last executing test programs:

9m39.691229589s ago: executing program 1 (id=978):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc8800, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x50002, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, r0, 0x0)
r1 = userfaultfd(0x80001)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)
sched_setscheduler(r3, 0x3, &(0x7f0000000280)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@ll, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000600)=""/11, 0xb}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000700)=""/21, 0x15}], 0x8, &(0x7f00000007c0)=""/58, 0x3a}, 0x2}, {{&(0x7f0000000800)=@nl=@unspec, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/21, 0x15}, {&(0x7f00000018c0)=""/25, 0x19}, {&(0x7f00000033c0)=""/251, 0xfb}, {&(0x7f0000001a00)=""/120, 0x78}], 0x5, &(0x7f0000001b40)=""/166, 0xa6}, 0x2}, {{&(0x7f0000001c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000002400)=""/75, 0x4b}, {&(0x7f0000001980)=""/54, 0x36}], 0x3, &(0x7f0000001e80)=""/11, 0xb}, 0x1}, {{&(0x7f0000001ec0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001f40)=""/167, 0xa7}, {&(0x7f0000002000)=""/148, 0x94}, {&(0x7f00000020c0)=""/186, 0xba}, {&(0x7f0000002180)=""/141, 0x8d}, {&(0x7f0000002240)=""/54, 0x36}], 0x5, &(0x7f0000002300)=""/209, 0xd1}}, {{&(0x7f0000002700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002f80)=""/255, 0xff}, {&(0x7f0000002580)=""/27, 0x1b}, {&(0x7f00000025c0)=""/62, 0x3e}], 0x3, &(0x7f0000002640)=""/168, 0xa8}, 0xb}, {{&(0x7f0000002840)=@isdn, 0x80, &(0x7f0000002b80), 0x0, &(0x7f0000002c00)=""/3, 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/239, 0xef}, {&(0x7f0000002d40)=""/123, 0x7b}], 0x2, &(0x7f0000002e00)=""/115, 0x73}}, {{&(0x7f0000002e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f00)=""/126, 0x7e}, {&(0x7f00000034c0)=""/248, 0xf8}, {&(0x7f0000003080)=""/72, 0x48}, {&(0x7f0000003100)=""/128, 0x80}], 0x4}, 0x5}], 0x8, 0x2, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r7, 0x4, r6}, 0x10)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = dup3(0xffffffffffffffff, r9, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)

9m33.648272747s ago: executing program 1 (id=992):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x8000, 0x10000, 0x1, 0x1, 0x8}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x4000, 0x1000, 0x3, 0x800, 0x0, [{0x7, 0x98, 0xb1, '\x00', 0x3}, {0xbf, 0x7, 0xfd, '\x00', 0x7c}, {0xd, 0x8, 0x2, '\x00', 0xf8}, {0x7, 0x0, 0x3, '\x00', 0x5}, {0x7f, 0x8, 0x80, '\x00', 0x8e}, {0x57, 0x6, 0x8, '\x00', 0x7}, {0x6, 0x1, 0x9, '\x00', 0x6}, {0x9f, 0x1, 0x8, '\x00', 0x9}, {0x6, 0xba, 0xf1, '\x00', 0xff}, {0x0, 0x2, 0x2, '\x00', 0x7}, {0x6, 0x10, 0x42, '\x00', 0xf9}, {0x30, 0xad, 0x3, '\x00', 0xd5}, {0x83, 0x1, 0x80, '\x00', 0x5}, {0x3, 0x8, 0x3d, '\x00', 0x2}, {0xf, 0x7, 0xfb}, {0x9, 0x7, 0x6, '\x00', 0x1}, {0x9, 0x7f, 0x19, '\x00', 0x1}, {0x4, 0x1, 0xa7, '\x00', 0x8}, {0x0, 0x7, 0x0, '\x00', 0xff}, {0x40, 0xf, 0x9, '\x00', 0x80}, {0xff, 0x4, 0x1, '\x00', 0x80}, {0x69, 0x40}, {0x2, 0x3, 0xd, '\x00', 0x3}, {0x9, 0xb, 0x8, '\x00', 0x7}]}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x1, 0x0, 0xf1, 0x9, 0x8, 0x7, 0xfffffffffffffff7, 0x29, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x1c4292})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8f9, 0x9f94, &(0x7f00000007c0))
rt_sigpending(0x0, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_AUDOUT(r7, 0x40345632, &(0x7f0000000040)={0x100, "a36c2b4d02a5c12f28083a831474765a4b2e2bee8c7ea4640be6d3ec93a6f52e", 0x3, 0x1})
r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x20001, 0x0)
pwritev(r8, &(0x7f0000000200)=[{&(0x7f0000000280)="5dfcd28e4c72efe88d84d722aa28cf01e30f0608277ec64dfb99195f00a8a14ed733c3d5770a5210c014a36a9c402f094b18764584a7292fe62e4fcf235e0273287ef28012066105dcd975aca4388844cd1584544706eb215ad6aea539accd9131686cfb848acf18af7157978b4eb1df206646081741d15394cdc3fe4b61bda8f00c1c2f473f7cc289a9aa3098cb8917974d6411f32fd77c1225012cac884700c68989ee4ffcb040139254a79a5a1b18ef259a43d7c8525bee058929bed91534fa33021326112af021fca667ee547a09adc315d4232670a4f7ee8f2a8f5ac2319a336dc6abcde369dbaf1f3b", 0xec}], 0x1, 0x1ff, 0x8)
accept4(r2, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="11", 0x1, 0x48139, 0x0, 0x0)

