392][    T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  247.489421][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  247.489438][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.542818][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  247.903986][   T38] kauditd_printk_skb: 2 callbacks suppressed
[  247.904008][   T38] audit: type=1326 audit(1757882229.795:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.921643][   T38] audit: type=1326 audit(1757882229.795:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936375][   T38] audit: type=1326 audit(1757882229.815:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936440][   T38] audit: type=1326 audit(1757882229.815:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936473][   T38] audit: type=1326 audit(1757882229.815:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936505][   T38] audit: type=1326 audit(1757882229.815:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936536][   T38] audit: type=1326 audit(1757882229.815:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936567][   T38] audit: type=1326 audit(1757882229.815:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936598][   T38] audit: type=1326 audit(1757882229.815:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.936629][   T38] audit: type=1326 audit(1757882229.815:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f844485eba9 code=0x7ffc0000
[  247.957250][ T6727] veth0_vlan: entered promiscuous mode
[  248.110723][ T6727] veth1_vlan: entered promiscuous mode
[  248.134948][    T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  249.149910][ T6727] veth0_macvtap: entered promiscuous mode
[  249.165871][ T6727] veth1_macvtap: entered promiscuous mode
[  249.460924][   T31] IPVS: starting estimator thread 0...
[  249.560630][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.585106][ T6878] IPVS: using max 7 ests per chain, 16800 per kthread
[  249.772777][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.816148][ T6013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.824047][ T6013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.824305][ T6013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.863662][ T6013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.479795][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.479821][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.887096][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.957335][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.283781][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.385665][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.385688][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.865121][  T989] usb 3-1: USB disconnect, device number 6
[  252.228438][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.444608][    C0] vkms_vblank_simulate: vblank timer overrun
[  253.529009][ T6903] netlink: 'syz.3.174': attribute type 29 has an invalid length.
[  253.721165][ T6903] netlink: 604 bytes leftover after parsing attributes in process `syz.3.174'.
[  255.201199][ T5909] IPVS: starting estimator thread 0...
[  255.314707][ T6918] IPVS: using max 10 ests per chain, 24000 per kthread
[  255.970606][    C1] vkms_vblank_simulate: vblank timer overrun
[  257.297913][    C1] vkms_vblank_simulate: vblank timer overrun
[  258.077040][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.080033][ T6954] netlink: 'syz.1.187': attribute type 29 has an invalid length.
[  260.181610][ T6954] netlink: 604 bytes leftover after parsing attributes in process `syz.1.187'.
[  261.034305][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  261.036897][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  262.064674][ T5926] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  262.265207][ T5926] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  262.271288][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.394185][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.394217][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.394239][ T5926] usb 3-1: Product: syz
[  262.394254][ T5926] usb 3-1: Manufacturer: syz
[  262.394270][ T5926] usb 3-1: SerialNumber: syz
[  264.157660][ T6979] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  266.146420][ T2368] pvrusb2: request_firmware fatal error with code=-110
[  266.146446][ T2368] pvrusb2: Failure uploading firmware1
[  266.146455][ T2368] pvrusb2: Device initialization was not successful.
[  266.146461][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  266.146467][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  266.146565][ T5902] pvrusb2: Device being rendered inoperable
[  266.414911][    C0] vkms_vblank_simulate: vblank timer overrun
[  266.745017][    C0] vkms_vblank_simulate: vblank timer overrun
[  267.496980][    C0] vkms_vblank_simulate: vblank timer overrun
[  267.601121][ T5926] usb 3-1: 0:2 : does not exist
[  269.368001][ T7005] netlink: 604 bytes leftover after parsing attributes in process `syz.0.199'.
[  269.597138][ T7004] netlink: 'syz.0.199': attribute type 29 has an invalid length.
[  269.995290][ T5923] usb 3-1: USB disconnect, device number 7
[  270.147781][ T6001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.644275][ T6001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.522598][ T6001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.005311][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.161964][ T6001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.775607][ T6001] bridge_slave_1: left allmulticast mode
[  275.776091][ T6001] bridge_slave_1: left promiscuous mode
[  275.778532][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.074688][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.903068][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.402287][ T6001] bridge_slave_0: left allmulticast mode
[  277.402315][ T6001] bridge_slave_0: left promiscuous mode
[  277.402504][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.530820][ T7059] netlink: 604 bytes leftover after parsing attributes in process `syz.5.211'.
[  278.890816][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  279.052213][   T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  279.052244][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.077012][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.077051][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.077075][   T10] usb 1-1: Product: syz
[  279.077090][   T10] usb 1-1: Manufacturer: syz
[  279.077108][   T10] usb 1-1: SerialNumber: syz
[  284.007557][    C0] vkms_vblank_simulate: vblank timer overrun
[  284.396646][   T10] usb 1-1: 0:2 : does not exist
[  286.489104][ T5923] usb 1-1: USB disconnect, device number 3
[  289.234569][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.584566][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.684783][ T6001] bond0 (unregistering): Released all slaves
[  289.845942][ T7057] netlink: 'syz.5.211': attribute type 29 has an invalid length.
