last executing test programs:

36m56.810879127s ago: executing program 32 (id=143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$inet(0x2, 0x3, 0x2)
getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4})
r5 = socket(0xa, 0x3, 0x3a)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$update(0x2, r6, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x84}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x398a, 0xaccb, 0x8, &(0x7f0000000240)={[0x1]}, 0x8)
open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

36m56.393822471s ago: executing program 33 (id=142):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$inet(0x2, 0x3, 0x2)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r3, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
r4 = socket(0xa, 0x3, 0x3a)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$update(0x2, r5, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x398a, 0xaccb, 0x8, &(0x7f0000000240)={[0x1]}, 0x8)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

35m0.015839147s ago: executing program 34 (id=320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$inet(0x2, 0x3, 0x2)
getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4})
r5 = socket(0xa, 0x3, 0x3a)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$update(0x2, r6, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x84}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x398a, 0xaccb, 0x8, &(0x7f0000000240)={[0x1]}, 0x8)
open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

34m57.80324093s ago: executing program 35 (id=324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet(0x2, 0x3, 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r3, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4})
socket(0xa, 0x3, 0x3a)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$update(0x2, r4, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x84}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x398a, 0xaccb, 0x8, &(0x7f0000000240)={[0x1]}, 0x8)
open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

18m24.844407564s ago: executing program 36 (id=1729):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180001000080000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r1}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x100}, 0x6)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000040000000000008020830000200c0000", @ANYRES32, @ANYBLOB="040000000000f5ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000030000000400"/28], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x50)
r7 = syz_open_dev$sndctrl(&(0x7f0000001680), 0x0, 0x20800)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000014c0)=0x1f0f, &(0x7f0000001500)=0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001540)={{0x0, 0x0, 0x0, 0x400000, 'syz0\x00'}, 0x6, 0x20000000, 0x7, r2, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffe00000000]})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

5m25.625082317s ago: executing program 2 (id=4552):
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021)
r2 = dup(r0)
read$FUSE(r2, &(0x7f0000001e00)={0x2020}, 0x2020)
read$FUSE(r2, 0x0, 0x0)
inotify_rm_watch(r2, r1)
write$binfmt_elf32(r2, 0x0, 0x1ce)

5m23.938581964s ago: executing program 2 (id=4561):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x8, 0x2, 0x2)
setsockopt$rose(r0, 0x104, 0x1, 0x0, 0x0)

5m18.563987492s ago: executing program 2 (id=4581):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
lstat(&(0x7f0000000800)='./file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xc0c719fe1b69ce50, 0x0, 0x2, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xefffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000001, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0x2, 0xd, 0x1000, 0x6, r2, r3, 0xffffffff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$security_ima(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)=@sha1={0x1, "1a2352dbf5bf0342ae59f4da7a97101c0c293748"}, 0x15, 0x0)

5m18.347102883s ago: executing program 2 (id=4583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181b03, 0x14)

5m17.404011835s ago: executing program 2 (id=4586):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x20000009}, 0x18)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, 0x0)

5m15.961147089s ago: executing program 2 (id=4593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5, 0x6], 0x0, 0xa340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m15.471959773s ago: executing program 37 (id=4593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5, 0x6], 0x0, 0xa340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m0.820269089s ago: executing program 3 (id=5304):
socket$netlink(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x43, 0x7ffcfffc}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xcb5aec5c4fca14b0}}, 0x10)
write$binfmt_script(r0, 0x0, 0x0)

3m0.457921699s ago: executing program 3 (id=5305):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendfile(r1, r1, 0x0, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)

2m59.452620729s ago: executing program 3 (id=5307):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, &(0x7f0000000140)=0x7, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x6, 0x7, 0xb, 0x0, 0x9d, 0xb, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x2, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x43, 0xc976, 0x6], 0x2, 0x20200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m58.358521631s ago: executing program 3 (id=5315):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xa1c08, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x12d5498, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020)

2m58.191833706s ago: executing program 3 (id=5317):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x8, 0x0, 0xfffa}}}]}]}]}}]}, 0x50}}, 0x20040054)

2m57.868942095s ago: executing program 3 (id=5321):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m56.878469547s ago: executing program 38 (id=5321):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m12.944700526s ago: executing program 9 (id=5578):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000001600", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

2m12.405920076s ago: executing program 9 (id=5583):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000280)='./file1\x00')

2m11.978403982s ago: executing program 9 (id=5588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70fd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0xa, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24008000)

2m10.625741256s ago: executing program 9 (id=5591):
mkdir(&(0x7f0000000040)='./file1\x00', 0x86)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0)
syz_open_dev$loop(0x0, 0x6, 0x143281)

2m10.186352751s ago: executing program 9 (id=5596):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2m9.568773988s ago: executing program 9 (id=5599):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000007c0)='{)+}@@!}\x00', &(0x7f0000000800)='dU|\xcbM\xe6\x91q\xe0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
read(r5, 0x0, 0x0)
close(r5)

2m8.936385707s ago: executing program 39 (id=5599):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000007c0)='{)+}@@!}\x00', &(0x7f0000000800)='dU|\xcbM\xe6\x91q\xe0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
read(r5, 0x0, 0x0)
close(r5)

2m3.480237415s ago: executing program 0 (id=5629):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r2 = syz_open_pts(r1, 0x101)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c)

2m3.265501867s ago: executing program 0 (id=5630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20)

2m2.222471732s ago: executing program 0 (id=5633):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r7)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m1.209335176s ago: executing program 0 (id=5640):
syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={<r0=>0x0}, &(0x7f0000000300)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000340)={&(0x7f00000022c0)="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", 0x1000})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x140}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
open_by_handle_at(r4, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x480242)
write$nbd(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700000000000000000000003e078b4ea9373c73f5f0d747c3d5b253355dc62ee6de97639a2541327d2576f482f67452af6c45419d074aedf0d2074848a66ba8f197463c961664"], 0x40)
ioctl$COMEDI_SETWSUBD(r4, 0x6411)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x5)
r7 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1)
sendmmsg(r6, &(0x7f0000000480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="110000000000000029"], 0x18}}], 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x480)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040014002b8008000800", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="14001b0000000000"], 0x3c}}, 0x0)
mount(0x0, 0x0, 0x0, 0x400, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m0.268480084s ago: executing program 0 (id=5642):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0)

1m59.725460277s ago: executing program 0 (id=5646):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n', @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m43.362477529s ago: executing program 40 (id=5646):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0, 0x200040d4}], 0x1, 0x20008852)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n', @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m4.657830509s ago: executing program 8 (id=5810):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000006, 0x8, 0x9, 0x85, 0x4, 0x4, 0xfffffffffffffff9, 0xffffffffffff70ee, 0x1ff, 0x0, 0x9, 0xb, 0x5, 0x3, 0x81, 0x80000000ac], 0x10000, 0x200})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x4)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m3.271596486s ago: executing program 8 (id=5813):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x20000)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044814}, 0x4008000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)

1m2.507919769s ago: executing program 8 (id=5814):
close(0xffffffffffffffff)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)

1m0.005907261s ago: executing program 8 (id=5822):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20)

58.73475203s ago: executing program 8 (id=5825):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'})

58.467089282s ago: executing program 8 (id=5829):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
r6 = dup(r5)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80800, 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

42.313481345s ago: executing program 41 (id=5829):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
r6 = dup(r5)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80800, 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

14.509292303s ago: executing program 4 (id=5972):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x105}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}})
io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)

10.360919485s ago: executing program 7 (id=5984):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

10.360432326s ago: executing program 4 (id=5985):
socket(0x2a, 0x80000, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

10.183745854s ago: executing program 7 (id=5986):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

7.268820421s ago: executing program 6 (id=5988):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6.608075989s ago: executing program 6 (id=5990):
pipe2$9p(0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c)
r0 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r0, 0x0, 0x53)
creat(0x0, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"})

6.112995656s ago: executing program 6 (id=5994):
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x300, 0x0, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf000, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1042, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2])

5.37457963s ago: executing program 1 (id=5995):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r5, r3)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000001280)="18", 0x1}], 0x1)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

5.121257841s ago: executing program 1 (id=5996):
setfsgid(0xee00)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1})
r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = syz_open_procfs(r1, &(0x7f0000000280)='stat\x00')
pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

5.000966443s ago: executing program 5 (id=5997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.888394466s ago: executing program 6 (id=5998):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.79715314s ago: executing program 6 (id=5999):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x301, 0x0, 0x0, {0xd99421c61d4c7de1, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x105, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x600, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xf22}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x4000880)

4.557275626s ago: executing program 4 (id=6000):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/73, 0x49}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.402373723s ago: executing program 7 (id=6001):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d34}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

3.955935119s ago: executing program 1 (id=6002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd2(0x0, 0x80801)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000080))
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0)

3.720719389s ago: executing program 6 (id=6003):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x4, 0x8000007, 0x41, @empty, @empty, 0x20, 0x8000, 0x80, 0x8}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @local})

3.719064736s ago: executing program 5 (id=6004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="37bf6a1e07da8509430005"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.700012295s ago: executing program 7 (id=6005):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.714039317s ago: executing program 5 (id=6006):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
chdir(&(0x7f0000000000)='./cgroup\x00')
mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

2.312936445s ago: executing program 5 (id=6007):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
close(r1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000100))
read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020)

2.232992951s ago: executing program 4 (id=6008):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300))
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00))
sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="3ec14a71c4b72a066c04bcc5445b0269", 0x10}], 0x1}}], 0x1, 0x24005805)

2.180012148s ago: executing program 1 (id=6009):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000400))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)

2.164752993s ago: executing program 7 (id=6010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000001280)='net/ip_tables_matches\x00')
ftruncate(r4, 0x349add56)

869.006904ms ago: executing program 5 (id=6011):
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1)

648.440222ms ago: executing program 1 (id=6012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x10, 0x1, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0x80000001, 0x10000, 0x9, 0x2d9, 0x4, 0x40000003, 0xc5, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x862, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x7, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x1000, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x5, 0x3a66, 0x7f, 0x1aac, 0xfff, 0xffffffffffffffff, 0x401, 0x3, 0x706, 0x4002, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x7, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0xc67d, 0x7, 0xffffffffffffff92, 0x100000001, 0x5, 0xe35, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x9a, 0x2, 0x401, 0x5, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x200, 0x3, 0x6, 0x6, 0x3, 0x3, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0x1, 0x1ff, 0x2, 0x6b, 0x334]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

627.429023ms ago: executing program 4 (id=6013):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000740)="38eef39a9470e520a675d696d62d357d2dff6aa91ce585589f5a86b334887eccd0cf6d8e735499c5da5a4d563ad1b35f80fa0b64a2aff75617b3b1c35b8d3141773af29a42fdf17084264e7834faf8d112fffc49"})

455.896263ms ago: executing program 7 (id=6014):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

263.357087ms ago: executing program 5 (id=6015):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000240)={0x7, 0x3, 0x0, 0x2, 0x8})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

216.753734ms ago: executing program 4 (id=6016):
syz_usb_connect(0x0, 0x1c5, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002aa9dc20560800bc7fb2010203010902"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

0s ago: executing program 1 (id=6017):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(0x0, 0x92)
mount$bpf(0x0, 0x0, 0x0, 0x800, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00"], 0x0)
memfd_create(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85)

kernel console output (not intermixed with test programs):