9m24.858539007s ago: executing program 1 (id=1025):
syz_extract_tcp_res$synack(&(0x7f0000000000)={<r0=>0x41424344}, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r7=>0x0})
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000001f)
close_range(r8, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
syz_emit_ethernet(0x112, &(0x7f0000001240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0xdc, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x2f, 0x0, 0x0, 0x8}, @fragment={0x0, 0x0, 0xfb, 0x1, 0x0, 0x18, 0xfa20}, @dstopts={0x32}, @dstopts={0x84, 0x14, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xb9, 0x5, [0xffffffffffff1131, 0x20000007]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x9, 0x76, "707202f4a98f9cad10d5564dc4289861e34c3fd57f44b1b15e3b81d5c235c781f9ccab02d14b4222280238c7eca5ebabd089d22d85f70435095c2099c7360b9aba39331172ca7ab722d746184f92da30f7e24f1b57707b01fee7dba00d6810cda4050cb7bae54b00474da181e22631e2aee6eccade62"}]}], {{0x0, 0x0, r0, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2000}}}}}}}, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x17)
recvfrom$unix(r5, &(0x7f0000000080)=""/74, 0x4a, 0x102, &(0x7f0000000180)=@file={0x1, '.\x00'}, 0x6e)

9m20.762261657s ago: executing program 1 (id=1041):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x9, 0x80, 0x0, 0x40000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
getrlimit(0x7, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
keyctl$read(0x2, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
open$dir(0x0, 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x23)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={<r5=>0x0, 0x2, 0x4, [0x6, 0x3, 0x81, 0x0]}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x9b3c, @remote, 0x4}}, 0x81, 0x8, 0xa04, 0x5, 0x5}, &(0x7f0000000240)=0x98)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
fgetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f000001b000)=""/4096, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
syz_open_dev$tty1(0xc, 0x4, 0x1)

9m17.570530785s ago: executing program 1 (id=1050):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x57d0, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04060c207f"], 0x7)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871a3", 0x3}], 0x1}, 0x240480c3)
r4 = dup(r3)
write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRES32=r0], 0x5c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
r5 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f37, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_open_dev$video4linux(&(0x7f0000000440), 0xf, 0xa0040)

9m15.152105893s ago: executing program 1 (id=1062):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
close_range(r2, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x10, 0x1, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b80)=""/41, 0x29}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000e80)=""/221, 0xdd}, {&(0x7f0000002200)=""/224, 0xe0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000001f80)=""/196, 0xc4}, {&(0x7f0000000b00)=""/65, 0x41}, {&(0x7f00000020c0)=""/30, 0x1e}], &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0x800000000000b239, 0x4a, 0xfffffffffffffffd]}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000040), 0x3, r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9})
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r6=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)
r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r6, 0x2}, 0x8)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @pix={0x80, 0x8, 0x49323159, 0x5, 0x0, 0x5, 0x4, 0x7, 0x1, 0x2, 0x2, 0x6}}, 0x9})
socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff12)