[  290.605340][    C0] vkms_vblank_simulate: vblank timer overrun
[  295.824612][ T6001] hsr_slave_0: left promiscuous mode
[  295.914508][ T6001] hsr_slave_1: left promiscuous mode
[  295.918225][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.918312][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.976718][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.976753][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.254355][    C0] vkms_vblank_simulate: vblank timer overrun
[  296.720895][ T6001] veth1_macvtap: left promiscuous mode
[  296.721203][ T6001] veth0_macvtap: left promiscuous mode
[  296.721452][ T6001] veth1_vlan: left promiscuous mode
[  296.759547][ T6001] veth0_vlan: left promiscuous mode
[  296.966159][    C0] vkms_vblank_simulate: vblank timer overrun
[  298.084890][ T5902] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  298.262868][ T5902] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  298.262898][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.322053][ T5902] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  298.322077][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.322092][ T5902] usb 1-1: Product: syz
[  298.322102][ T5902] usb 1-1: Manufacturer: syz
[  298.322112][ T5902] usb 1-1: SerialNumber: syz
[  303.606625][ T5902] usb 1-1: 0:2 : does not exist
[  304.496052][   T31] usb 1-1: USB disconnect, device number 4
[  310.587476][ T7204] netlink: 604 bytes leftover after parsing attributes in process `syz.2.239'.
[  313.164713][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.384239][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.005172][ T7224] netlink: 604 bytes leftover after parsing attributes in process `syz.3.243'.
[  315.217811][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.441981][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.995036][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.103751][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.904594][   T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  317.137355][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  317.400098][   T45] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  317.400137][   T45] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  317.400161][   T45] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  317.400205][   T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  317.400229][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.903358][   T45] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  318.245968][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  318.334366][   T38] kauditd_printk_skb: 2 callbacks suppressed
[  318.334388][   T38] audit: type=1326 audit(1757882300.175:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.334443][   T38] audit: type=1326 audit(1757882300.175:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.334496][   T38] audit: type=1326 audit(1757882300.175:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.334544][   T38] audit: type=1326 audit(1757882300.185:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.334590][   T38] audit: type=1326 audit(1757882300.185:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.336380][   T38] audit: type=1326 audit(1757882300.195:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.336418][   T38] audit: type=1326 audit(1757882300.195:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.336449][   T38] audit: type=1326 audit(1757882300.195:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.336480][   T38] audit: type=1326 audit(1757882300.205:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  318.336512][   T38] audit: type=1326 audit(1757882300.205:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7228 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  319.018459][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.133046][   T45] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  320.562771][    T9] usb 2-1: USB disconnect, device number 3
[  322.471218][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  322.471288][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  325.345423][ T7201] netlink: 'syz.2.239': attribute type 29 has an invalid length.
[  325.357773][ T7221] netlink: 'syz.3.243': attribute type 29 has an invalid length.
[  327.774958][ T7284] kvm: user requested TSC rate below hardware speed
[  328.387794][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  328.464778][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  328.467303][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  328.484734][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  328.489610][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  330.704801][   T59] Bluetooth: hci1: command tx timeout
[  331.804559][   T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  332.057624][   T45] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  332.057654][   T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  332.185353][   T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  332.185388][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.185402][   T45] usb 1-1: Product: syz
[  332.185412][   T45] usb 1-1: Manufacturer: syz
[  332.185423][   T45] usb 1-1: SerialNumber: syz
[  332.785214][   T59] Bluetooth: hci1: command tx timeout
[  333.493559][ T6001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.707376][ T7342] netlink: 'syz.1.263': attribute type 29 has an invalid length.
[  334.773480][ T7342] netlink: 604 bytes leftover after parsing attributes in process `syz.1.263'.