 usbtmc 1-1:16.0: can't read capabilities
[ 2143.115857][T24629] /dev/nullb0: Can't open blockdev
[ 2143.299591][T24629] Device name not specified.
[ 2143.299591][T24629] 
[ 2143.933115][T24637] usbtmc 1-1:16.0: usb_control_msg returned -32
[ 2144.011029][T22225] usb 1-1: USB disconnect, device number 13
[ 2144.171103][T24650] erspan0: entered promiscuous mode
[ 2144.196007][T24650] batman_adv: batadv0: Adding interface: macvlan2
[ 2144.214107][T24650] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2144.246217][T24650] batman_adv: batadv0: Interface activated: macvlan2
[ 2144.321986][T24653] batman_adv: batadv0: Adding interface: macvlan30
[ 2144.330639][T24653] batman_adv: batadv0: The MTU of interface macvlan30 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2144.357337][T24653] batman_adv: batadv0: Interface activated: macvlan30
[ 2144.369868][T24655] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 2146.111305][T24680] /dev/nullb0: Can't open blockdev
[ 2149.998552][T24723] /dev/nullb0: Can't open blockdev
[ 2152.638565][T24760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2154.068756][T24780] batman_adv: batadv0: Adding interface: macvlan31
[ 2154.094817][T24780] batman_adv: batadv0: The MTU of interface macvlan31 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2154.132889][ T6017] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2154.200318][T24780] batman_adv: batadv0: Interface activated: macvlan31
[ 2154.315277][ T6017] usb 4-1: Using ep0 maxpacket: 16
[ 2154.323396][ T6017] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 2154.367896][ T6017] usb 4-1: config 0 has no interface number 0
[ 2154.374063][ T6017] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2154.431969][ T6017] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2154.477253][ T6017] usb 4-1: config 0 interface 41 has no altsetting 0
[ 2154.516398][ T6017] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2154.721333][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2154.729385][ T6017] usb 4-1: Product: syz
[ 2154.747056][ T6017] usb 4-1: Manufacturer: syz
[ 2154.751673][ T6017] usb 4-1: SerialNumber: syz
[ 2154.782278][ T6017] usb 4-1: config 0 descriptor??
[ 2154.794919][T24774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2154.805411][T24774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2155.352864][T24774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2155.360170][T24774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2155.960273][T24810] /dev/nullb0: Can't open blockdev
[ 2156.121857][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2156.774403][T24811] orangefs_mount: mount request failed with -4
[ 2157.433285][T17550] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 2157.457986][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 2157.469966][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 2157.482969][ T6017] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[ 2157.497915][ T6017] usb 4-1: USB disconnect, device number 4
[ 2157.606955][T17550] usb 10-1: Using ep0 maxpacket: 32
[ 2158.087105][T17550] usb 10-1: config 0 has an invalid interface number: 9 but max is 0
[ 2158.121776][T17550] usb 10-1: config 0 has no interface number 0
[ 2158.146571][T17550] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2158.159225][T17550] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2158.216915][T17550] usb 10-1: Product: syz
[ 2158.222887][T17550] usb 10-1: Manufacturer: syz
[ 2158.355991][T17550] usb 10-1: SerialNumber: syz
[ 2158.368648][T17550] usb 10-1: config 0 descriptor??
[ 2158.387613][T12809] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[ 2158.390945][T17550] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 2158.568357][T12809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2158.577714][T12809] usb 1-1: config 0 has no interface number 0
[ 2158.584475][T12809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2158.607797][T12809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2158.638331][T12809] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2158.676628][T12809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2158.757377][T12809] usb 1-1: config 0 descriptor??
[ 2158.772250][T24839] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2158.809329][T12809] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2159.067280][T12809] usb 1-1: USB disconnect, device number 14
[ 2159.073383][    C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 2159.412897][T24851] orangefs_mount: mount request failed with -4
[ 2159.741166][T24865] batman_adv: batadv0: Adding interface: macvlan49
[ 2159.811041][T24865] batman_adv: batadv0: Interface activated: macvlan49
[ 2159.977241][T17550] gspca_topro: Sensor cx0342
[ 2160.263419][T17550] usb 10-1: USB disconnect, device number 28
[ 2160.297796][T24875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2161.169003][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'.
[ 2161.402410][T24895] batman_adv: batadv0: Adding interface: macvlan32
[ 2161.445648][T24895] batman_adv: batadv0: Interface activated: macvlan32
[ 2162.887050][T24914] batman_adv: batadv0: Adding interface: macvlan33
[ 2162.902920][T24914] batman_adv: batadv0: Interface activated: macvlan33
[ 2163.582760][T24941] batman_adv: batadv0: Adding interface: macvlan3
[ 2163.591105][T24941] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2163.618299][T24941] batman_adv: batadv0: Interface activated: macvlan3
[ 2163.773564][T24945] /dev/nullb0: Can't open blockdev
[ 2165.034317][T24948] orangefs_mount: mount request failed with -4
[ 2165.449413][T24962] batman_adv: batadv0: Adding interface: macvlan34
[ 2165.485817][T24962] batman_adv: batadv0: Interface activated: macvlan34
[ 2166.028780][T24980] batman_adv: batadv0: Adding interface: macvlan35
[ 2166.056344][T24980] batman_adv: batadv0: Interface activated: macvlan35
[ 2166.086171][T24982] batman_adv: batadv0: Adding interface: macvlan50
[ 2166.092790][T24982] batman_adv: batadv0: Interface activated: macvlan50
[ 2166.608975][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4902'.
[ 2166.921349][T25004] /dev/nullb0: Can't open blockdev
[ 2166.963210][T25005] vcan0: tx drop: invalid da for name 0x0000000000000001
[ 2167.013845][T25007] batman_adv: batadv0: Adding interface: macvlan51
[ 2167.032675][T25007] batman_adv: batadv0: Interface activated: macvlan51
[ 2167.706017][T25004] orangefs_mount: mount request failed with -4
[ 2167.942975][T25018] batman_adv: batadv0: Adding interface: macvlan52
[ 2167.983072][T25018] batman_adv: batadv0: Interface activated: macvlan52
[ 2169.100447][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4921'.
[ 2169.295567][T25056] /dev/nullb0: Can't open blockdev
[ 2170.070212][T25056] orangefs_mount: mount request failed with -4
[ 2172.172447][T25101] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4940'.
[ 2174.411166][T25143] overlayfs: failed to clone upperpath
[ 2174.738819][T25156] loop2: detected capacity change from 0 to 7
[ 2174.760091][T25156]  loop2:
[ 2174.763099][T25156] loop2: partition table partially beyond EOD, truncated
[ 2174.947459][T12809] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 2175.133987][T25163] overlayfs: failed to clone upperpath
[ 2175.254150][T12809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2175.275797][T12809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2175.308606][T12809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2175.326974][T12809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2175.569188][T12809] usb 1-1: GET_CAPABILITIES returned 0
[ 2175.595307][T12809] usbtmc 1-1:16.0: can't read capabilities
[ 2175.884073][T12809] usb 1-1: USB disconnect, device number 15
[ 2176.556712][T25180] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2177.833632][T14962] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2178.006732][T25204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4978'.
[ 2178.036729][T14962] usb 1-1: Using ep0 maxpacket: 16
[ 2178.052593][T14962] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 2178.061084][T14962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2178.071252][T14962] usb 1-1: config 0 has no interface number 0
[ 2178.085752][T14962] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 2178.095156][T14962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2178.103212][T14962] usb 1-1: Product: syz
[ 2178.107360][T14962] usb 1-1: Manufacturer: syz
[ 2178.112073][T14962] usb 1-1: SerialNumber: syz
[ 2178.137655][T14962] usb 1-1: config 0 descriptor??
[ 2178.167592][T14962] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[ 2178.178669][T14962] usb 1-1: No valid video chain found.
[ 2178.368595][T14962] usb 1-1: USB disconnect, device number 16
[ 2178.379560][T25212] syz_tun: entered allmulticast mode
[ 2178.461456][T25212] dvmrp17: left allmulticast mode
[ 2178.643008][T25211] syz_tun: left allmulticast mode
[ 2179.774352][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4988'.
[ 2180.317494][T25245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2180.657977][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4996'.
[ 2181.072937][   T30] audit: type=1326 audit(1754337713.869:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25262 comm="syz.0.4997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x0
[ 2181.289407][T25263] lo speed is unknown, defaulting to 1000
[ 2182.711093][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5003'.
[ 2182.798662][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2185.277951][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'.
[ 2185.952466][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2185.958966][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[ 2185.965571][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2185.972046][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 2186.206239][T25331] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2186.544892][T25345] batman_adv: batadv0: Adding interface: macvlan4
[ 2186.615469][T25345] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2186.701426][T25345] batman_adv: batadv0: Interface activated: macvlan4
[ 2187.289894][T25358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5023'.
[ 2187.397150][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5021'.
[ 2188.121434][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5031'.
[ 2188.353569][T14962] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 2188.525414][T14962] usb 10-1: Using ep0 maxpacket: 32
[ 2188.544235][T14962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2188.594205][T14962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2188.615541][T14962] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2188.696171][T14962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2188.735767][T14962] usb 10-1: config 0 descriptor??
[ 2189.165674][ T6017] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2189.289178][T14962] ft260 0003:0403:6030.0022: unknown main item tag 0x7
[ 2189.445055][ T6017] usb 4-1: Using ep0 maxpacket: 16
[ 2189.470224][ T6017] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 2189.487363][ T6017] usb 4-1: config 0 has no interface number 0
[ 2189.493639][ T6017] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2189.535584][T14962] ft260 0003:0403:6030.0022: chip code: 6424 8183
[ 2189.542096][ T6017] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2189.574624][ T6017] usb 4-1: config 0 interface 41 has no altsetting 0
[ 2189.599231][ T6017] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2189.626172][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2189.675790][ T6017] usb 4-1: Product: syz
[ 2189.689946][ T6017] usb 4-1: Manufacturer: syz
[ 2189.694649][ T6017] usb 4-1: SerialNumber: syz
[ 2189.737556][ T6017] usb 4-1: config 0 descriptor??
[ 2189.749870][T14962] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0
[ 2189.756028][T25394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2189.807418][T25394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2189.964242][T14962] ft260 0003:0403:6030.0022: failed to retrieve status: -32, no wakeup
[ 2190.047751][T25394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2190.090894][T25394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2190.225371][T25377] ft260 0003:0403:6030.0022: ft260_i2c_read: failed with -38
[ 2190.235679][T17550] usb 10-1: USB disconnect, device number 29
[ 2190.650216][T25410] syz_tun: entered allmulticast mode
[ 2190.786241][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2190.965775][T25417] batman_adv: batadv0: Adding interface: macvlan32
[ 2190.972767][T25417] batman_adv: batadv0: The MTU of interface macvlan32 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2190.998323][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2191.030983][T25417] batman_adv: batadv0: Interface activated: macvlan32
[ 2191.957697][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5050'.
[ 2191.981137][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5050'.
[ 2192.146810][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 2192.169868][ T6017] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 2192.201115][ T6017] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[ 2192.220236][T25439] binder_alloc: 25438: binder_alloc_buf, no vma
[ 2192.292553][ T6017] usb 4-1: USB disconnect, device number 5
[ 2192.443089][T25443] batman_adv: batadv0: Adding interface: macvlan36
[ 2192.450253][T25443] batman_adv: batadv0: Interface activated: macvlan36
[ 2192.944383][T25457] batman_adv: batadv0: Adding interface: macvlan5
[ 2193.007630][T25457] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2193.087417][T25457] batman_adv: batadv0: Interface activated: macvlan5
[ 2193.141711][T25461] overlayfs: failed to clone upperpath
[ 2193.429439][T25472] input: syz1 as /devices/virtual/input/input46
[ 2193.871059][T25484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2193.878342][T25484] IPv6: NLM_F_CREATE should be set when creating new route
[ 2194.327669][T25495] kvm: emulating exchange as write
[ 2194.332927][T25497] batman_adv: batadv0: Adding interface: macvlan53
[ 2194.332990][T25497] batman_adv: batadv0: Interface activated: macvlan53
[ 2194.844787][T25512] vlan3: entered allmulticast mode
[ 2194.850275][T25512] bridge0: port 3(vlan3) entered blocking state
[ 2194.874907][T25512] bridge0: port 3(vlan3) entered disabled state
[ 2194.898571][T25512] vlan3: entered promiscuous mode
[ 2195.753529][T12809] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 2196.187175][T25544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5091'.
[ 2196.264269][T12809] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2196.310956][T12809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.504195][T12809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2196.535700][T12809] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2196.601610][T12809] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2196.651665][T12809] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2196.675886][T12809] usb 10-1: Manufacturer: syz
[ 2196.699107][T12809] usb 10-1: config 0 descriptor??
[ 2197.214410][T12809] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 2197.498562][T22225] usb 10-1: USB disconnect, device number 30
[ 2199.685889][T25604] overlayfs: failed to clone lowerpath
[ 2200.233116][T25610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[ 2200.252413][T25614] overlayfs: failed to clone upperpath
[ 2200.466858][   T30] audit: type=1326 audit(1754337732.016:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25622 comm="syz.9.5118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x0
[ 2200.769223][T25630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 2200.775881][T25630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2200.809025][T25630] vhci_hcd vhci_hcd.0: Device attached
[ 2200.882747][T25640] overlayfs: failed to clone upperpath
[ 2201.067644][T17550] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[ 2201.097839][T25632] vhci_hcd: connection reset by peer
[ 2201.115595][ T9737] vhci_hcd: stop threads
[ 2201.120431][ T9737] vhci_hcd: release socket
[ 2201.133379][ T9737] vhci_hcd: disconnect device
[ 2201.215725][T25655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5129'.
[ 2201.695540][ T6017] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 2201.909634][ T6017] usb 1-1: Using ep0 maxpacket: 8
[ 2202.144394][ T6017] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 2202.292732][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2202.427604][ T6017] usb 1-1: Product: syz
[ 2202.507568][ T6017] usb 1-1: Manufacturer: syz
[ 2202.512196][ T6017] usb 1-1: SerialNumber: syz
[ 2202.561896][ T6017] usb 1-1: config 0 descriptor??
[ 2202.599496][T25673] overlayfs: failed to clone upperpath