8m58.948385417s ago: executing program 32 (id=1062):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
close_range(r2, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x10, 0x1, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b80)=""/41, 0x29}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000e80)=""/221, 0xdd}, {&(0x7f0000002200)=""/224, 0xe0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000001f80)=""/196, 0xc4}, {&(0x7f0000000b00)=""/65, 0x41}, {&(0x7f00000020c0)=""/30, 0x1e}], &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0x800000000000b239, 0x4a, 0xfffffffffffffffd]}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000040), 0x3, r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9})
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r6=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)
r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r6, 0x2}, 0x8)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @pix={0x80, 0x8, 0x49323159, 0x5, 0x0, 0x5, 0x4, 0x7, 0x1, 0x2, 0x2, 0x6}}, 0x9})
socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff12)

6m7.703904284s ago: executing program 2 (id=1647):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r0, 0x0, 0xffffffffffffffb1)
r1 = syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a70200000043"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x6, 0x4, 0x8, 0x8, 0x8}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r2}, 0x38)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x800, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000300)=0xe8)
mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xabb}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fsname={'fsname', 0x3d, '*'}}, {@dont_appraise}, {@euid_lt={'euid<', r5}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x8000)
ioctl$NBD_CLEAR_QUE(r6, 0xab05)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
landlock_restrict_self(0xffffffffffffffff, 0xe837cd994334571b)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

6m4.51181841s ago: executing program 2 (id=1654):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/user\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5, 0xf8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000240)=0x2, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_setup(0x8, &(0x7f0000002740)=<r6=>0x0)
io_pgetevents(r6, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="8100c827e880"})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r3, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000)=0x8008, 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff004)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m2.208366153s ago: executing program 2 (id=1664):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$snapshot(r0, &(0x7f00000000c0)="9b960fbc666a28de05b9ab36877865998d74bd1bd4fc8bfc6f5cbbf3c928873667572c42e8d8b39ab155e36692b4ce45e520eba00f3edfed04543db988f30e99042492b4d8", 0x45)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "394653f5"}]}}, 0x0}, 0x0)

5m59.902458881s ago: executing program 2 (id=1667):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1942, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000ffffffffffffffe30000000000000000000000000000000200000000000000400000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000300000000004a96d8"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
writev(r2, &(0x7f0000000940)=[{&(0x7f0000000f80)="56da93", 0x3}], 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000203060000000000000000aaa6", 0x16}], 0x1, 0x7, 0x1)

5m59.834722991s ago: executing program 2 (id=1668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d7930000000000000000000003f7a1b13c43bfda75668693a3e6915a07863834ce0db8ffdf878a671b37c5284cc39c384a1fcb6e5031ac0a435ef03dbc01f90b876debbee45a106c6cb674b50d1ad1c78322d0d5e28707519cada97cde2f6606b3a452dd94a134cc6ec9e075274f32af3202a3e1d04c3"], 0x2c}}, 0x0)