[  334.864677][   T59] Bluetooth: hci1: command tx timeout
[  336.187339][ T6001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.971403][   T59] Bluetooth: hci1: command tx timeout
[  337.158447][ T6001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.269843][   T45] usb 1-1: 0:2 : does not exist
[  337.716364][ T7305] chnl_net:caif_netlink_parms(): no params data found
[  338.755067][ T5910] usb 1-1: USB disconnect, device number 5
[  340.060426][ T6001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.046814][    C0] vkms_vblank_simulate: vblank timer overrun
[  342.565458][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.565619][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.565919][ T7305] bridge_slave_0: entered allmulticast mode
[  342.574210][ T7305] bridge_slave_0: entered promiscuous mode
[  342.909882][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.909980][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.910160][ T7305] bridge_slave_1: entered allmulticast mode
[  342.988400][ T7305] bridge_slave_1: entered promiscuous mode
[  343.967234][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.195890][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.356198][ T7305] team0: Port device team_slave_0 added
[  345.358758][ T7305] team0: Port device team_slave_1 added
[  345.633653][ T6001] bridge_slave_1: left allmulticast mode
[  345.633689][ T6001] bridge_slave_1: left promiscuous mode
[  345.635665][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.801732][ T6001] bridge_slave_0: left allmulticast mode
[  345.801769][ T6001] bridge_slave_0: left promiscuous mode
[  345.915872][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.224471][   T45] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  347.477261][   T45] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  347.477292][   T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  347.522240][   T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  347.522273][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.522294][   T45] usb 6-1: Product: syz
[  347.522310][   T45] usb 6-1: Manufacturer: syz
[  347.522326][   T45] usb 6-1: SerialNumber: syz
[  350.156372][ T5844] Bluetooth: hci5: command 0x0406 tx timeout
[  352.440263][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.846997][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.871237][   T45] usb 6-1: 0:2 : does not exist
[  353.995497][   T45] usb 6-1: USB disconnect, device number 2
[  355.289182][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.450401][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.639203][ T6001] bond0 (unregistering): Released all slaves
[  355.978524][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.978541][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.978570][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.982866][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.982882][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.982910][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.303421][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.051387][ T7305] hsr_slave_0: entered promiscuous mode
[  360.052825][ T7305] hsr_slave_1: entered promiscuous mode
[  360.053769][ T7305] debugfs: 'hsr0' already exists in 'hsr'
[  360.053794][ T7305] Cannot create hsr debugfs directory
[  361.780158][    C0] vkms_vblank_simulate: vblank timer overrun
[  362.121208][ T6001] hsr_slave_0: left promiscuous mode
[  362.211438][ T6001] hsr_slave_1: left promiscuous mode
[  362.212457][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.212489][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.327680][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.327711][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.635707][ T6001] veth1_macvtap: left promiscuous mode
[  362.635838][ T6001] veth0_macvtap: left promiscuous mode
[  362.636145][ T6001] veth1_vlan: left promiscuous mode
[  362.636373][ T6001] veth0_vlan: left promiscuous mode
[  369.764458][ T5910] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  370.016781][ T5910] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  370.016809][ T5910] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  370.016825][ T5910] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  370.016858][ T5910] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  370.016876][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.210309][ T5910] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  370.509885][   T38] kauditd_printk_skb: 2 callbacks suppressed
[  370.509904][   T38] audit: type=1326 audit(1757882352.405:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.509955][   T38] audit: type=1326 audit(1757882352.405:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510008][   T38] audit: type=1326 audit(1757882352.405:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510055][   T38] audit: type=1326 audit(1757882352.405:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510106][   T38] audit: type=1326 audit(1757882352.405:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510152][   T38] audit: type=1326 audit(1757882352.405:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510207][   T38] audit: type=1326 audit(1757882352.405:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510272][   T38] audit: type=1326 audit(1757882352.405:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510319][   T38] audit: type=1326 audit(1757882352.405:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  370.510375][   T38] audit: type=1326 audit(1757882352.405:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  371.108935][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.300222][ T5910] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12
[  371.648012][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  372.249988][ T5910] usb 6-1: USB disconnect, device number 3
[  376.036539][ T7600] netlink: 604 bytes leftover after parsing attributes in process `syz.3.300'.
[  376.216032][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  377.558426][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  382.253623][ T7625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  383.932869][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  383.932925][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  388.815366][ T7673] kvm: user requested TSC rate below hardware speed
[  389.341576][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  389.343923][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  389.370008][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  389.372665][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  389.394857][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  389.968875][ T7596] netlink: 'syz.3.300': attribute type 29 has an invalid length.
[  391.504738][   T59] Bluetooth: hci2: command tx timeout
[  393.584818][   T59] Bluetooth: hci2: command tx timeout
[  393.608683][ T7674] chnl_net:caif_netlink_parms(): no params data found
[  395.622019][ T7723] netlink: 'syz.5.320': attribute type 5 has an invalid length.
[  395.671145][   T59] Bluetooth: hci2: command tx timeout
[  396.428640][ T7723] ip6erspan0: entered promiscuous mode
[  396.915568][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.915776][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.950005][ T7674] bridge_slave_0: entered allmulticast mode
[  396.980714][ T7674] bridge_slave_0: entered promiscuous mode
[  397.026910][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.027061][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.027314][ T7674] bridge_slave_1: entered allmulticast mode
[  397.030322][ T7674] bridge_slave_1: entered promiscuous mode
[  397.318049][ T6001] IPVS: stop unused estimator thread 0...
[  397.696445][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.754405][   T59] Bluetooth: hci2: command tx timeout
[  397.766313][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.064927][ T6001] bridge_slave_1: left allmulticast mode
[  401.064955][ T6001] bridge_slave_1: left promiscuous mode
[  401.065148][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.088442][ T7744] netlink: 604 bytes leftover after parsing attributes in process `syz.0.324'.
[  401.218799][ T6001] bridge_slave_0: left allmulticast mode
[  401.218825][ T6001] bridge_slave_0: left promiscuous mode
[  401.219048][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.014435][    C1] vkms_vblank_simulate: vblank timer overrun
[  406.077564][    C0] vkms_vblank_simulate: vblank timer overrun
[  406.627143][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.919014][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.109805][ T6001] bond0 (unregistering): Released all slaves
[  407.507741][    C0] vkms_vblank_simulate: vblank timer overrun
[  407.520151][ T7742] netlink: 'syz.0.324': attribute type 29 has an invalid length.