[ 2202.837881][ T6017] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2203.351176][T25693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2203.724256][ T6017] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2203.787735][ T6017] usb 1-1: USB disconnect, device number 17
[ 2204.094966][T25709] overlayfs: failed to clone upperpath
[ 2204.319966][T25711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5148'.
[ 2204.583312][T25713] overlayfs: failed to clone upperpath
[ 2204.639386][T25713] overlayfs: failed to clone upperpath
[ 2204.776290][T25718] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5151'.
[ 2204.933418][T25719] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5151'.
[ 2206.561567][T17550] vhci_hcd: vhci_device speed not set
[ 2206.668474][T25749] batman_adv: batadv0: Adding interface: macvlan14
[ 2206.708934][T25749] batman_adv: batadv0: The MTU of interface macvlan14 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2206.751929][T25749] batman_adv: batadv0: Interface activated: macvlan14
[ 2207.122578][T25759] /dev/nullb0: Can't open blockdev
[ 2207.920607][T25759] orangefs_mount: mount request failed with -4
[ 2208.923367][T25790] batman_adv: batadv0: Adding interface: macvlan54
[ 2208.930042][T25790] batman_adv: batadv0: Interface activated: macvlan54
[ 2208.996766][T22225] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 2209.218537][T22225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2209.238855][T22225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2209.254860][T22225] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2209.269834][T22225] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2209.279984][T22225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2209.326062][T22225] usb 10-1: config 0 descriptor??
[ 2209.385090][   T30] audit: type=1326 audit(1754337740.360:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.407084][T12809] usb 9-1: new full-speed USB device number 41 using dummy_hcd
[ 2209.474004][   T30] audit: type=1326 audit(1754337740.360:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.534151][   T30] audit: type=1326 audit(1754337740.360:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.568060][   T30] audit: type=1326 audit(1754337740.360:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.577341][T12809] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 2209.601391][   T30] audit: type=1326 audit(1754337740.360:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.640568][T12809] usb 9-1: config 0 has no interface number 0
[ 2209.677138][T12809] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 2209.686944][   T30] audit: type=1326 audit(1754337740.360:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.728906][T12809] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 2209.763129][T12809] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2209.767286][   T30] audit: type=1326 audit(1754337740.360:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.808446][T22225] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 2209.836190][T12809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2209.847845][T12809] usb 9-1: Product: syz
[ 2209.857707][T12809] usb 9-1: Manufacturer: syz
[ 2209.869192][T12809] usb 9-1: SerialNumber: syz
[ 2209.884503][   T30] audit: type=1326 audit(1754337740.360:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.914929][T12809] usb 9-1: config 0 descriptor??
[ 2209.921388][T25796] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2209.929243][T25796] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2209.944550][T12809] smsc95xx v2.0.0
[ 2209.955416][   T30] audit: type=1326 audit(1754337740.360:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2209.979385][   T30] audit: type=1326 audit(1754337740.360:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25779 comm="syz.0.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x7fc00000
[ 2210.083481][T14962] usb 10-1: USB disconnect, device number 31
[ 2210.108719][T25811] fido_id[25811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 2210.142835][T25798] orangefs_mount: mount request failed with -4
[ 2210.207299][T25796] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2210.214615][T25796] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2210.518363][T12809] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2210.546855][T12809] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2212.424727][T12809] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2212.536582][    C0] vcan0: j1939_xtp_rx_dpo: no connection found
[ 2212.542955][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.549601][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.556164][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.562922][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.569516][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.576093][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.582704][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.589305][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.595849][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.602415][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.608961][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.615557][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.622115][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.628638][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.635207][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.641759][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.648358][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.654915][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.661457][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.668121][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.674710][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.681267][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.687941][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.694479][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.701166][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.707735][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.714373][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.720942][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.727533][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.734109][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.740682][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.747217][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.753804][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.760393][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.766921][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.773489][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.780023][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.786599][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.793166][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.799694][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.806299][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.812837][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.819497][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.826073][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.832607][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.839179][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.845743][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.852270][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.858826][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.865391][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.871968][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.878575][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.885173][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.891755][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.898291][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.904913][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.911485][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.918029][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.924688][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.931328][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.937882][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.944552][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.951087][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.963103][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.969741][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.976340][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.982984][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.989626][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2212.996307][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.002923][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.009554][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.016119][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.022726][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.029383][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.036116][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.042733][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.049323][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.055887][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.062502][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.069096][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.075731][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.082334][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.088910][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.095517][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.102118][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.108709][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.115296][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.121856][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.128458][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.135046][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.141604][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.148192][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.154876][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.161480][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.168096][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.174678][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.181299][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.187927][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.194505][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.201128][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.207708][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.214328][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.220929][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.227497][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.234107][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.240672][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.247285][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.253881][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.260529][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.267153][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.273729][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.280277][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.286920][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.293569][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.300343][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.306949][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.313516][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.320392][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.327356][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.333934][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.340584][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.347141][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.353813][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.360521][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.367070][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 2213.393656][T12809] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[ 2213.421520][T12809] usb 9-1: USB disconnect, device number 41
[ 2213.821819][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5198'.
[ 2214.175351][    C0] vcan0: j1939_tp_rxtimer: 0xffff888020f80c00: rx timeout, send abort
[ 2214.384998][T17550] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[ 2214.560484][T17550] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2214.572531][T17550] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 2214.605709][T17550] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2214.641574][T17550] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2214.673396][T17550] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2214.697509][T17550] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[ 2214.718185][    C0] vcan0: j1939_tp_rxtimer: 0xffff888020f80c00: abort rx timeout. Force session deactivation
[ 2214.749065][T17550] usb 1-1: string descriptor 0 read error: -22
[ 2214.755389][T17550] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2214.781469][T17550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2214.810715][T17550] usb 1-1: config 0 descriptor??
[ 2214.825264][T17550] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2214.831222][T17550] hub 1-1:0.0: probe with driver hub failed with error -5
[ 2215.993536][T17550] usb 1-1: USB disconnect, device number 18
[ 2216.393461][T25909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[ 2216.400028][T25909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 2216.426882][T25909] vhci_hcd vhci_hcd.0: Device attached
[ 2216.465874][T25910] vhci_hcd: connection closed
[ 2216.469579][ T9761] vhci_hcd: stop threads
[ 2216.505414][ T9761] vhci_hcd: release socket
[ 2216.509896][ T9761] vhci_hcd: disconnect device
[ 2221.413905][T18726] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82
[ 2222.836930][T26009] binder: 26008:26009 ioctl c0306201 200000000080 returned -14
[ 2224.231419][T24330] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2224.364793][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'.
[ 2224.412567][T24330] usb 4-1: Using ep0 maxpacket: 16
[ 2224.891830][T24330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2224.902069][T24330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2224.915162][T24330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2224.924244][T24330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2224.934925][T24330] usb 4-1: Product: syz
[ 2224.979209][T24330] usb 4-1: Manufacturer: syz
[ 2224.983944][T24330] usb 4-1: SerialNumber: syz
[ 2225.139549][   T30] audit: type=1326 audit(1754337755.055:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.210910][   T30] audit: type=1326 audit(1754337755.055:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.249087][T24330] usb 4-1: 0:2 : does not exist
[ 2225.254083][T24330] usb 4-1: unit 9 not found!
[ 2225.278176][   T30] audit: type=1326 audit(1754337755.064:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.333665][T24330] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 2225.342975][   T30] audit: type=1326 audit(1754337755.064:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.382885][T24330] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 2225.409656][   T30] audit: type=1326 audit(1754337755.064:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.433691][T24330] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4)
[ 2225.458570][T24330] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4)
[ 2225.478009][   T30] audit: type=1326 audit(1754337755.064:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.479148][T24330] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4)
[ 2225.508273][   T30] audit: type=1326 audit(1754337755.064:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.508327][   T30] audit: type=1326 audit(1754337755.064:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.508378][   T30] audit: type=1326 audit(1754337755.064:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.508417][   T30] audit: type=1326 audit(1754337755.064:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26040 comm="syz.9.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90b8eb69 code=0x7ffc0000
[ 2225.666617][T24330] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4)
[ 2225.690046][T26052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5267'.
[ 2225.734491][T24330] usb 4-1: USB disconnect, device number 6