5m59.443348842s ago: executing program 2 (id=1671):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
tkill(r0, 0x8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}) (async)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x9, 0x101142) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a40)={'\x00', 0xfffb, 0x7, 0xfffffff8, 0x7, 0x3d, <r8=>r0}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002ac0)={0x3, 0x5c7b, {r0}, {<r9=>0xffffffffffffffff}, 0xffffffffffffffff, 0x5000000000000000}) (async)
stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002bc0)=<r11=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002c00)=<r12=>0x0)
getgroups(0x4, &(0x7f0000002c40)=[0x0, <r13=>0x0, 0xee01, 0xee01])
sendmsg$netlink(r1, &(0x7f0000002d00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000000900)=[{&(0x7f00000000c0)={0x24, 0x33, 0x400, 0x9, 0x25dfdbfc, "", [@typed={0xc, 0x102, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r2}]}, 0x24}, {&(0x7f0000000100)={0x18, 0x25, 0x300, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@empty}]}, 0x18}, {&(0x7f00000001c0)={0x724, 0x23, 0x0, 0x70bd2d, 0x25dfdbff, "", [@generic="ff024f5fa92039cd97f614c8924dc66243ecab5611489f837536e81fc5c404f754aeaeb58c69a5b7814e9c2674219f27db73f6ef92149575b7549c90b885e32ac71d7d94cd3b6a9d8a353e5de837976ff9a006dc97", @nested={0x13d, 0x9b, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="e86f47f7933a3fe46584440f05765410fa8e87ffff0870bd3da984330a7f7ed2fd4381c8522daf826145bf7fd4703f8ec17ee93a7c", @typed={0xe4, 0xd8, 0x0, 0x0, @binary="625b94e493f0f040c47d710ff55296e38cd6d0f07eb72dea4917fba4eba509e46d5c62bef2ed105ba1a1698a24791204579f13e2d8b0999adafa68d53fb976da4150a28eb19b278aa6d40c51eb5007622d09e552dc5fad7766a0e464d244a4f8c8249fcea4b98516fca5f561547fc4a420f5ca67e05e579f72a1e676d5330f27c3e7648e8802fd3209d2e596775013ada632026ed78e84cd310618779c8cdc33f5399e2648281da764d8be2060bf073645610740eeb7efaa573d15830bfe71b507f4f2c0874435d6999b11a6364b7e2b6f856fd86ef5586cadccca35769cb783"}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x7, 0x0, 0x0, @uid}, @nested={0x4, 0x132}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r0}]}, @nested={0x1b0, 0x42, 0x0, 0x1, [@generic="1cb9c58588fad47eaf60c3b1ff8514579483fd888207488ad1e5bbb71906318fc90bf99b17bab6464d3132c680d5f6403ed0f28ae3f54d9e41de128334ca96ccf94874c69125dc5774fc05d672ca3d41efb2b50f1b1401a7aceeeff9db8e66cc5671b0c6d9feedbc0e6e779edb3cdd15726bbe3e3ce53ab29e20644c6a5e488d018ab624a00f701c410dd8baac26427099a941", @nested={0x4, 0xb7}, @generic="2532b0f5fc93194c51b25eb70daf123a5b49a080461eeec6a3abfdeab14011c2a335ab02e414951c061df92771ec454a3847e7e963c99352509e1d2ccd8c587ecffe627b501bc87ef99e5bfea574261e565be4bc0d443292f5e37d3e6e4938bb916404503a2392c1eac62b849d1778423324e2719c6c9161e1a93b2874edc84684b99ac637529aa5dd018047c3278561d2b2eb38d73cabed3258fe30bd02e68596b629665725888c6aaaafd1f90d616b1f452db4b57bb1b41ae0cfa04ddc9ac1e90ef9973ff65c08984c1f32d15d3d409fd221e0b31b96a4607de417254355398a2f13f2a028f18b54", @typed={0x4, 0xbc}, @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x3f}]}, @nested={0x3bb, 0x61, 0x0, 0x1, [@generic="8c2126f9054b9a33d818089e3f721321d4d182e8382767a863a5f651f7e546a6f9374e383cfe4adb64f9a314a29f346d6ab7458faa28e79f3cbdf72af5402811423ce3b75154f00f2608b64c30901d694aeaaf7361c7bcc2ede9a1df60baee6502a8f9bfda49582fce0fde93152086647456810836e9", @typed={0x8, 0x82, 0x0, 0x0, @fd=r4}, @generic="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", @nested={0x4, 0x13a}, @typed={0x6, 