[  407.529083][ T7674] team0: Port device team_slave_0 added
[  407.668141][    C0] vkms_vblank_simulate: vblank timer overrun
[  407.820992][    C0] vkms_vblank_simulate: vblank timer overrun
[  408.218487][    C0] vkms_vblank_simulate: vblank timer overrun
[  408.487641][ T7674] team0: Port device team_slave_1 added
[  408.778308][    C0] vkms_vblank_simulate: vblank timer overrun
[  409.047200][    C0] vkms_vblank_simulate: vblank timer overrun
[  410.183430][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  411.588801][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.588815][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.588834][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.666682][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.666702][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.666732][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.798636][ T6001] hsr_slave_0: left promiscuous mode
[  411.843340][ T6001] hsr_slave_1: left promiscuous mode
[  411.845792][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.980610][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.306466][    C0] vkms_vblank_simulate: vblank timer overrun
[  416.292799][    C0] vkms_vblank_simulate: vblank timer overrun
[  416.510296][    C0] vkms_vblank_simulate: vblank timer overrun
[  417.199076][ T7840] netlink: 604 bytes leftover after parsing attributes in process `syz.3.343'.
[  417.571540][ T7837] kvm: user requested TSC rate below hardware speed
[  418.655803][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  419.035014][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  420.485096][    C0] vkms_vblank_simulate: vblank timer overrun
[  420.929269][    C0] vkms_vblank_simulate: vblank timer overrun
[  421.338647][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.347'.
[  421.471850][    C0] vkms_vblank_simulate: vblank timer overrun
[  421.906209][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.358245][ T7839] netlink: 'syz.3.343': attribute type 29 has an invalid length.
[  422.923654][ T7674] hsr_slave_0: entered promiscuous mode
[  422.964875][ T7674] hsr_slave_1: entered promiscuous mode
[  422.966136][ T7674] debugfs: 'hsr0' already exists in 'hsr'
[  422.966156][ T7674] Cannot create hsr debugfs directory
[  428.058937][ T7674] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  428.160155][ T7674] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  428.221914][ T7674] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  428.311925][ T7674] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  428.884542][ T5909] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  429.072374][ T5909] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  429.072401][ T5909] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  429.072416][ T5909] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  429.072445][ T5909] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  429.072461][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.270912][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.314651][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  429.614041][ T7674] 8021q: adding VLAN 0 to HW filter on device team0
[  429.658445][   T38] kauditd_printk_skb: 6 callbacks suppressed
[  429.658464][   T38] audit: type=1326 audit(1757882411.545:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.5.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  429.667840][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.674654][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.753319][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.753443][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.803669][   T38] audit: type=1326 audit(1757882411.695:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.5.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  429.804020][   T38] audit: type=1326 audit(1757882411.695:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.5.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  431.615614][   T38] audit: type=1326 audit(1757882411.765:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.5.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa71ceeeba9 code=0x7ffc0000
[  431.717665][ T7927] udevd[7927]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.729871][ T5909] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12
[  432.572691][ T7946] netlink: 'syz.1.361': attribute type 29 has an invalid length.
[  432.605176][ T7946] netlink: 604 bytes leftover after parsing attributes in process `syz.1.361'.
[  433.767002][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.390917][ T5925] usb 6-1: USB disconnect, device number 4
[  434.837116][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'.
[  435.580191][    C1] vkms_vblank_simulate: vblank timer overrun
[  436.897507][ T7674] veth0_vlan: entered promiscuous mode
[  436.953318][ T7674] veth1_vlan: entered promiscuous mode
[  437.456694][    C1] vkms_vblank_simulate: vblank timer overrun
[  438.455122][    C1] vkms_vblank_simulate: vblank timer overrun
[  438.614763][    C1] vkms_vblank_simulate: vblank timer overrun
[  438.700133][ T7674] veth0_macvtap: entered promiscuous mode
[  438.876047][ T7674] veth1_macvtap: entered promiscuous mode
[  439.204325][    C1] vkms_vblank_simulate: vblank timer overrun
[  440.263076][    C1] vkms_vblank_simulate: vblank timer overrun
[  440.454029][    C1] vkms_vblank_simulate: vblank timer overrun
[  440.545123][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.566773][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.633864][ T3595] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.636870][ T6001] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.636944][ T6001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.637005][ T6001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.246225][ T8013] netlink: 604 bytes leftover after parsing attributes in process `syz.3.372'.
[  442.271286][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.271303][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.436847][ T8012] netlink: 'syz.3.372': attribute type 29 has an invalid length.