[ 2225.801336][T17848] udevd[17848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2227.617879][T26071] : entered promiscuous mode
[ 2227.922721][T26092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5280'.
[ 2227.931951][T26092] tipc: Started in network mode
[ 2227.937010][T26092] tipc: Node identity 7, cluster identity 5
[ 2227.944018][T26092] tipc: Node number set to 7
[ 2227.953576][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2228.191904][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2229.800749][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5288'.
[ 2230.068838][T14962] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[ 2230.092646][T14962] hid-generic 0000:0000:0000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2232.082889][T26146] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.5297'.
[ 2232.114656][T26146] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.5297'.
[ 2232.151739][T26146] netlink: 584 bytes leftover after parsing attributes in process `syz.3.5297'.
[ 2232.617999][T14962] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2232.836146][T14962] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2232.846580][T14962] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2232.888641][T14962] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2232.898113][T14962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2232.906608][T14962] usb 4-1: SerialNumber: syz
[ 2233.161504][T14962] usb 4-1: 0:2 : does not exist
[ 2233.169756][T14962] usb 4-1: unit 255 not found!
[ 2233.211901][T14962] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 2233.282398][T14962] usb 4-1: USB disconnect, device number 7
[ 2234.282367][T12679] Bluetooth: hci2: command 0x0406 tx timeout
[ 2234.348066][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 2234.348085][   T30] audit: type=1326 audit(1754337763.707:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.402526][   T30] audit: type=1326 audit(1754337763.707:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.433349][   T30] audit: type=1326 audit(1754337763.707:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.473424][   T30] audit: type=1326 audit(1754337763.716:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26165 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc5abc1425 code=0x7ffc0000
[ 2234.510773][   T30] audit: type=1326 audit(1754337763.716:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.533398][   T30] audit: type=1326 audit(1754337763.716:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.579418][   T30] audit: type=1326 audit(1754337763.782:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.670238][   T30] audit: type=1326 audit(1754337763.782:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.719787][   T30] audit: type=1326 audit(1754337763.782:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2234.750865][   T30] audit: type=1326 audit(1754337763.782:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26163 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc5ab8eb69 code=0x7ffc0000
[ 2236.519828][T26180] binder: 26178:26180 ioctl c0306201 200000000380 returned -14
[ 2236.650684][T26187] batman_adv: batadv0: Adding interface: macvlan16
[ 2236.661339][T26187] batman_adv: batadv0: The MTU of interface macvlan16 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2236.707147][T26187] batman_adv: batadv0: Interface activated: macvlan16
[ 2237.835663][T18726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2238.367880][T26216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5327'.
[ 2238.784159][T26216] syz_tun (unregistering): left promiscuous mode
[ 2239.043757][T18726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2239.112959][T26230] overlayfs: failed to clone upperpath
[ 2239.385020][T18726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2239.404390][T12679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2239.423048][T12679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2239.437017][T12679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2239.456716][T12679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2239.464525][T12679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2239.720706][T26234] lo speed is unknown, defaulting to 1000
[ 2239.932462][T26251] batman_adv: batadv0: Adding interface: macvlan17
[ 2239.946247][T26251] batman_adv: batadv0: The MTU of interface macvlan17 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2239.972945][T26251] batman_adv: batadv0: Interface activated: macvlan17
[ 2240.064202][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5338'.
[ 2240.286843][T18726] bridge_slave_1: left allmulticast mode
[ 2240.297252][T18726] bridge_slave_1: left promiscuous mode
[ 2240.326049][T18726] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2240.369486][T18726] bridge_slave_0: left allmulticast mode
[ 2240.386318][T18726] bridge_slave_0: left promiscuous mode
[ 2240.398562][T18726] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2240.422765][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5341'.
[ 2240.684990][T17550] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 2240.754190][T18726] batman_adv: batadv0: Interface deactivated: macvlan2
[ 2240.773151][T18726] batman_adv: batadv0: Interface deactivated: macvlan3
[ 2240.792059][T18726] batman_adv: batadv0: Interface deactivated: macvlan4
[ 2240.806490][T18726] batman_adv: batadv0: Interface deactivated: macvlan5
[ 2240.859862][T17550] usb 10-1: Using ep0 maxpacket: 32
[ 2240.878942][T17550] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2240.902636][T17550] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2240.913928][T18726] batman_adv: batadv0: Removing interface: macvlan2
[ 2240.921252][T17550] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2240.930655][T17550] usb 10-1: Product: syz
[ 2240.958926][T17550] usb 10-1: Manufacturer: syz
[ 2240.964422][T17550] usb 10-1: SerialNumber: syz
[ 2240.974701][T18726] batman_adv: batadv0: Removing interface: macvlan3
[ 2240.984001][T17550] usb 10-1: config 0 descriptor??
[ 2240.998415][T26266] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 2241.091441][T18726] batman_adv: batadv0: Removing interface: macvlan4
[ 2241.245727][T18726] batman_adv: batadv0: Removing interface: macvlan5
[ 2241.288136][T12809] usb 10-1: USB disconnect, device number 32
[ 2241.639674][T22225] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 2241.730998][T23236] Bluetooth: hci2: command tx timeout
[ 2241.790257][T18726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2241.801994][T18726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2241.810308][T22225] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2241.820352][T22225] usb 1-1: config 0 has no interface number 0
[ 2241.829576][T22225] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2241.831541][T18726] bond0 (unregistering): Released all slaves
[ 2241.851440][T22225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.859477][T22225] usb 1-1: Product: syz
[ 2241.864636][T22225] usb 1-1: Manufacturer: syz
[ 2241.869711][T22225] usb 1-1: SerialNumber: syz
[ 2241.883801][T22225] usb 1-1: config 0 descriptor??
[ 2242.019316][T18726] : left promiscuous mode
[ 2242.138892][T18726] tipc: Left network mode
[ 2242.170479][T22225] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2242.196269][T22225] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2242.240842][T22225] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2242.257741][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 2242.257757][   T30] audit: type=1326 audit(1754337771.106:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26278 comm="syz.8.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670498eb69 code=0x7fc00000
[ 2242.270005][T22225] usb 1-1: media controller created
[ 2242.473104][T22225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2242.478885][T26234] chnl_net:caif_netlink_parms(): no params data found
[ 2242.795128][T18726] hsr_slave_0: left promiscuous mode
[ 2242.810506][T18726] hsr_slave_1: left promiscuous mode
[ 2242.828650][T18726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2242.844285][T18726] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2242.863595][T18726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2242.879261][T18726] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2242.958519][   T30] audit: type=1326 audit(1754337771.752:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26278 comm="syz.8.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f670498eb69 code=0x7fc00000
[ 2242.985563][T18726] veth1_macvtap: left promiscuous mode
[ 2242.991463][T18726] veth0_macvtap: left promiscuous mode
[ 2243.001012][T18726] veth1_vlan: left promiscuous mode
[ 2243.098684][T18726] veth0_vlan: left promiscuous mode
[ 2243.670259][T22225] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2243.945665][T23236] Bluetooth: hci2: command tx timeout
[ 2244.046689][T22225] usb 1-1: USB disconnect, device number 19
[ 2244.521800][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5357'.
[ 2245.839815][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5359'.
[ 2245.932387][T18726] team0 (unregistering): Port device team_slave_1 removed
[ 2246.038525][T18726] team0 (unregistering): Port device team_slave_0 removed
[ 2246.171904][T23236] Bluetooth: hci2: command tx timeout
[ 2247.708545][   T30] audit: type=1326 audit(1754337776.195:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26339 comm="syz.0.5363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce9338eb69 code=0x0
[ 2247.798480][T26234] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2247.805988][T26234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2247.868312][T26234] bridge_slave_0: entered allmulticast mode
[ 2247.887196][T26234] bridge_slave_0: entered promiscuous mode
[ 2247.913979][T26234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2247.942877][T26234] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2247.951237][T26234] bridge_slave_1: entered allmulticast mode
[ 2247.959433][T26234] bridge_slave_1: entered promiscuous mode
[ 2248.160177][T26234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2248.180061][T26234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2248.398474][T23236] Bluetooth: hci2: command tx timeout
[ 2248.481224][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2248.608663][T26234] team0: Port device team_slave_0 added
[ 2248.701259][T26234] team0: Port device team_slave_1 added
[ 2248.856348][T26234] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2248.886777][T26234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2248.960542][T26234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2249.023771][T26234] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2249.151430][T26234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2249.674142][T26234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2249.732316][T26374] netlink: 'syz.9.5375': attribute type 1 has an invalid length.
[ 2249.991534][T26374] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2250.082477][T26375] vlan4: entered allmulticast mode
[ 2250.089283][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5378'.
[ 2250.110804][T26375] veth1: entered allmulticast mode
[ 2250.130218][T26375] bond1: (slave vlan4): making interface the new active one
[ 2250.142241][T26375] bond1: (slave vlan4): Enslaving as an active interface with an up link
[ 2250.161275][T26234] hsr_slave_0: entered promiscuous mode
[ 2250.177999][T26234] hsr_slave_1: entered promiscuous mode
[ 2250.215451][T26384] team1: entered promiscuous mode
[ 2250.230139][T26384] team1: entered allmulticast mode
[ 2250.449766][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5381'.
[ 2252.804814][T26234] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2252.964217][T26234] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2253.199854][T26445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5399'.
[ 2253.200206][T26234] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2253.321114][T26234] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2253.688506][T26468] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[ 2253.718545][T26468] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[ 2253.730245][T26468] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2253.740426][T26468] buffer_io_error: 43 callbacks suppressed
[ 2253.740442][T26468] Buffer I/O error on dev loop7, logical block 256, async page read
[ 2253.754824][T26468] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2253.764595][T26468] Buffer I/O error on dev loop7, logical block 257, async page read
[ 2253.772930][T26234] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2253.773025][T26468] I/O error, dev loop7, sector 2064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2253.831875][T26468] Buffer I/O error on dev loop7, logical block 258, async page read
[ 2253.864466][T26468] I/O error, dev loop7, sector 2072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2253.869039][T26234] 8021q: adding VLAN 0 to HW filter on device team0
[ 2253.894319][T26468] Buffer I/O error on dev loop7, logical block 259, async page read
[ 2253.925538][T16492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2253.932814][T16492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2253.942660][T26468] I/O error, dev loop7, sector 2080 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2253.980965][T26468] Buffer I/O error on dev loop7, logical block 260, async page read
[ 2253.991200][T16492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2253.998503][T16492] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2254.035167][T26468] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2254.050844][T26468] Buffer I/O error on dev loop7, logical block 261, async page read
[ 2254.060856][T26468] I/O error, dev loop7, sector 2096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2254.071303][T26468] Buffer I/O error on dev loop7, logical block 262, async page read
[ 2254.082826][T26468] I/O error, dev loop7, sector 2104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2254.100901][T26468] Buffer I/O error on dev loop7, logical block 263, async page read
[ 2254.140053][T26468] Buffer I/O error on dev loop7, logical block 264, async page read
[ 2254.184993][T26468] Buffer I/O error on dev loop7, logical block 265, async page read
[ 2254.367953][T14962] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[ 2254.505406][T26234] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2254.541117][T14962] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2254.567930][T14962] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2254.579525][T14962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2254.597372][T14962] usb 10-1: Product: syz
[ 2254.612621][T14962] usb 10-1: Manufacturer: syz
[ 2254.633924][T14962] usb 10-1: SerialNumber: syz
[ 2254.712289][T14962] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 2254.791580][T26492] binder: 26491:26492 unknown command 0
[ 2254.799652][T26492] binder: 26491:26492 ioctl c0306201 2000000003c0 returned -22
[ 2255.183659][T14962] usb 10-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 2255.204085][T26234] veth0_vlan: entered promiscuous mode
[ 2255.230021][T14962] usb 10-1: USB disconnect, device number 33
[ 2255.246001][T26234] veth1_vlan: entered promiscuous mode
[ 2255.343850][T26234] veth0_macvtap: entered promiscuous mode
[ 2255.354961][T26234] veth1_macvtap: entered promiscuous mode
[ 2255.400297][T26234] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2255.430144][T26234] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2255.453722][T26234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.470113][T26234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.479829][T26234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.496034][T26234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.673267][T24216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2255.690957][T24216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2255.824272][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2255.847968][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2256.956836][T26524] binder: 26523:26524 ioctl c0306201 2000000003c0 returned -14
[ 2257.225978][T26532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5426'.
[ 2257.290801][T26532] erspan0: entered promiscuous mode
[ 2258.261921][T26553] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[ 2258.622632][T14962] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 2258.827660][T14962] usb 10-1: Using ep0 maxpacket: 8