0x116, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r5}, @generic="a691ca883d188b735e37096cbc09d42a0300f78eb250a0de5f3c80017622091180d93a559ac13ca3dbf63e3600b1b60b1eb0d45560b217580678531e8ab30dcb4e5d5f37313debd40c051d5ff07379e7181be076ff5de24710093441dbdfca77aa59da5acf5eebc8283cd7c7e49f8fced3f825b110932b624d17422bd1149e19c88519db7512e12c05e5fb54223a0aea7704c79bad20838e8469e010a8", @generic="ed90a748f631650f1dc68312191ceb316322841db49c1bb2a20d05443fb249b6c2481c79ec23fa08fe3a87ed560b808914bc71426958ab0c89e1531b8ff7f86293cbb3b512a669600e7c70b3db114be677059964d82788cf4243df1481e4977c74d78040ce218d883fbc1464727d634ec67575add4f70b40c3b63497031d62edf8ed18eb169f54f485932d0de61570e0b48912dd2d66cf6219b0eac68e4d0d20b398e375bf8505af45b92b73d0870cc1fc15b069c90d5c2b81702ada14e8a61ca1", @nested={0x4, 0xd8}, @generic="696c828099b915d3e975880dd531de15a881375058bbd4fb944e3a7bb6bd7015882675969551f37c36aedb16df103a2a14e6d4a9b0b3fbb6bed00178241f45d04debcabe195391b18278b5fc4d436cac335f8f5fe9dc2a30cd2005d70f270dbfd8e46cfcf3fd0f50850281b4605e58aa1ef8921fc40c4e5a1699e97b120621a3997d72bf1f38922ab045f7123d1f3357bbeaa326d0f2c1e4e35cf0cdef9a08439bbc9b9a61d0e638d3f6d4b8543c08b78bdd49ba783648adb50e261bc67d2e4c37039289c52e"]}, @nested={0x8, 0x51, 0x0, 0x1, [@nested={0x4, 0x10d}]}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r0}]}, 0x724}], 0x3, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {r0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x60, 0x80}, 0xc0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002d40)={{0x1, 0x1, 0x18, <r14=>r2}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x88, 0x1403, 0x100, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000002f00)={{r3}, "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"})
ioctl$KVM_GET_NR_MMU_PAGES(r14, 0xae45, 0x100)
getsockname$packet(r14, &(0x7f0000003f40)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003f80)=0x14)
getsockopt$inet_mreqn(r14, 0x0, 0x24, &(0x7f0000003fc0)={@loopback, @local, <r16=>0x0}, &(0x7f0000004000)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f00000040c0)={'syztnl2\x00', &(0x7f0000004040)={'syztnl1\x00', <r17=>0x0, 0x4, 0x8, 0x2, 0xd, 0x28, @local, @dev={0xfe, 0x80, '\x00', 0x3}, 0x7800, 0x700, 0x7, 0x939}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000004180)={'erspan0\x00', &(0x7f0000004100)={'syztnl0\x00', <r18=>0x0, 0x1, 0x40, 0x1, 0x3a, {{0xe, 0x4, 0x1, 0x31, 0x38, 0x67, 0x0, 0xff, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x542}, {@multicast2, 0x10}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000004280)={'gretap0\x00', &(0x7f00000041c0)={'gretap0\x00', <r19=>0x0, 0x10, 0x10, 0x6, 0x3, {{0x1b, 0x4, 0x1, 0x7, 0x6c, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0xd, "48b523e3523b58dcbe6f5e"}, @cipso={0x86, 0x1d, 0x0, [{0x2, 0xc, "04fef89c5b8c548717cc"}, {0x1, 0xb, "d97371a0cafbcdcafc"}]}, @timestamp={0x44, 0x28, 0xa7, 0x0, 0x0, [0x2, 0x2, 0x20, 0x200, 0x4d, 0x80, 0x4, 0x0, 0x7]}]}}}}}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004580)={r14, 0xe0, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000042c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r20=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000004300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004340)=[0x0], 0x0, 0x4e, &(0x7f0000004380)=[{}], 0x8, 0x10, &(0x7f00000043c0), &(0x7f0000004400), 0x8, 0x87, 0x8, 0x8, &(0x7f0000004440)}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000004640)={'syztnl1\x00', &(0x7f00000045c0)={'syztnl0\x00', <r21=>0x0, 0x2f, 0xba, 0x7, 0x3d9, 0x48, @remote, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x8, 0xaa, 0x4}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000004800)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000047c0)={&(0x7f0000004680)={0x120, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x840}, 0x8014) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(r14, 0xc0184800, &(0x7f0000004840)={0x9b, r14, 0x2})
getsockopt$inet_tcp_int(r14, 0x6, 0x32, &(0x7f0000004880), &(0x7f00000048c0)=0x4)