[  442.804519][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.804536][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.254427][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  444.536728][ T5925] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  444.536756][ T5925] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  444.536771][ T5925] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  444.536800][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  444.536816][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.826658][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  445.134081][ T5925] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  445.236422][   T38] audit: type=1326 audit(1757882427.125:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236480][   T38] audit: type=1326 audit(1757882427.125:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236528][   T38] audit: type=1326 audit(1757882427.125:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236575][   T38] audit: type=1326 audit(1757882427.125:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236621][   T38] audit: type=1326 audit(1757882427.125:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236677][   T38] audit: type=1326 audit(1757882427.125:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236723][   T38] audit: type=1326 audit(1757882427.135:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236769][   T38] audit: type=1326 audit(1757882427.135:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236815][   T38] audit: type=1326 audit(1757882427.135:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.236860][   T38] audit: type=1326 audit(1757882427.135:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee6aaeba9 code=0x7ffc0000
[  445.351218][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  445.351312][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  445.914835][ T7924] udevd[7924]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  446.011791][ T8028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  447.669064][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'.
[  450.533260][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.642420][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.776457][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.245382][ T8074] netlink: 'syz.5.380': attribute type 5 has an invalid length.
[  452.459692][ T5925] usb 2-1: USB disconnect, device number 4
[  457.283382][ T8114] netlink: 'syz.1.386': attribute type 29 has an invalid length.
[  457.312931][ T8114] netlink: 604 bytes leftover after parsing attributes in process `syz.1.386'.
[  460.650370][    C1] vkms_vblank_simulate: vblank timer overrun
[  461.546302][    C1] vkms_vblank_simulate: vblank timer overrun
[  464.147645][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.004460][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  465.136547][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  465.177547][ T5926] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  465.177585][ T5926] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  465.177609][ T5926] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  465.177652][ T5926] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  465.177676][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.491889][ T8174] syz_tun: entered promiscuous mode
[  465.493503][ T5926] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  465.936643][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  465.936661][   T38] audit: type=1326 audit(1757882447.835:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.937201][   T38] audit: type=1326 audit(1757882447.835:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.947657][   T38] audit: type=1326 audit(1757882447.835:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.949401][   T38] audit: type=1326 audit(1757882447.845:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.956728][   T38] audit: type=1326 audit(1757882447.845:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.963384][   T38] audit: type=1326 audit(1757882447.855:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.986757][   T38] audit: type=1326 audit(1757882447.885:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.987271][   T38] audit: type=1326 audit(1757882447.885:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  465.991605][   T38] audit: type=1326 audit(1757882447.885:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  466.049039][   T38] audit: type=1326 audit(1757882447.885:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  466.362524][ T7809] udevd[7809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  466.645958][ T5926] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[  468.634939][ T8197] netlink: 'syz.1.395': attribute type 5 has an invalid length.
[  468.658990][ T8197] ip6erspan0: entered promiscuous mode
[  469.385256][ T5926] usb 4-1: USB disconnect, device number 4
[  470.637564][ T8206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  474.748703][    C1] vkms_vblank_simulate: vblank timer overrun
[  476.923805][ T8259] netlink: 'syz.5.404': attribute type 29 has an invalid length.
[  476.928846][ T8259] netlink: 604 bytes leftover after parsing attributes in process `syz.5.404'.
[  477.122779][    C0] vkms_vblank_simulate: vblank timer overrun
[  478.324498][    C0] vkms_vblank_simulate: vblank timer overrun
[  479.329035][    C0] vkms_vblank_simulate: vblank timer overrun
[  479.501165][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.144486][ T5909] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  480.327265][ T5909] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  480.327291][ T5909] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  480.327307][ T5909] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  480.327336][ T5909] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  480.327352][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.485561][ T5909] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  480.918853][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  480.918867][   T38] audit: type=1326 audit(1757882462.815:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.921636][   T38] audit: type=1326 audit(1757882462.815:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.921693][   T38] audit: type=1326 audit(1757882462.815:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.921739][   T38] audit: type=1326 audit(1757882462.815:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.921787][   T38] audit: type=1326 audit(1757882462.815:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.988595][   T38] audit: type=1326 audit(1757882462.875:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.988668][   T38] audit: type=1326 audit(1757882462.885:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.988724][   T38] audit: type=1326 audit(1757882462.885:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.988775][   T38] audit: type=1326 audit(1757882462.885:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  480.988829][   T38] audit: type=1326 audit(1757882462.885:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8274 comm="syz.6.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  481.271900][ T8039] udevd[8039]: setting owner of /dev/midi3 to uid=0, gid=29 failed: No such file or directory
[  481.301753][ T5909] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12
[  481.328422][ T5909] usb 7-1: USB disconnect, device number 2
[  481.411454][ T7809] udevd[7809]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  482.272816][    C0] vkms_vblank_simulate: vblank timer overrun
[  482.482147][    C0] vkms_vblank_simulate: vblank timer overrun
[  483.255548][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.452740][    C1] vkms_vblank_simulate: vblank timer overrun
[  491.144501][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  491.326146][ T5909] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  491.326174][ T5909] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  491.326190][ T5909] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  491.326224][ T5909] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  491.326244][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.431167][ T5909] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  491.817484][   T38] kauditd_printk_skb: 3 callbacks suppressed
[  491.817503][   T38] audit: type=1326 audit(1757882473.715:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817555][   T38] audit: type=1326 audit(1757882473.715:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817622][   T38] audit: type=1326 audit(1757882473.715:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817664][   T38] audit: type=1326 audit(1757882473.715:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817708][   T38] audit: type=1326 audit(1757882473.715:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817753][   T38] audit: type=1326 audit(1757882473.715:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817808][   T38] audit: type=1326 audit(1757882473.715:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817854][   T38] audit: type=1326 audit(1757882473.715:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817899][   T38] audit: type=1326 audit(1757882473.715:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  491.817944][   T38] audit: type=1326 audit(1757882473.715:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8365 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  492.373095][ T7927] udevd[7927]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.487617][ T5909] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12
[  492.554872][ T5909] usb 7-1: USB disconnect, device number 3
[  493.614670][    C1] vkms_vblank_simulate: vblank timer overrun
[  494.348400][    C1] vkms_vblank_simulate: vblank timer overrun
[  497.975078][    C0] vkms_vblank_simulate: vblank timer overrun
[  500.355632][    C0] vkms_vblank_simulate: vblank timer overrun
[  501.352485][    C0] vkms_vblank_simulate: vblank timer overrun
[  501.478629][    C0] vkms_vblank_simulate: vblank timer overrun
[  501.535122][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.940296][    C0] vkms_vblank_simulate: vblank timer overrun
[  504.479600][    C0] vkms_vblank_simulate: vblank timer overrun
[  505.014577][ T5909] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  505.177002][ T8481] netlink: 'syz.5.435': attribute type 5 has an invalid length.