[ 2258.884458][T14962] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 2258.896914][T14962] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 2259.062924][T14962] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2259.077320][T14962] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2259.232926][T14962] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2259.251751][T14962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2259.259534][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'.
[ 2259.308760][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'.
[ 2259.481033][T26574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5443'.
[ 2259.497143][T14962] usb 10-1: GET_CAPABILITIES returned 0
[ 2259.533279][T14962] usbtmc 10-1:16.0: can't read capabilities
[ 2259.719187][T14962] usb 10-1: USB disconnect, device number 34
[ 2260.012550][T22225] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 2260.215501][T22225] usb 9-1: Using ep0 maxpacket: 16
[ 2260.226186][T22225] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 2260.235928][T22225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2260.244652][T22225] usb 9-1: Product: syz
[ 2260.255481][T22225] usb 9-1: Manufacturer: syz
[ 2260.262184][T22225] usb 9-1: SerialNumber: syz
[ 2260.278722][T22225] r8152-cfgselector 9-1: Unknown version 0x0000
[ 2260.297212][T22225] r8152-cfgselector 9-1: config 0 descriptor??
[ 2261.004661][T22225] r8152-cfgselector 9-1: USB disconnect, device number 42
[ 2261.949132][T12679] Bluetooth: hci4: command 0x1003 tx timeout
[ 2261.956200][T23236] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 2262.642186][T14962] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 2262.826483][T14962] usb 10-1: Using ep0 maxpacket: 32
[ 2262.866086][T14962] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2262.915528][T14962] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2262.957550][T14962] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2263.000292][T14962] usb 10-1: Product: syz
[ 2263.007147][T14962] usb 10-1: Manufacturer: syz
[ 2263.016171][T14962] usb 10-1: SerialNumber: syz
[ 2263.026860][T14962] usb 10-1: config 0 descriptor??
[ 2263.032965][T26618] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 2263.330017][T19352] usb 10-1: USB disconnect, device number 35
[ 2264.923915][T26674] kvm: pic: non byte write
[ 2264.936827][T26674] kvm: pic: non byte write
[ 2264.961888][T26674] kvm: pic: non byte write
[ 2264.994712][T26674] kvm: pic: non byte write
[ 2265.003096][T26674] kvm: pic: non byte write
[ 2265.028756][T26674] kvm: pic: non byte write
[ 2265.047830][T26674] kvm: pic: non byte write
[ 2265.053074][T26674] kvm: pic: non byte write
[ 2265.058600][T26674] kvm: pic: non byte write
[ 2265.078229][T26674] kvm: pic: non byte write
[ 2265.101809][T26674] kvm: pic: single mode not supported
[ 2265.181947][T26680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5482'.
[ 2265.237385][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5482'.
[ 2265.781762][   T30] audit: type=1326 audit(1754337793.097:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26669 comm="syz.8.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670498eb69 code=0x7fc00000
[ 2266.662242][T24330] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 2267.196540][T24330] usb 9-1: Using ep0 maxpacket: 8
[ 2267.863658][T24330] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 2267.891432][T24330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2267.899490][T24330] usb 9-1: Product: syz
[ 2267.903746][T24330] usb 9-1: Manufacturer: syz
[ 2267.908355][T24330] usb 9-1: SerialNumber: syz
[ 2267.949016][T24330] usb 9-1: config 0 descriptor??
[ 2267.962837][T24330] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 2269.448237][   T30] audit: type=1326 audit(1754337796.530:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26748 comm="syz.0.5508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce9338eb69 code=0x0
[ 2270.620786][T24330] gspca_sonixj: reg_w1 err -71
[ 2270.625713][T24330] sonixj 9-1:0.0: probe with driver sonixj failed with error -71
[ 2270.644911][T24330] usb 9-1: USB disconnect, device number 43
[ 2271.068499][T26772] picdev_write: 104 callbacks suppressed
[ 2271.068519][T26772] kvm: pic: non byte write
[ 2271.665374][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'.
[ 2272.762476][T26813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input48
[ 2272.871760][T26816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5530'.
[ 2274.647400][T26850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2274.757352][T26850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2274.904148][T26850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2274.939407][T26861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5545'.
[ 2275.142183][T26850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2275.487755][T26850] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2275.549115][T26850] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.539384][T26850] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.608612][T26850] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2276.667904][T26875] overlayfs: failed to clone upperpath
[ 2278.067060][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5557'.
[ 2279.930026][T26918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5562'.
[ 2280.435670][T26934] block nbd9: NBD_DISCONNECT
[ 2280.463799][T26934] block nbd9: Disconnected due to user request.
[ 2280.520877][T26934] block nbd9: shutting down sockets
[ 2282.420916][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5577'.
[ 2282.464587][T26969] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5578'.
[ 2283.060748][T26993] syz_tun: entered allmulticast mode
[ 2283.225797][T26993] dvmrp1: entered allmulticast mode
[ 2283.307332][T26989] syz_tun: left allmulticast mode
[ 2284.244362][T27003] netlink: del zone limit has 4 unknown bytes
[ 2284.729363][T27018] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5594'.
[ 2284.869189][T27019] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5594'.
[ 2285.557948][T27030] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 2285.590838][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5598'.
[ 2286.715411][T27048] bond0: (slave bond_slave_0): Releasing backup interface
[ 2286.736306][T27050] netlink: 'syz.5.5606': attribute type 10 has an invalid length.
[ 2286.808891][T27048] bond0: (slave bond_slave_1): Releasing backup interface
[ 2286.961117][T27048] team0: Port device team_slave_0 removed
[ 2287.033112][T27048] team0: Port device team_slave_1 removed
[ 2287.152834][T27048] bond0: (slave wlan1): Releasing backup interface
[ 2287.186790][T27048] batman_adv: batadv0: Interface deactivated: macvlan2
[ 2287.201768][T27048] batman_adv: batadv0: Removing interface: macvlan2
[ 2287.232918][T12679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2287.284925][T12679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2287.307167][T12679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2287.373637][T12679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2287.381398][T12679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2287.416187][T27063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5608'.
[ 2287.499430][T27048] batman_adv: batadv0: Interface deactivated: macvlan3
[ 2287.560725][T27048] batman_adv: batadv0: Removing interface: macvlan3
[ 2287.865345][T27048] batman_adv: batadv0: Interface deactivated: macvlan4
[ 2287.893589][T27048] batman_adv: batadv0: Removing interface: macvlan4
[ 2287.903070][T27048] batman_adv: batadv0: Interface deactivated: macvlan5
[ 2287.971687][T27048] batman_adv: batadv0: Removing interface: macvlan5
[ 2287.992152][T27048] batman_adv: batadv0: Interface deactivated: macvlan6
[ 2287.999494][T27048] batman_adv: batadv0: Removing interface: macvlan6
[ 2288.033747][T27048] batman_adv: batadv0: Interface deactivated: macvlan7
[ 2288.040707][T27048] batman_adv: batadv0: Removing interface: macvlan7
[ 2288.070691][T27048] batman_adv: batadv0: Interface deactivated: macvlan8
[ 2288.091160][T27048] batman_adv: batadv0: Removing interface: macvlan8
[ 2288.112798][T27048] batman_adv: batadv0: Interface deactivated: macvlan9
[ 2288.129343][T27048] batman_adv: batadv0: Removing interface: macvlan9
[ 2288.182737][T27048] batman_adv: batadv0: Interface deactivated: macvlan10
[ 2288.189786][T27048] batman_adv: batadv0: Removing interface: macvlan10
[ 2288.227912][T27048] batman_adv: batadv0: Interface deactivated: macvlan11
[ 2288.246226][T27048] batman_adv: batadv0: Removing interface: macvlan11
[ 2288.269910][T27048] batman_adv: batadv0: Interface deactivated: macvlan12
[ 2288.276937][T27048] batman_adv: batadv0: Removing interface: macvlan12
[ 2288.291489][T27048] batman_adv: batadv0: Interface deactivated: macvlan13
[ 2288.310173][T27048] batman_adv: batadv0: Removing interface: macvlan13
[ 2288.327204][T27048] batman_adv: batadv0: Interface deactivated: macvlan14
[ 2288.368516][T27048] batman_adv: batadv0: Removing interface: macvlan14
[ 2288.390686][T27048] batman_adv: batadv0: Interface deactivated: macvlan16
[ 2288.402687][T27048] batman_adv: batadv0: Removing interface: macvlan16
[ 2288.414291][T27048] batman_adv: batadv0: Interface deactivated: macvlan17
[ 2288.424345][T27048] batman_adv: batadv0: Removing interface: macvlan17
[ 2288.443688][T27050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2288.482354][T27051] team0: Mode changed to "loadbalance"
[ 2288.631930][T27058] lo speed is unknown, defaulting to 1000
[ 2288.834239][ T8759] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 2289.063768][T27085] random: crng reseeded on system resumption
[ 2289.144630][ T8759] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2289.193048][ T8759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2289.255051][ T8759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2289.343028][ T8759] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2289.417925][ T8759] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2289.486360][ T8759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.516090][ T8759] usb 1-1: config 0 descriptor??
[ 2289.568997][T27058] chnl_net:caif_netlink_parms(): no params data found
[ 2289.615558][T23236] Bluetooth: hci3: command tx timeout
[ 2289.909626][T27058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2289.917929][T27058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2289.925324][T27058] bridge_slave_0: entered allmulticast mode
[ 2289.934062][T27058] bridge_slave_0: entered promiscuous mode
[ 2289.944378][T27058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2289.951862][T27058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2289.959971][T27058] bridge_slave_1: entered allmulticast mode
[ 2289.968425][T27058] bridge_slave_1: entered promiscuous mode
[ 2290.000799][ T8759] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 2290.010444][ T5911] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 2290.094460][T27058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2290.120768][T27058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2290.203148][ T5911] usb 9-1: Using ep0 maxpacket: 8
[ 2290.212594][ T5911] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 2290.230297][ T5911] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 2290.255103][T27058] team0: Port device team_slave_0 added
[ 2290.261901][ T5911] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2290.268269][T27058] team0: Port device team_slave_1 added
[ 2290.283470][ T5911] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2290.325959][ T5911] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2290.328171][T27058] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2290.345705][T27106] overlayfs: failed to clone upperpath
[ 2290.353956][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.357306][T27058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2290.390830][T27058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2290.412981][T27058] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2290.427083][T27058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2290.502789][T27058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2290.571199][T27110] netlink: 'syz.5.5624': attribute type 1 has an invalid length.
[ 2290.596226][T27058] hsr_slave_0: entered promiscuous mode
[ 2290.604187][T27058] hsr_slave_1: entered promiscuous mode
[ 2290.612409][T27058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2290.620610][T27058] Cannot create hsr debugfs directory
[ 2290.621307][ T5911] usb 9-1: GET_CAPABILITIES returned 0
[ 2290.639002][ T5911] usbtmc 9-1:16.0: can't read capabilities
[ 2290.677144][T27110] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2290.712109][T27114] vlan3: entered allmulticast mode
[ 2290.717435][T27114] veth1: entered allmulticast mode
[ 2290.730897][T27114] bond0: (slave vlan3): making interface the new active one
[ 2290.743061][T27114] bond0: (slave vlan3): Enslaving as an active interface with an up link
[ 2290.895609][ T5911] usb 9-1: USB disconnect, device number 44
[ 2290.963620][T19352] usb 1-1: USB disconnect, device number 20
[ 2291.782380][T27127] kvm: pic: non byte write
[ 2291.838406][T23236] Bluetooth: hci3: command tx timeout
[ 2293.088729][T27147] netlink: 'syz.5.5634': attribute type 2 has an invalid length.
[ 2293.601744][T27058] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2293.631355][T27058] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2293.776237][T27058] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2293.852290][T27058] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2294.136858][T23236] Bluetooth: hci3: command tx timeout
[ 2294.587617][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5640'.
[ 2294.937778][T27179] netlink: 'syz.5.5643': attribute type 21 has an invalid length.
[ 2294.946543][T27179] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5643'.
[ 2295.038271][T27058] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2295.107238][T27058] 8021q: adding VLAN 0 to HW filter on device team0
[ 2295.180919][T18720] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2295.188142][T18720] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2295.203443][T18720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2295.210678][T18720] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2295.790270][T27058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2296.287706][T23236] Bluetooth: hci3: command tx timeout
[ 2296.766956][ T8759] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 2296.879787][T27058] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2296.939620][ T8759] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2296.960301][ T8759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.983373][ T8759] usb 9-1: config 0 descriptor??
[ 2297.002567][ T8759] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2297.355425][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'.
[ 2297.624835][T27058] veth0_vlan: entered promiscuous mode
[ 2297.641011][T27058] veth1_vlan: entered promiscuous mode
[ 2297.717150][T27058] veth0_macvtap: entered promiscuous mode
[ 2297.747426][T27058] veth1_macvtap: entered promiscuous mode
[ 2297.810643][T27058] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2297.848360][T27058] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2297.891963][T27058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2297.921783][T27058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2297.941055][T27058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2297.959236][T27058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2298.414869][ T9741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2298.422718][ T9741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2298.463636][ T9737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2298.501713][ T9737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2299.216640][ T8759] gspca_stv06xx: I2C: Read error writing address: -71
[ 2299.237327][ T8759] usb 9-1: USB disconnect, device number 45
[ 2299.286993][T27236] 9pnet_fd: Insufficient options for proto=fd
[ 2300.931155][T27269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5672'.
[ 2301.256864][T12809] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 2301.564876][T12809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2301.628721][T12809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2301.650835][T12809] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2302.060569][T12809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2302.071397][T12809] usb 7-1: SerialNumber: syz
[ 2302.318792][T12809] usb 7-1: 0:2 : does not exist
[ 2302.398675][T12809] usb 7-1: USB disconnect, device number 2
[ 2302.477786][T17848] udevd[17848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2303.505247][T27305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5685'.