5m59.149691973s ago: executing program 33 (id=1671):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
tkill(r0, 0x8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}) (async)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x9, 0x101142) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a40)={'\x00', 0xfffb, 0x7, 0xfffffff8, 0x7, 0x3d, <r8=>r0}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002ac0)={0x3, 0x5c7b, {r0}, {<r9=>0xffffffffffffffff}, 0xffffffffffffffff, 0x5000000000000000}) (async)
stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002bc0)=<r11=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002c00)=<r12=>0x0)
getgroups(0x4, &(0x7f0000002c40)=[0x0, <r13=>0x0, 0xee01, 0xee01])
sendmsg$netlink(r1, &(0x7f0000002d00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000000900)=[{&(0x7f00000000c0)={0x24, 0x33, 0x400, 0x9, 0x25dfdbfc, "", [@typed={0xc, 0x102, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r2}]}, 0x24}, {&(0x7f0000000100)={0x18, 0x25, 0x300, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@empty}]}, 0x18}, {&(0x7f00000001c0)={0x724, 0x23, 0x0, 0x70bd2d, 0x25dfdbff, "", [@generic="ff024f5fa92039cd97f614c8924dc66243ecab5611489f837536e81fc5c404f754aeaeb58c69a5b7814e9c2674219f27db73f6ef92149575b7549c90b885e32ac71d7d94cd3b6a9d8a353e5de837976ff9a006dc97", @nested={0x13d, 0x9b, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="e86f47f7933a3fe46584440f05765410fa8e87ffff0870bd3da984330a7f7ed2fd4381c8522daf826145bf7fd4703f8ec17ee93a7c", @typed={0xe4, 0xd8, 0x0, 0x0, @binary="625b94e493f0f040c47d710ff55296e38cd6d0f07eb72dea4917fba4eba509e46d5c62bef2ed105ba1a1698a24791204579f13e2d8b0999adafa68d53fb976da4150a28eb19b278aa6d40c51eb5007622d09e552dc5fad7766a0e464d244a4f8c8249fcea4b98516fca5f561547fc4a420f5ca67e05e579f72a1e676d5330f27c3e7648e8802fd3209d2e596775013ada632026ed78e84cd310618779c8cdc33f5399e2648281da764d8be2060bf073645610740eeb7efaa573d15830bfe71b507f4f2c0874435d6999b11a6364b7e2b6f856fd86ef5586cadccca35769cb783"}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x7, 0x0, 0x0, @uid}, @nested={0x4, 0x132}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r0}]}, @nested={0x1b0, 0x42, 0x0, 0x1, [@generic="1cb9c58588fad47eaf60c3b1ff8514579483fd888207488ad1e5bbb71906318fc90bf99b17bab6464d3132c680d5f6403ed0f28ae3f54d9e41de128334ca96ccf94874c69125dc5774fc05d672ca3d41efb2b50f1b1401a7aceeeff9db8e66cc5671b0c6d9feedbc0e6e779edb3cdd15726bbe3e3ce53ab29e20644c6a5e488d018ab624a00f701c410dd8baac26427099a941", @nested={0x4, 0xb7}, @generic="2532b0f5fc93194c51b25eb70daf123a5b49a080461eeec6a3abfdeab14011c2a335ab02e414951c061df92771ec454a3847e7e963c99352509e1d2ccd8c587ecffe627b501bc87ef99e5bfea574261e565be4bc0d443292f5e37d3e6e4938bb916404503a2392c1eac62b849d1778423324e2719c6c9161e1a93b2874edc84684b99ac637529aa5dd018047c3278561d2b2eb38d73cabed3258fe30bd02e68596b629665725888c6aaaafd1f90d616b1f452db4b57bb1b41ae0cfa04ddc9ac1e90ef9973ff65c08984c1f32d15d3d409fd221e0b31b96a4607de417254355398a2f13f2a028f18b54", @typed={0x4, 0xbc}, @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x3f}]}, @nested={0x3bb, 0x61, 0x0, 0x1, [@generic="8c2126f9054b9a33d818089e3f721321d4d182e8382767a863a5f651f7e546a6f9374e383cfe4adb64f9a314a29f346d6ab7458faa28e79f3cbdf72af5402811423ce3b75154f00f2608b64c30901d694aeaaf7361c7bcc2ede9a1df60baee6502a8f9bfda49582fce0fde93152086647456810836e9", @typed={0x8, 0x82, 0x0, 