[  505.255127][ T5909] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  505.255157][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  505.263394][ T5909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  505.263426][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.263448][ T5909] usb 1-1: Product: syz
[  505.263483][ T5909] usb 1-1: Manufacturer: syz
[  505.263498][ T5909] usb 1-1: SerialNumber: syz
[  506.884202][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  506.885454][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  510.409085][ T5909] usb 1-1: 0:2 : does not exist
[  513.023389][    C0] vkms_vblank_simulate: vblank timer overrun
[  515.383298][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  516.229083][    T9] usb 1-1: USB disconnect, device number 6
[  517.035861][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.164368][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.380493][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.904396][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.477771][    C0] vkms_vblank_simulate: vblank timer overrun
[  520.490953][ T5926] IPVS: starting estimator thread 0...
[  520.584695][ T8574] IPVS: using max 10 ests per chain, 24000 per kthread
[  522.656613][    C1] vkms_vblank_simulate: vblank timer overrun
[  522.798853][ T6044] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  522.867620][   T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  523.006554][ T6044] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  523.006584][ T6044] usb 4-1: config 0 has no interface number 0
[  523.018428][ T6044] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  523.018459][ T6044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.018474][ T6044] usb 4-1: Product: syz
[  523.018484][ T6044] usb 4-1: Manufacturer: syz
[  523.018494][ T6044] usb 4-1: SerialNumber: syz
[  523.067583][ T6044] usb 4-1: config 0 descriptor??
[  523.088342][   T45] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  523.088381][   T45] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  523.088405][   T45] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  523.088450][   T45] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  523.088474][   T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.170388][   T45] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  523.525062][    C1] vkms_vblank_simulate: vblank timer overrun
[  524.541806][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  524.541823][   T38] audit: type=1326 audit(1757882506.435:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.541875][   T38] audit: type=1326 audit(1757882506.435:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.541920][   T38] audit: type=1326 audit(1757882506.435:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.541965][   T38] audit: type=1326 audit(1757882506.435:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542007][   T38] audit: type=1326 audit(1757882506.435:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542052][   T38] audit: type=1326 audit(1757882506.435:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542099][   T38] audit: type=1326 audit(1757882506.435:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542145][   T38] audit: type=1326 audit(1757882506.435:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542192][   T38] audit: type=1326 audit(1757882506.435:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.542239][   T38] audit: type=1326 audit(1757882506.435:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.6.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff035bfeba9 code=0x7ffc0000
[  524.574838][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.660883][ T6044] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  525.045669][    C0] vkms_vblank_simulate: vblank timer overrun
[  525.806209][   T45] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12
[  526.917426][    C0] vkms_vblank_simulate: vblank timer overrun
[  527.374408][   T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  527.576972][   T45] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  527.577000][   T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.630941][   T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.630973][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.630987][   T45] usb 1-1: Product: syz
[  527.630997][   T45] usb 1-1: Manufacturer: syz
[  527.631007][   T45] usb 1-1: SerialNumber: syz
[  530.199862][    C0] vkms_vblank_simulate: vblank timer overrun
[  530.831101][    C0] vkms_vblank_simulate: vblank timer overrun
[  530.997476][    C0] vkms_vblank_simulate: vblank timer overrun
[  532.717152][   T45] usb 1-1: 0:2 : does not exist
[  532.958336][    T9] usb 4-1: USB disconnect, device number 5
[  533.411807][   T45] usb 7-1: USB disconnect, device number 4
[  535.181521][ T8617] usb 1-1: USB disconnect, device number 7
[  535.838881][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.158963][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.371202][ T8647] kvm: user requested TSC rate below hardware speed
[  538.041825][    C0] vkms_vblank_simulate: vblank timer overrun
[  540.830230][    C0] vkms_vblank_simulate: vblank timer overrun
[  540.932642][    C0] vkms_vblank_simulate: vblank timer overrun
[  541.036699][    C0] vkms_vblank_simulate: vblank timer overrun