[ 2304.355816][T27320] syzkaller0: entered promiscuous mode
[ 2304.381096][T27320] syzkaller0: entered allmulticast mode
[ 2305.414150][T27331] netlink: 'syz.6.5693': attribute type 10 has an invalid length.
[ 2306.675193][T27354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5697'.
[ 2311.579243][T27331] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2312.300181][ T5956] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2312.526380][ T5956] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2312.571733][ T5956] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2312.781728][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2312.873627][ T5956] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2312.885558][T12679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2312.900791][T12679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2312.903084][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.937867][T12679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2312.962501][T12679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2312.976358][T12679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2312.976531][T21275] syz_tun (unregistering): left allmulticast mode
[ 2313.016932][ T5956] usb 5-1: config 0 descriptor??
[ 2313.179996][T27386] lo speed is unknown, defaulting to 1000
[ 2313.694701][ T5956] usb 5-1: string descriptor 0 read error: -22
[ 2313.923279][ T5956] uclogic 0003:256C:006D.0027: interface is invalid, ignoring
[ 2314.032978][T27386] chnl_net:caif_netlink_parms(): no params data found
[ 2314.144588][ T5956] usb 5-1: USB disconnect, device number 2
[ 2314.166911][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2314.257740][T12809] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 2314.434632][T27386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2314.450200][T12809] usb 7-1: Using ep0 maxpacket: 8
[ 2314.457657][T12809] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 2314.459885][T27386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2314.469222][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2314.494698][T27386] bridge_slave_0: entered allmulticast mode
[ 2314.516298][T27386] bridge_slave_0: entered promiscuous mode
[ 2314.538887][T27386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2314.543719][T12809] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2314.577355][T27386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2314.590246][T27386] bridge_slave_1: entered allmulticast mode
[ 2314.603456][T27386] bridge_slave_1: entered promiscuous mode
[ 2314.632817][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2314.662764][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2314.688696][T12809] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 2314.718021][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2314.762883][T12809] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2314.815515][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2314.843978][T27386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2314.869462][T27386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2314.900684][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2314.943248][T12809] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 2314.950774][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2314.971411][T12809] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2315.002566][T27412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5715'.
[ 2315.049240][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2315.107457][T27386] team0: Port device team_slave_0 added
[ 2315.156825][T12809] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2315.192099][T23236] Bluetooth: hci4: command tx timeout
[ 2315.202995][T27386] team0: Port device team_slave_1 added
[ 2315.306108][T12809] usb 7-1: string descriptor 0 read error: -22
[ 2315.312847][T12809] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 2315.331037][T12809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2315.368939][T12809] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 2315.729627][T27386] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2315.748924][T27386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2315.822258][T27386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2315.852569][T27386] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2315.861368][T27386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2315.899312][T27386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2315.990543][T27422] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2316.063941][T12809] usb 7-1: USB disconnect, device number 3
[ 2317.206842][T27386] hsr_slave_0: entered promiscuous mode
[ 2317.264823][T27386] hsr_slave_1: entered promiscuous mode
[ 2317.314747][T27386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2317.322461][T27386] Cannot create hsr debugfs directory
[ 2317.435688][T23236] Bluetooth: hci4: command tx timeout
[ 2317.691608][T27439] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2317.788362][T27437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'.
[ 2318.695769][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2318.897000][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2318.936155][ T5956] usb 5-1: config 0 has no interfaces?
[ 2318.963938][ T5956] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 2318.989642][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2319.012761][ T5956] usb 5-1: config 0 descriptor??
[ 2319.234759][T24330] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[ 2319.239965][ T5956] usb 5-1: USB disconnect, device number 3
[ 2319.272352][T24330] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2319.637629][T23236] Bluetooth: hci4: command tx timeout
[ 2320.549116][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'.
[ 2320.651714][T27386] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2320.681017][T27386] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2320.747493][T27386] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2320.808724][T27386] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2321.419943][T24330] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 2321.602434][T24330] usb 9-1: Using ep0 maxpacket: 8
[ 2321.607733][T27386] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2321.634664][T24330] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 2321.642251][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2321.793013][T24330] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2321.875416][T23236] Bluetooth: hci4: command tx timeout
[ 2321.934975][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2322.127273][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2322.335088][T24330] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 2322.441843][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 2323.563747][T24330] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2323.837172][T27386] 8021q: adding VLAN 0 to HW filter on device team0
[ 2325.065040][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2325.076213][T24330] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2325.166674][T24330] usb 9-1: unable to read config index 2 descriptor/start: -71
[ 2325.172444][T18722] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2325.174347][T24330] usb 9-1: can't read configurations, error -71
[ 2325.181380][T18722] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2325.323265][T18722] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2325.330418][T18722] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2325.439286][T27515] overlayfs: failed to clone upperpath
[ 2326.035851][T27518] syzkaller0: entered promiscuous mode
[ 2326.081932][T27518] syzkaller0: entered allmulticast mode
[ 2327.378185][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5756'.
[ 2331.298542][T24330] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 2331.474036][T24330] usb 7-1: Using ep0 maxpacket: 16
[ 2331.481626][T24330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2331.494098][T24330] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2331.507386][T24330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2331.543139][T24330] usb 7-1: Product: syz
[ 2331.554616][T24330] usb 7-1: Manufacturer: syz
[ 2331.564741][T24330] usb 7-1: SerialNumber: syz
[ 2331.578246][T24330] usb 7-1: config 0 descriptor??
[ 2331.605944][T24330] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2331.628682][T24330] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 2332.288612][T24330] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2332.828881][T24330] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2332.838575][T24330] em28xx 7-1:0.0: board has no eeprom
[ 2334.067029][T24330] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2334.075131][T24330] em28xx 7-1:0.0: dvb set to bulk mode.
[ 2334.081341][ T5911] em28xx 7-1:0.0: Binding DVB extension
[ 2334.129178][T24330] usb 7-1: USB disconnect, device number 4
[ 2334.166447][T24330] em28xx 7-1:0.0: Disconnecting em28xx
[ 2334.351650][ T5911] em28xx 7-1:0.0: Registering input extension
[ 2334.361496][T24330] em28xx 7-1:0.0: Closing input extension
[ 2334.518714][T27586] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5766'.
[ 2334.571759][T24330] em28xx 7-1:0.0: Freeing device
[ 2335.164134][T27591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5767'.
[ 2336.485654][T27584] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5766'.
[ 2336.531794][T27591] erspan0: entered promiscuous mode
[ 2337.517908][T18722] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2337.686530][T22225] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 2337.884453][T22225] usb 7-1: Using ep0 maxpacket: 8
[ 2338.110619][T22225] usb 7-1: config 0 has no interfaces?
[ 2338.138863][T22225] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 2338.175582][T18722] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2338.193995][T22225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2338.220210][T22225] usb 7-1: Product: syz
[ 2338.385048][T22225] usb 7-1: Manufacturer: syz
[ 2338.492020][T22225] usb 7-1: SerialNumber: syz
[ 2338.514001][T22225] usb 7-1: config 0 descriptor??
[ 2338.552023][T27386] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2338.661522][T18722] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2338.869061][T22225] usb 7-1: USB disconnect, device number 5
[ 2338.924532][T18722] bond0: (slave netdevsim0): Releasing backup interface
[ 2338.992386][T18722] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2339.231986][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5779'.
[ 2339.790708][T27631] tipc: Started in network mode
[ 2339.816588][T27631] tipc: Node identity 7, cluster identity 5
[ 2339.823471][T27631] tipc: Node number set to 7
[ 2340.064853][T27631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5779'.
[ 2340.254016][T27642] netlink: 'syz.5.5781': attribute type 9 has an invalid length.
[ 2340.279169][T27386] veth0_vlan: entered promiscuous mode
[ 2340.378163][T27642] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.5781'.
[ 2340.558149][T27646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer.
[ 2340.607459][T27386] veth1_vlan: entered promiscuous mode
[ 2340.679451][T27646] kvm: pic: non byte write
[ 2340.728455][T27646] kvm: pic: non byte write
[ 2340.765770][T27646] kvm: pic: non byte write
[ 2340.777913][T27646] kvm: pic: non byte write
[ 2340.797866][T27646] kvm: pic: non byte write
[ 2340.810183][T27646] kvm: pic: non byte write
[ 2340.846336][T27646] kvm: pic: non byte write
[ 2340.880698][T27646] kvm: pic: non byte write
[ 2340.889061][T27646] kvm: pic: non byte write
[ 2340.898797][T27646] kvm: pic: non byte write
[ 2340.922407][T27386] veth0_macvtap: entered promiscuous mode
[ 2340.931315][T27646] kvm: pic: single mode not supported
[ 2341.016488][T27386] veth1_macvtap: entered promiscuous mode
[ 2341.041134][T18722] vlan3: left promiscuous mode
[ 2341.046324][T18722] bridge0: port 3(vlan3) entered disabled state
[ 2341.065713][T18722] bridge_slave_1: left allmulticast mode
[ 2341.086726][T18722] bridge_slave_1: left promiscuous mode
[ 2341.103121][T18722] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2341.115298][   T30] audit: type=1326 audit(1754337863.580:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.163749][   T30] audit: type=1326 audit(1754337863.580:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.191851][   T30] audit: type=1326 audit(1754337863.589:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.228632][T18722] bridge_slave_0: left promiscuous mode
[ 2341.234631][T18722] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2341.245228][   T30] audit: type=1326 audit(1754337863.589:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.292462][   T30] audit: type=1326 audit(1754337863.589:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.367608][   T30] audit: type=1326 audit(1754337863.589:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.609500][T22225] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 2341.797292][T24330] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2341.863385][   T30] audit: type=1326 audit(1754337863.589:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.923262][   T30] audit: type=1326 audit(1754337863.729:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2341.969412][   T30] audit: type=1326 audit(1754337863.729:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27659 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c258eb69 code=0x7ffc0000
[ 2342.033016][T24330] usb 5-1: Using ep0 maxpacket: 8
[ 2342.060157][T22225] usb 9-1: Using ep0 maxpacket: 16
[ 2342.095834][T24330] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2342.103621][T24330] usb 5-1: no configurations
[ 2342.113006][T24330] usb 5-1: can't read configurations, error -22
[ 2342.127290][T22225] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2342.165068][T22225] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2342.176094][T22225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.205886][T22225] usb 9-1: Product: syz
[ 2342.210116][T22225] usb 9-1: Manufacturer: syz
[ 2342.214971][T22225] usb 9-1: SerialNumber: syz
[ 2342.224300][T22225] usb 9-1: config 0 descriptor??
[ 2342.233460][T22225] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2342.266285][T22225] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 2342.432306][T18722] batman_adv: batadv0: Interface deactivated: macvlan2
[ 2342.440135][T18722] batman_adv: batadv0: Interface deactivated: macvlan3
[ 2342.447407][T18722] batman_adv: batadv0: Interface deactivated: macvlan4
[ 2342.459040][T18722] batman_adv: batadv0: Interface deactivated: macvlan5
[ 2342.466170][T18722] batman_adv: batadv0: Interface deactivated: macvlan8
[ 2342.474097][T18722] batman_adv: batadv0: Interface deactivated: macvlan9
[ 2342.481483][T18722] batman_adv: batadv0: Interface deactivated: macvlan11
[ 2342.488655][T18722] batman_adv: batadv0: Interface deactivated: macvlan12
[ 2342.495905][T18722] batman_adv: batadv0: Interface deactivated: macvlan13
[ 2342.503429][T18722] batman_adv: batadv0: Interface deactivated: macvlan14
[ 2342.510642][T18722] batman_adv: batadv0: Interface deactivated: macvlan15
[ 2342.518132][T18722] batman_adv: batadv0: Interface deactivated: macvlan16
[ 2342.525579][T18722] batman_adv: batadv0: Interface deactivated: macvlan17
[ 2342.533411][T18722] batman_adv: batadv0: Interface deactivated: macvlan18
[ 2342.540758][T18722] batman_adv: batadv0: Interface deactivated: macvlan19
[ 2342.548749][T18722] batman_adv: batadv0: Interface deactivated: macvlan20
[ 2342.556124][T18722] batman_adv: batadv0: Interface deactivated: macvlan21
[ 2342.563414][T18722] batman_adv: batadv0: Interface deactivated: macvlan22
[ 2342.570731][T18722] batman_adv: batadv0: Interface deactivated: macvlan24
[ 2342.578401][T18722] batman_adv: batadv0: Interface deactivated: macvlan25
[ 2342.585575][T18722] batman_adv: batadv0: Interface deactivated: macvlan26
[ 2342.593407][T18722] batman_adv: batadv0: Interface deactivated: macvlan27
[ 2342.600924][T18722] batman_adv: batadv0: Interface deactivated: macvlan28
[ 2342.608880][T18722] batman_adv: batadv0: Interface deactivated: macvlan29
[ 2342.616397][T18722] batman_adv: batadv0: Interface deactivated: macvlan30
[ 2342.624141][T18722] batman_adv: batadv0: Interface deactivated: macvlan31
[ 2342.631643][T18722] batman_adv: batadv0: Interface deactivated: macvlan32
[ 2342.752967][T18722] batman_adv: batadv0: Removing interface: macvlan2
[ 2342.803022][T18722] batman_adv: batadv0: Removing interface: macvlan3
[ 2342.859160][T18722] batman_adv: batadv0: Removing interface: macvlan4
[ 2342.890700][T22225] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2342.898634][T18722] batman_adv: batadv0: Removing interface: macvlan5