[  542.410385][    C0] vkms_vblank_simulate: vblank timer overrun
[  543.224496][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  543.476044][    C0] vkms_vblank_simulate: vblank timer overrun
[  543.546202][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  543.546241][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  543.546263][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  543.546306][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  543.546330][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.854594][    C0] vkms_vblank_simulate: vblank timer overrun
[  545.233046][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  545.567864][   T38] kauditd_printk_skb: 2 callbacks suppressed
[  545.567883][   T38] audit: type=1326 audit(1757882527.465:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.568330][   T38] audit: type=1326 audit(1757882527.465:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.569019][   T38] audit: type=1326 audit(1757882527.465:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.569069][   T38] audit: type=1326 audit(1757882527.465:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.660819][   T38] audit: type=1326 audit(1757882527.555:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.660895][   T38] audit: type=1326 audit(1757882527.555:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.660948][   T38] audit: type=1326 audit(1757882527.555:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8691 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b9eba9 code=0x7ffc0000
[  545.694497][  T989] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  546.069774][  T989] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  546.069802][  T989] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  546.085347][  T989] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  546.085385][  T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.085427][  T989] usb 7-1: Product: syz
[  546.085444][  T989] usb 7-1: Manufacturer: syz
[  546.085460][  T989] usb 7-1: SerialNumber: syz
[  546.789543][    T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[  551.927723][  T989] usb 7-1: 0:2 : does not exist
[  553.584891][ T8617] usb 4-1: USB disconnect, device number 6
[  554.257584][ T8731] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  554.494482][ T8617] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  554.659161][ T8617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  554.659184][ T8617] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  554.659200][ T8617] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  554.662603][ T8617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  554.662625][ T8617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.662639][ T8617] usb 2-1: Product: syz
[  554.662649][ T8617] usb 2-1: Manufacturer: syz
[  554.662660][ T8617] usb 2-1: SerialNumber: syz
[  554.746745][ T8617] hub 2-1:1.0: bad descriptor, ignoring hub
[  554.746774][ T8617] hub 2-1:1.0: probe with driver hub failed with error -5
[  555.153835][ T8617] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  555.315285][ T6044] usb 7-1: USB disconnect, device number 5
[  556.157043][    C0] vkms_vblank_simulate: vblank timer overrun
[  556.979199][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.586961][    C0] vkms_vblank_simulate: vblank timer overrun
[  558.630346][    C1] vkms_vblank_simulate: vblank timer overrun
[  560.224786][ T8617] usb 2-1: USB disconnect, device number 5
[  560.396008][ T8617] usblp0: removed
[  561.330690][ T8617] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  561.529745][ T8617] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  561.531594][ T8617] usb 4-1: config 0 has no interface number 0
[  561.598481][ T8617] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  561.598512][ T8617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.598534][ T8617] usb 4-1: Product: syz
[  561.598549][ T8617] usb 4-1: Manufacturer: syz
[  561.598564][ T8617] usb 4-1: SerialNumber: syz
[  561.749089][ T8617] usb 4-1: config 0 descriptor??
[  562.210899][ T8617] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  562.320419][ T8617] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  562.321116][ T8617] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  562.321198][ T8617] usb 4-1: media controller created
[  562.529589][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.530327][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.536085][ T8781] usb 4-1: dvb_usb_ec168: I2C read not implemented
[  562.925779][    C1] vkms_vblank_simulate: vblank timer overrun
[  563.782357][    C1] vkms_vblank_simulate: vblank timer overrun
[  563.920347][ T8617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  564.183525][ T8617] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  564.587325][ T8617] usb 4-1: USB disconnect, device number 7
[  565.864407][ T8617] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  566.114418][ T8617] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  566.114449][ T8617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  566.306963][ T8617] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  566.306999][ T8617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.307020][ T8617] usb 1-1: Product: syz
[  566.307037][ T8617] usb 1-1: Manufacturer: syz
[  566.307052][ T8617] usb 1-1: SerialNumber: syz
[  568.432314][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  568.432384][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  571.893075][ T8617] usb 1-1: 0:2 : does not exist
[  572.055207][    C0] vkms_vblank_simulate: vblank timer overrun
[  573.531695][ T8837] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  574.019942][    C0] vkms_vblank_simulate: vblank timer overrun
[  575.116954][ T6044] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  576.076932][ T8842] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48
[  576.076955][ T8842] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8842, name: syz.6.498
[  576.076975][ T8842] preempt_count: 0, expected: 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  576.076986][ T8842] RCU nest depth: 0, expected: 0
[  576.077012][ T8842] 1 lock held by syz.6.498/8842:
[  576.077026][ T8842]  #0: ffff888027ba8058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480
[  576.077116][ T8842] irq event stamp: 2106
[  576.077125][ T8842] hardirqs last  enabled at (2105): [<ffffffff8afa63e3>] _raw_spin_unlock_irq+0x23/0x50
[  576.077165][ T8842] hardirqs last disabled at (2106): [<ffffffff86fcb071>] dummy_dequeue+0x151/0x480
[  576.077198][ T8842] softirqs last  enabled at (0): [<ffffffff81829bd9>] copy_process+0x979/0x3ae0
[  576.077239][ T8842] softirqs last disabled at (0): [<0000000000000000>] 0x0
[  576.077290][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.6.498 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  576.077315][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  576.077337][ T8842] Call Trace:
[  576.077346][ T8842]  <TASK>
[  576.077355][ T8842]  dump_stack_lvl+0x189/0x250
[  576.077398][ T8842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.077440][ T8842]  ? print_lock_name+0xde/0x100
[  576.077471][ T8842]  __might_resched+0x44b/0x5d0
[  576.077504][ T8842]  ? __pfx___might_resched+0x10/0x10
[  576.077529][ T8842]  ? dummy_dequeue+0x164/0x480
[  576.077573][ T8842]  rt_spin_lock+0xc7/0x2c0
[  576.077599][ T8842]  ? _raw_spin_unlock_irq+0x23/0x50
[  576.077634][ T8842]  ? __pfx_rt_spin_lock+0x10/0x10
[  576.077667][ T8842]  ? rcu_is_watching+0x15/0xb0
[  576.077704][ T8842]  dummy_dequeue+0x164/0x480
[  576.077740][ T8842]  ? __pfx_dummy_dequeue+0x10/0x10
[  576.077765][ T8842]  ? __pfx_schedule_timeout+0x10/0x10
[  576.077795][ T8842]  ? __pfx___wait_for_common+0x10/0x10
[  576.077843][ T8842]  usb_ep_dequeue+0x66/0x250
[  576.077873][ T8842]  raw_process_ep0_io+0x435/0x980
[  576.077914][ T8842]  raw_ioctl+0x22f6/0x3ba0
[  576.077946][ T8842]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  576.077976][ T8842]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  576.078007][ T8842]  ? do_vfs_ioctl+0xbeb/0x1440
[  576.078037][ T8842]  ? __pfx_raw_ioctl+0x10/0x10
[  576.078066][ T8842]  ? __pfx_smack_log+0x10/0x10
[  576.078102][ T8842]  ? smk_access+0x14c/0x4e0
[  576.078145][ T8842]  ? smk_tskacc+0x2fc/0x370
[  576.078186][ T8842]  ? smack_file_ioctl+0x24d/0x340
[  576.078225][ T8842]  ? __pfx_smack_file_ioctl+0x10/0x10
[  576.078262][ T8842]  ? __fget_files+0x2a/0x420
[  576.078293][ T8842]  ? __fget_files+0x3a6/0x420
[  576.078323][ T8842]  ? __fget_files+0x2a/0x420
[  576.078360][ T8842]  ? bpf_lsm_file_ioctl+0x9/0x20
[  576.078387][ T8842]  ? __pfx_raw_ioctl+0x10/0x10
[  576.078416][ T8842]  __se_sys_ioctl+0xff/0x170
[  576.078444][ T8842]  do_syscall_64+0xfa/0x3b0
[  576.078464][ T8842]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.078496][ T8842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.078518][ T8842]  ? clear_bhb_loop+0x60/0xb0
[  576.078545][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.078571][ T8842] RIP: 0033:0x7ff035bfe7ab
[  576.078590][ T8842] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  576.078609][ T8842] RSP: 002b:00007ff0335d3f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  576.078630][ T8842] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff035bfe7ab
[  576.078646][ T8842] RDX: 00007ff0335d3fd0 RSI: 0000000040085503 RDI: 0000000000000009
[  576.078661][ T8842] RBP: 00007ff0335d4fe0 R08: 0000000000000080 R09: 00007ff0335d3fd8
[  576.078675][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[  576.078691][ T8842] R13: 0000000800000000 R14: 0000000000000012 R15: 00007ff035c8d391
[  576.078726][ T8842]  </TASK>
[  576.158959][    C0] vkms_vblank_simulate: vblank timer overrun
[  577.875213][ T8617] usb 1-1: USB disconnect, device number 8
[  580.334316][ T6044] usb 7-1: device descriptor read/64, error -110
[  580.714351][ T6044] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  581.557701][   T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.628959][   T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.773722][   T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.531495][ T8826] syz_tun (unregistering): left promiscuous mode
[  584.978306][   T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.614840][   T37] bridge_slave_1: left allmulticast mode
[  585.614876][   T37] bridge_slave_1: left promiscuous mode
[  585.615154][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.686073][   T37] bridge_slave_0: left allmulticast mode
[  585.686112][   T37] bridge_slave_0: left promiscuous mode
[  585.686431][   T37] bridge0: port 1(bridge_slave_0) entered disabled state