[ 2342.916581][T27678] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5791'.
[ 2342.946726][T18722] batman_adv: batadv0: Removing interface: macvlan8
[ 2342.986446][T18722] batman_adv: batadv0: Removing interface: macvlan9
[ 2343.029267][T18722] batman_adv: batadv0: Removing interface: macvlan11
[ 2343.064111][T18722] batman_adv: batadv0: Removing interface: macvlan12
[ 2343.102910][T18722] batman_adv: batadv0: Removing interface: macvlan13
[ 2343.196772][T18722] batman_adv: batadv0: Removing interface: macvlan14
[ 2343.232448][T18722] batman_adv: batadv0: Removing interface: macvlan15
[ 2343.270783][T18722] batman_adv: batadv0: Removing interface: macvlan16
[ 2343.307691][T18722] batman_adv: batadv0: Removing interface: macvlan17
[ 2343.372816][T22225] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2343.386264][T18722] batman_adv: batadv0: Removing interface: macvlan18
[ 2343.394178][T22225] em28xx 9-1:0.0: board has no eeprom
[ 2343.444070][T18722] batman_adv: batadv0: Removing interface: macvlan19
[ 2343.481142][T18722] batman_adv: batadv0: Removing interface: macvlan20
[ 2343.522853][T18722] batman_adv: batadv0: Removing interface: macvlan21
[ 2343.558739][T18722] batman_adv: batadv0: Removing interface: macvlan22
[ 2343.595727][T18722] batman_adv: batadv0: Removing interface: macvlan24
[ 2343.635767][T18722] batman_adv: batadv0: Removing interface: macvlan25
[ 2343.685440][T18722] batman_adv: batadv0: Removing interface: macvlan26
[ 2343.718511][T18722] batman_adv: batadv0: Removing interface: macvlan27
[ 2343.754856][T18722] batman_adv: batadv0: Removing interface: macvlan28
[ 2343.786641][T18722] batman_adv: batadv0: Removing interface: macvlan29
[ 2343.819913][T18722] batman_adv: batadv0: Removing interface: macvlan30
[ 2343.853825][T18722] batman_adv: batadv0: Removing interface: macvlan31
[ 2343.887411][T18722] batman_adv: batadv0: Removing interface: macvlan32
[ 2344.004833][T18722] batman_adv: batadv0: Interface deactivated: macvlan6
[ 2344.013739][T18722] batman_adv: batadv0: Interface deactivated: macvlan7
[ 2344.023440][T18722] batman_adv: batadv0: Interface deactivated: macvlan10
[ 2344.031179][T18722] batman_adv: batadv0: Interface deactivated: macvlan23
[ 2344.070819][T18722] batman_adv: batadv0: Removing interface: macvlan6
[ 2344.103913][T18722] batman_adv: batadv0: Removing interface: macvlan7
[ 2344.139223][T18722] batman_adv: batadv0: Removing interface: macvlan10
[ 2344.172595][T18722] batman_adv: batadv0: Removing interface: macvlan23
[ 2344.612199][T27666] em28xx 9-1:0.0: writing to i2c device at 0x8 failed (error=-5)
[ 2344.671805][T22225] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2344.679679][T22225] em28xx 9-1:0.0: dvb set to bulk mode.
[ 2344.686687][ T9610] em28xx 9-1:0.0: Binding DVB extension
[ 2344.732155][T22225] usb 9-1: USB disconnect, device number 48
[ 2344.739954][T22225] em28xx 9-1:0.0: Disconnecting em28xx
[ 2344.811910][ T9610] em28xx 9-1:0.0: Registering input extension
[ 2344.838406][T22225] em28xx 9-1:0.0: Closing input extension
[ 2344.873286][T22225] em28xx 9-1:0.0: Freeing device
[ 2344.953034][T18722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2344.974116][T18722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2344.986886][T18722] bond0 (unregistering): (slave team0): Releasing backup interface
[ 2344.999252][T18722] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 2345.016153][T18722] bond0 (unregistering): Released all slaves
[ 2345.317202][T18722] bond1 (unregistering): (slave vlan4): Releasing active interface
[ 2345.327906][T18722] bond1 (unregistering): Released all slaves
[ 2345.614042][T18722] tipc: Left network mode
[ 2345.620749][T27386] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2345.644566][T19352] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 2345.663009][T27386] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2345.776480][T27386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.809115][T27386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.850417][T27386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.879688][T27386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.970740][T19352] usb 9-1: Using ep0 maxpacket: 16
[ 2346.004555][T19352] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2346.075157][T19352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2346.278577][T19352] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2346.514204][T19352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2346.707642][T19352] usb 9-1: Product: syz
[ 2346.712436][T19352] usb 9-1: Manufacturer: syz
[ 2346.718652][T19352] usb 9-1: SerialNumber: syz
[ 2346.726968][T19352] usb 9-1: config 0 descriptor??
[ 2346.739406][T19352] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2346.766776][T19352] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[ 2347.095862][T27638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2347.123201][T27638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2347.140081][T18722] hsr_slave_0: left promiscuous mode
[ 2347.148705][T18722] hsr_slave_1: left promiscuous mode
[ 2347.156848][T18722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2347.164929][T18722] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2347.177096][T18722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2347.186570][T18722] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2347.229063][T18722] veth1_macvtap: left promiscuous mode
[ 2347.244740][T18722] veth0_macvtap: left promiscuous mode
[ 2347.250857][T18722] veth1_vlan: left promiscuous mode
[ 2347.256316][T18722] veth0_vlan: left promiscuous mode
[ 2347.401054][T19352] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2347.411640][T19352] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[ 2348.388792][T19352] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[ 2348.506341][T19352] em28xx 9-1:0.0: couldn't setup AC97 register 2
[ 2349.097266][T19352] em28xx 9-1:0.0: couldn't setup AC97 register 4
[ 2349.104770][T19352] em28xx 9-1:0.0: couldn't setup AC97 register 6
[ 2349.114047][T19352] em28xx 9-1:0.0: couldn't setup AC97 register 54
[ 2349.121494][T19352] em28xx 9-1:0.0: couldn't setup AC97 register 56
[ 2349.157030][T19352] usb 9-1: USB disconnect, device number 49
[ 2349.237872][T22225] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[ 2349.427198][T22225] usb 5-1: config 0 has no interfaces?
[ 2349.433228][T22225] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2349.442906][T22225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.472107][T22225] usb 5-1: config 0 descriptor??
[ 2349.594916][T18722] team0 (unregistering): Port device team_slave_1 removed
[ 2349.773698][T18722] team0 (unregistering): Port device team_slave_0 removed
[ 2349.812107][T22225] usb 5-1: USB disconnect, device number 6
[ 2351.917779][T27752] random: crng reseeded on system resumption
[ 2353.443364][T24216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2353.485238][T24216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2354.921805][T27769] lo: entered allmulticast mode
[ 2357.492478][T27799] netlink: 'syz.5.5830': attribute type 21 has an invalid length.
[ 2357.624104][T27794] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 2357.652957][T27794] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 2357.788244][T27801] overlayfs: statfs failed on './file0'
[ 2358.398215][ T8759] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 2358.888545][ T8759] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2358.909735][ T8759] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2358.934609][ T8759] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2358.959892][ T8759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2358.989066][ T8759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2359.544008][T27816] netlink: 'syz.6.5836': attribute type 29 has an invalid length.
[ 2359.552692][T27816] netlink: 'syz.6.5836': attribute type 29 has an invalid length.
[ 2359.576693][ T8759] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2359.586180][ T8759] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2359.594199][ T8759] usb 5-1: Product: syz
[ 2359.598573][ T8759] usb 5-1: Manufacturer: syz
[ 2359.651282][ T8759] cdc_wdm 5-1:1.0: skipping garbage
[ 2359.672820][ T8759] cdc_wdm 5-1:1.0: skipping garbage
[ 2359.702669][ T8759] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 2359.717662][ T8759] cdc_wdm 5-1:1.0: Unknown control protocol
[ 2360.679888][ T8759] usb 5-1: USB disconnect, device number 7
[ 2364.854604][T27869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2370.573266][T27928] Invalid option length (1048372) for dns_resolver key
[ 2371.344496][ T6017] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 2371.510525][ T6017] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2371.537074][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2371.575433][ T6017] usb 7-1: Product: syz
[ 2371.590389][ T6017] usb 7-1: Manufacturer: syz
[ 2371.600971][ T6017] usb 7-1: SerialNumber: syz
[ 2371.629064][ T6017] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2371.785788][ T8759] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2372.089508][T27961] random: crng reseeded on system resumption
[ 2372.124563][T27939] bond1: entered promiscuous mode
[ 2372.130301][T27939] bond1: entered allmulticast mode
[ 2372.138383][T27939] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2372.563891][ T6017] usb 7-1: USB disconnect, device number 6
[ 2372.946804][ T8759] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 2373.144767][ T8759] ath9k_htc: Failed to initialize the device
[ 2373.160697][ T6017] usb 7-1: ath9k_htc: USB layer deinitialized
[ 2373.162760][T27970] ISOFS: Unable to identify CD-ROM format.
[ 2375.227635][T27988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5891'.
[ 2375.304429][T12679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2375.317179][T12679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2375.326785][T12679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2375.332154][T27988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5891'.
[ 2375.349233][T12679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2375.358153][T12679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2375.565931][T27995] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5890'.
[ 2376.132507][T27990] lo speed is unknown, defaulting to 1000
[ 2376.206024][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'.
[ 2376.218080][T28002] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5892'.
[ 2376.228012][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'.
[ 2376.857990][T28010] picdev_write: 104 callbacks suppressed
[ 2376.858009][T28010] kvm: pic: non byte write
[ 2377.817192][T23236] Bluetooth: hci1: command tx timeout
[ 2378.132600][T27990] chnl_net:caif_netlink_parms(): no params data found
[ 2378.993668][T27990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2379.041617][T27990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2379.048949][T27990] bridge_slave_0: entered allmulticast mode
[ 2379.096812][T27990] bridge_slave_0: entered promiscuous mode
[ 2379.131995][T27990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2379.164252][T27990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2379.173314][T27990] bridge_slave_1: entered allmulticast mode
[ 2379.191426][T27990] bridge_slave_1: entered promiscuous mode
[ 2379.280858][T27990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2379.374255][T27990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2379.647383][T28047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2379.677783][T27990] team0: Port device team_slave_0 added
[ 2379.752979][T27990] team0: Port device team_slave_1 added
[ 2379.852412][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2380.175953][T23236] Bluetooth: hci1: command tx timeout
[ 2380.424033][T27990] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2380.445664][T27990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2380.555950][T27990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2380.618273][T27990] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2380.637555][T27990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2380.741703][T27990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2381.037567][T27990] hsr_slave_0: entered promiscuous mode
[ 2381.084641][T27990] hsr_slave_1: entered promiscuous mode
[ 2381.101497][T27990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2381.131068][T27990] Cannot create hsr debugfs directory
[ 2382.410281][T23236] Bluetooth: hci1: command tx timeout
[ 2383.943339][T28091] dlm: plock device version mismatch: kernel (1.2.0), user (22.3.2368)
[ 2384.237264][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5921'.
[ 2384.634983][T23236] Bluetooth: hci1: command tx timeout
[ 2385.836205][T27990] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2385.859506][T27990] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2385.974440][T27990] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2386.010209][T27990] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2386.188340][T28120] Invalid option length (1042865) for dns_resolver key
[ 2386.635702][T24330] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[ 2386.760147][T28123] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2386.768102][T28123] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2386.908626][T27990] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2386.926670][T24330] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt
[ 2386.951147][T27990] 8021q: adding VLAN 0 to HW filter on device team0
[ 2386.958965][T24330] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt
[ 2386.983973][T24330] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2387.015193][T24216] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2387.020344][T24330] usb 5-1: config 1 interface 0 has no altsetting 0
[ 2387.022411][T24216] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2387.041036][T24330] usb 5-1: string descriptor 0 read error: -22
[ 2387.048870][T24330] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2387.101306][T24330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2387.177986][T18720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2387.185254][T18720] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2387.362861][T28107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2387.464636][T28135] hub 2-0:1.0: USB hub found
[ 2387.475895][T28135] hub 2-0:1.0: 1 port detected
[ 2387.477084][T28107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2387.678171][T24330] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 2388.383151][T19352] usb 5-1: USB disconnect, device number 8
[ 2389.128065][T27990] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2393.392312][T27990] veth0_vlan: entered promiscuous mode
[ 2393.419881][T27990] veth1_vlan: entered promiscuous mode
[ 2393.555820][T27990] veth0_macvtap: entered promiscuous mode
[ 2393.569279][T27990] veth1_macvtap: entered promiscuous mode
[ 2393.608394][T28193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5948'.
[ 2393.622858][T27990] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2393.680538][T27990] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2393.747614][T27990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2393.785614][T27990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2393.822236][T27990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2393.834117][T27990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2394.082814][ T9225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2394.366534][ T9225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2395.736497][T24216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2395.745352][T24216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2398.543684][T28241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5961'.
[ 2398.906807][T28245] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5962'.
[ 2399.480427][T28261] netlink: zone id is out of range
[ 2399.498417][T28261] netlink: zone id is out of range
[ 2399.512285][T28261] netlink: zone id is out of range
[ 2399.535492][T28261] netlink: zone id is out of range
[ 2399.548179][T28261] netlink: zone id is out of range
[ 2399.568419][T28261] netlink: zone id is out of range
[ 2399.581665][T28261] netlink: zone id is out of range
[ 2399.592992][T28261] netlink: zone id is out of range
[ 2399.614846][T28261] netlink: zone id is out of range
[ 2399.658457][T28261] netlink: zone id is out of range
[ 2400.471421][   T30] audit: type=1326 audit(1754337919.077:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28268 comm="syz.1.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9e38eb69 code=0x7fc00000
[ 2400.937984][   T30] audit: type=1326 audit(1754337919.451:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28268 comm="syz.1.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c9e38eb69 code=0x7fc00000
[ 2402.243015][T28291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5977'.
[ 2403.406380][T28303] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5980'.
[ 2403.942450][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5979'.
[ 2404.807231][T28316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2404.814531][T28316] IPv6: NLM_F_CREATE should be set when creating new route
[ 2404.906952][T28316] lo: entered allmulticast mode
[ 2405.019762][T28316] tunl0: entered allmulticast mode
[ 2405.033996][T28316] gre0: entered allmulticast mode
[ 2405.157789][T28316] gretap0: entered allmulticast mode
[ 2405.171220][T28316] erspan0: entered allmulticast mode
[ 2405.197753][T28316] ip_vti0: entered allmulticast mode
[ 2405.237291][T28316] ip6_vti0: entered allmulticast mode
[ 2405.300037][T28316] sit0: entered allmulticast mode
[ 2405.376910][T28316] ip6tnl0: entered allmulticast mode
[ 2405.433525][T28316] ip6gre0: entered allmulticast mode
[ 2405.493364][T28316] syz_tun: entered allmulticast mode
[ 2405.572766][T28316] ip6gretap0: entered allmulticast mode
[ 2405.615128][T28316] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2405.624536][T28316] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2405.699875][T28316] bridge0: entered allmulticast mode
[ 2406.111820][T28316] vcan0: entered allmulticast mode
[ 2407.421468][T28316] bond0: entered allmulticast mode
[ 2407.553417][T28316] bond_slave_0: entered allmulticast mode
[ 2407.560628][T28316] bond_slave_1: entered allmulticast mode
[ 2407.685359][T28316] team0: entered allmulticast mode
[ 2407.737313][T28316] team_slave_0: entered allmulticast mode
[ 2407.743119][T28316] team_slave_1: entered allmulticast mode
[ 2407.800722][T28316] dummy0: entered allmulticast mode
[ 2407.871701][T28316] nlmon0: entered allmulticast mode
[ 2407.974875][T28316] caif0: entered allmulticast mode
[ 2408.053343][T28316] batadv0: entered allmulticast mode
[ 2408.224937][T28316] vxcan0: entered allmulticast mode
[ 2408.279822][T28316] vxcan1: entered allmulticast mode
[ 2408.304842][T28316] veth0: entered allmulticast mode
[ 2408.336215][T28316] veth1: entered allmulticast mode
[ 2408.424876][T28316] wg0: entered allmulticast mode
[ 2408.450478][T28316] wg1: entered allmulticast mode
[ 2408.526708][T28316] wg2: entered allmulticast mode
[ 2408.534998][T28316] veth0_to_bridge: entered allmulticast mode
[ 2408.575995][T28316] veth1_to_bridge: entered allmulticast mode
[ 2408.600080][T28316] veth0_to_bond: entered allmulticast mode
[ 2408.626554][T28316] veth1_to_bond: entered allmulticast mode
[ 2408.655732][T28316] veth0_to_team: entered allmulticast mode
[ 2408.741496][T28316] veth1_to_team: entered allmulticast mode
[ 2408.866644][T28316] veth0_to_batadv: entered allmulticast mode
[ 2408.901527][T28316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2408.955269][T28316] batadv_slave_0: entered allmulticast mode
[ 2409.049124][T28316] veth1_to_batadv: entered allmulticast mode
[ 2409.219484][T28316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2409.348539][T28316] batadv_slave_1: entered allmulticast mode
[ 2409.451464][T28316] xfrm0: entered allmulticast mode
[ 2409.494153][T28316] veth0_to_hsr: entered allmulticast mode
[ 2409.530311][T28316] hsr_slave_0: entered allmulticast mode
[ 2409.581398][T28316] veth1_to_hsr: entered allmulticast mode
[ 2409.620650][T28316] hsr_slave_1: entered allmulticast mode
[ 2409.692357][T28316] hsr0: entered allmulticast mode
[ 2409.738280][T28316] veth1_virt_wifi: entered allmulticast mode
[ 2409.775358][T28316] veth0_virt_wifi: entered allmulticast mode
[ 2409.801260][T28316] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 2409.822800][T28316] veth1_vlan: entered allmulticast mode
[ 2409.845594][T28316] veth0_vlan: entered allmulticast mode
[ 2409.875976][T28316] vlan0: entered allmulticast mode
[ 2409.881340][T28316] vlan1: entered allmulticast mode
[ 2409.894865][T28316] macvlan0: entered allmulticast mode
[ 2409.918204][T28316] macvlan1: entered allmulticast mode
[ 2409.938533][T28316] ipvlan0: entered allmulticast mode
[ 2409.944044][T28316] ipvlan1: entered allmulticast mode
[ 2409.961982][T28316] veth1_macvtap: entered allmulticast mode
[ 2409.991784][T28316] veth0_macvtap: entered allmulticast mode
[ 2410.028628][T28316] macvtap0: entered allmulticast mode
[ 2410.038097][T28316] macsec0: entered allmulticast mode
[ 2410.059205][T28316] geneve0: entered allmulticast mode
[ 2410.082684][T28316] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.091420][T28316] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.108438][T28316] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.117009][T28316] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.138276][T28359] netlink: 'syz.5.5997': attribute type 1 has an invalid length.
[ 2410.149051][T28316] geneve1: entered allmulticast mode
[ 2410.191199][T28316] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[ 2410.224588][T28316] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[ 2410.246333][T28316] macvlan2: entered allmulticast mode
[ 2410.260223][T28316] netdevsim netdevsim4 eth0: entered allmulticast mode
[ 2410.278400][T28316] netdevsim netdevsim4 eth1: entered allmulticast mode
[ 2410.313696][T28316] netdevsim netdevsim4 eth2: entered allmulticast mode
[ 2410.326767][T28316] netdevsim netdevsim4 eth3: entered allmulticast mode
[ 2410.371416][T28316] batadv1: entered allmulticast mode
[ 2410.385667][T28316] batadv2: entered allmulticast mode
[ 2410.398844][T28316] bridge1: entered allmulticast mode
[ 2410.800048][T28363] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2411.117640][T28367] veth3: entered promiscuous mode
[ 2411.129190][T28367] bond3: (slave veth3): Enslaving as a backup interface with a down link
[ 2412.569790][T28391] overlayfs: failed to clone upperpath
[ 2414.904433][T28418] ------------[ cut here ]------------
[ 2414.911310][T28418] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6)
[ 2414.952665][T28394] Bluetooth: hci2: command 0x0406 tx timeout
[ 2415.014049][T28418] WARNING: CPU: 1 PID: 28418 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.027221][T28418] Modules linked in:
[ 2415.032733][T28418] CPU: 1 UID: 0 PID: 28418 Comm: syz.5.6015 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 2415.044591][T28418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2415.054802][T28418] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.062373][T28418] Code: 71 17 00 00 48 c7 c7 20 dc 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 7b 98 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d 8c d4 fa 90 0f 0b 90 e9 fe fe ff
[ 2415.085278][T28418] RSP: 0018:ffffc900053a6fd0 EFLAGS: 00010282
[ 2415.091857][T28418] RAX: 94295a178b411a00 RBX: 0000000000000014 RCX: 0000000000080000
[ 2415.099865][T28418] RDX: ffffc9001aa01000 RSI: 0000000000006a7e RDI: 0000000000006a7f
[ 2415.108377][T28418] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 2415.117042][T28418] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000
[ 2415.125184][T28418] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000
[ 2415.133261][T28418] FS:  00007f70c33986c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[ 2415.142281][T28418] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2415.149500][T28418] CR2: 00007fff8b66de68 CR3: 00000000335c2000 CR4: 00000000003526f0
[ 2415.157593][T28418] Call Trace:
[ 2415.160991][T28418]  <TASK>
[ 2415.163955][T28418]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[ 2415.170242][T28418]  mac80211_hwsim_sta_add+0xa3/0x310
[ 2415.175595][T28418]  drv_sta_state+0x8c1/0x1840
[ 2415.180509][T28418]  sta_info_insert_rcu+0xd32/0x1940
[ 2415.185750][T28418]  ? sta_info_insert_rcu+0x2ce/0x1940
[ 2415.191304][T28418]  sta_info_insert+0x16/0xc0
[ 2415.196027][T28418]  rdev_add_station+0x108/0x290
[ 2415.201037][T28418]  nl80211_new_station+0x1723/0x1b40
[ 2415.206376][T28418]  ? __pfx_nl80211_new_station+0x10/0x10
[ 2415.212149][T28418]  ? netdev_run_todo+0xe1d/0xea0
[ 2415.217647][T28418]  ? nl80211_pre_doit+0x4f1/0x930
[ 2415.223165][T28418]  genl_family_rcv_msg_doit+0x215/0x300
[ 2415.228968][T28418]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2415.235182][T28418]  ? bpf_lsm_capable+0x9/0x20
[ 2415.239962][T28418]  ? security_capable+0x7e/0x2e0
[ 2415.244950][T28418]  genl_rcv_msg+0x60e/0x790
[ 2415.249527][T28418]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2415.254819][T28418]  ? ref_tracker_free+0x63a/0x7d0
[ 2415.259891][T28418]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2415.265377][T28418]  ? __pfx_nl80211_new_station+0x10/0x10
[ 2415.271053][T28418]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2415.276764][T28418]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2415.282202][T28418]  netlink_rcv_skb+0x205/0x470
[ 2415.287489][T28418]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2415.292570][T28418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2415.298127][T28418]  ? down_read+0x1ad/0x2e0
[ 2415.302676][T28418]  genl_rcv+0x28/0x40
[ 2415.306775][T28418]  netlink_unicast+0x75c/0x8e0
[ 2415.311737][T28418]  netlink_sendmsg+0x805/0xb30
[ 2415.316666][T28418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2415.322014][T28418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2415.327834][T28418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2415.333703][T28418]  __sock_sendmsg+0x21c/0x270
[ 2415.338995][T28418]  ____sys_sendmsg+0x505/0x830
[ 2415.343821][T28418]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2415.349477][T28418]  ? import_iovec+0x74/0xa0
[ 2415.354036][T28418]  ___sys_sendmsg+0x21f/0x2a0
[ 2415.358939][T28418]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2415.364247][T28418]  ? __fget_files+0x2a/0x420
[ 2415.369106][T28418]  ? __fget_files+0x3a0/0x420
[ 2415.373838][T28418]  __x64_sys_sendmsg+0x19b/0x260
[ 2415.378938][T28418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2415.384462][T28418]  ? rcu_is_watching+0x15/0xb0
[ 2415.389460][T28418]  ? do_syscall_64+0xbe/0x3b0
[ 2415.394348][T28418]  do_syscall_64+0xfa/0x3b0
[ 2415.398897][T28418]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2415.404250][T28418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.410362][T28418]  ? clear_bhb_loop+0x60/0xb0
[ 2415.415318][T28418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.421425][T28418] RIP: 0033:0x7f70c258eb69
[ 2415.427073][T28418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2415.447954][T28418] RSP: 002b:00007f70c3398038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2415.456959][T28418] RAX: ffffffffffffffda RBX: 00007f70c27b5fa0 RCX: 00007f70c258eb69
[ 2415.465039][T28418] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009
[ 2415.473043][T28418] RBP: 00007f70c2611df1 R08: 0000000000000000 R09: 0000000000000000
[ 2415.481150][T28418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2415.489253][T28418] R13: 0000000000000000 R14: 00007f70c27b5fa0 R15: 00007ffc245c6488
[ 2415.497488][T28418]  </TASK>
[ 2415.500547][T28418] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2415.508033][T28418] CPU: 1 UID: 0 PID: 28418 Comm: syz.5.6015 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 2415.518126][T28418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2415.528223][T28418] Call Trace:
[ 2415.531793][T28418]  <TASK>
[ 2415.535539][T28418]  dump_stack_lvl+0x99/0x250
[ 2415.540174][T28418]  ? __asan_memcpy+0x40/0x70
[ 2415.544807][T28418]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2415.550040][T28418]  ? __pfx__printk+0x10/0x10
[ 2415.554777][T28418]  panic+0x2db/0x790
[ 2415.558711][T28418]  ? __pfx_panic+0x10/0x10
[ 2415.563185][T28418]  __warn+0x31b/0x4b0
[ 2415.567199][T28418]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.573291][T28418]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.579456][T28418]  report_bug+0x2be/0x4f0
[ 2415.583790][T28418]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.589866][T28418]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.596020][T28418]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[ 2415.602177][T28418]  handle_bug+0x84/0x160
[ 2415.606423][T28418]  exc_invalid_op+0x1a/0x50
[ 2415.610935][T28418]  asm_exc_invalid_op+0x1a/0x20
[ 2415.615877][T28418] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[ 2415.622558][T28418] Code: 71 17 00 00 48 c7 c7 20 dc 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 7b 98 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d 8c d4 fa 90 0f 0b 90 e9 fe fe ff
[ 2415.642186][T28418] RSP: 0018:ffffc900053a6fd0 EFLAGS: 00010282
[ 2415.648257][T28418] RAX: 94295a178b411a00 RBX: 0000000000000014 RCX: 0000000000080000
[ 2415.656321][T28418] RDX: ffffc9001aa01000 RSI: 0000000000006a7e RDI: 0000000000006a7f
[ 2415.664295][T28418] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 2415.672268][T28418] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000
[ 2415.680239][T28418] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000
[ 2415.688231][T28418]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[ 2415.694220][T28418]  mac80211_hwsim_sta_add+0xa3/0x310
[ 2415.699597][T28418]  drv_sta_state+0x8c1/0x1840
[ 2415.704291][T28418]  sta_info_insert_rcu+0xd32/0x1940
[ 2415.709493][T28418]  ? sta_info_insert_rcu+0x2ce/0x1940
[ 2415.714884][T28418]  sta_info_insert+0x16/0xc0
[ 2415.719474][T28418]  rdev_add_station+0x108/0x290
[ 2415.724338][T28418]  nl80211_new_station+0x1723/0x1b40
[ 2415.729642][T28418]  ? __pfx_nl80211_new_station+0x10/0x10
[ 2415.735272][T28418]  ? netdev_run_todo+0xe1d/0xea0
[ 2415.740246][T28418]  ? nl80211_pre_doit+0x4f1/0x930
[ 2415.745276][T28418]  genl_family_rcv_msg_doit+0x215/0x300
[ 2415.750833][T28418]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2415.756926][T28418]  ? bpf_lsm_capable+0x9/0x20
[ 2415.761629][T28418]  ? security_capable+0x7e/0x2e0
[ 2415.766839][T28418]  genl_rcv_msg+0x60e/0x790
[ 2415.771353][T28418]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2415.776384][T28418]  ? ref_tracker_free+0x63a/0x7d0
[ 2415.781411][T28418]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2415.786864][T28418]  ? __pfx_nl80211_new_station+0x10/0x10
[ 2415.792495][T28418]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2415.798047][T28418]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2415.803535][T28418]  netlink_rcv_skb+0x205/0x470
[ 2415.808311][T28418]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2415.813344][T28418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2415.818648][T28418]  ? down_read+0x1ad/0x2e0
[ 2415.823070][T28418]  genl_rcv+0x28/0x40
[ 2415.827050][T28418]  netlink_unicast+0x75c/0x8e0
[ 2415.831829][T28418]  netlink_sendmsg+0x805/0xb30
[ 2415.836609][T28418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2415.841912][T28418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2415.847369][T28418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2415.852662][T28418]  __sock_sendmsg+0x21c/0x270
[ 2415.857344][T28418]  ____sys_sendmsg+0x505/0x830
[ 2415.862121][T28418]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2415.867424][T28418]  ? import_iovec+0x74/0xa0
[ 2415.871938][T28418]  ___sys_sendmsg+0x21f/0x2a0
[ 2415.876629][T28418]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2415.881883][T28418]  ? __fget_files+0x2a/0x420
[ 2415.886489][T28418]  ? __fget_files+0x3a0/0x420
[ 2415.891180][T28418]  __x64_sys_sendmsg+0x19b/0x260
[ 2415.896143][T28418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2415.901627][T28418]  ? rcu_is_watching+0x15/0xb0
[ 2415.906410][T28418]  ? do_syscall_64+0xbe/0x3b0
[ 2415.911123][T28418]  do_syscall_64+0xfa/0x3b0
[ 2415.915642][T28418]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2415.920840][T28418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.926904][T28418]  ? clear_bhb_loop+0x60/0xb0
[ 2415.931580][T28418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.937478][T28418] RIP: 0033:0x7f70c258eb69
[ 2415.941897][T28418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2415.961508][T28418] RSP: 002b:00007f70c3398038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2415.969932][T28418] RAX: ffffffffffffffda RBX: 00007f70c27b5fa0 RCX: 00007f70c258eb69
[ 2415.977908][T28418] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009
[ 2415.985882][T28418] RBP: 00007f70c2611df1 R08: 0000000000000000 R09: 0000000000000000
[ 2415.993947][T28418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2416.001951][T28418] R13: 0000000000000000 R14: 00007f70c27b5fa0 R15: 00007ffc245c6488
[ 2416.009938][T28418]  </TASK>
[ 2416.013179][T28418] Kernel Offset: disabled
[ 2416.017496][T28418] Rebooting in 86400 seconds..