0x0, @fd=r4}, @generic="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", @nested={0x4, 0x13a}, @typed={0x6, 0x116, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r5}, @generic="a691ca883d188b735e37096cbc09d42a0300f78eb250a0de5f3c80017622091180d93a559ac13ca3dbf63e3600b1b60b1eb0d45560b217580678531e8ab30dcb4e5d5f37313debd40c051d5ff07379e7181be076ff5de24710093441dbdfca77aa59da5acf5eebc8283cd7c7e49f8fced3f825b110932b624d17422bd1149e19c88519db7512e12c05e5fb54223a0aea7704c79bad20838e8469e010a8", @generic="ed90a748f631650f1dc68312191ceb316322841db49c1bb2a20d05443fb249b6c2481c79ec23fa08fe3a87ed560b808914bc71426958ab0c89e1531b8ff7f86293cbb3b512a669600e7c70b3db114be677059964d82788cf4243df1481e4977c74d78040ce218d883fbc1464727d634ec67575add4f70b40c3b63497031d62edf8ed18eb169f54f485932d0de61570e0b48912dd2d66cf6219b0eac68e4d0d20b398e375bf8505af45b92b73d0870cc1fc15b069c90d5c2b81702ada14e8a61ca1", @nested={0x4, 0xd8}, @generic="696c828099b915d3e975880dd531de15a881375058bbd4fb944e3a7bb6bd7015882675969551f37c36aedb16df103a2a14e6d4a9b0b3fbb6bed00178241f45d04debcabe195391b18278b5fc4d436cac335f8f5fe9dc2a30cd2005d70f270dbfd8e46cfcf3fd0f50850281b4605e58aa1ef8921fc40c4e5a1699e97b120621a3997d72bf1f38922ab045f7123d1f3357bbeaa326d0f2c1e4e35cf0cdef9a08439bbc9b9a61d0e638d3f6d4b8543c08b78bdd49ba783648adb50e261bc67d2e4c37039289c52e"]}, @nested={0x8, 0x51, 0x0, 0x1, [@nested={0x4, 0x10d}]}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r0}]}, 0x724}], 0x3, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {r0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x60, 0x80}, 0xc0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002d40)={{0x1, 0x1, 0x18, <r14=>r2}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x88, 0x1403, 0x100, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000002f00)={{r3}, "9e5e5a7997114ebb222fdb085f70eb2d4d95e28cae9de26f9c1579df0175ee76a936e41395944b76953387bb9719eb6161ed354d10e48b9e1c7519b880be1c9dd90278061a75c8c9a90034ff6c3718f982d1e5b3b74ec72a60ef818ef2c6af25b04d751604cf719a03a3cde72efa1f609170ba092a84d393b2b08f70a7de62b39a1418718c15fb00165b2e35b2c018249ffde25f7309c9357cfe5b3a82a19f5de4b33c3d4416dab1bec15bea1b621c2a1a24d5d399e7b8bac6d79ece1d4bca13a7a3b3a6bd2d5ec4def127a548fccbc40556ce3717954532103ab0bfb3218ee70ad85d30ab770432cf5437e3122ea397f78a0afa8582ed48c2d339590d3cccc05c09b9b9bb6b477cef76ee67cfd921728c37533b282eeeb9fbd59f7103d057a768e5b1e6ba6dc15720ef1f6306418de2585da1ed46e43dabaabd4da6bcde60f07c303aefb1704e2df52d5040dad4bc14c9f4a48c4bd1668986d8f8cfaf3828e772a2fc02fd6dd409baca67e9a63791cf6142abb809be91a88e6f006b1cd2ebf70eb80b080077adcc77bd5537ad337d3917ba5ae48aa3c3457644c6ed288cfe18bc68ea720d4ad70634923b259c64e6409f9b28acc403ee4cb185ea7efa54e6ce0c40e15db32f8a18c435fdc8cf728d340c219da8ddb2f560dc79b96caa667a250de85818e1138019dd05c63f20f1d3ea685c794d396a75e1aa5d80cc11a34083d10f8957506f628c13991ccccfe4dcb8e8257e2ca048018bed8699cf6b15b02c0ac1bb5fbb2cba50b66a95f61b6f21f2ecb65afa51b78efe7cbb09b89b3ba15a6f1d86cb7b80e22bc30b58384ecae8a20b476950b772fd3a3f7618404fa3455b73236d3c9e9a8c88b962e1583f9b65767d542faaa0dfdd711f34a9695e94ad3b054655404c553427dc162b978507344ce544051bec8c16ca419076d5f6cad1573c8fc0745a536c6d45aa443225418580e9a11ca2c0d57538f5b6212eec4b8a978e14b22c7b359ef1ef7e6d197819b5783fc7490be186c23dc954a6a4a73125284924932abdd8b30bbc0aaf6c2dc38a1a23ef47cc21ab48fd17384048e0c04fb89da499be63131c34a306479c2e2ecd5ba7a6e3233e08292963b2673a179af7845b9bcb3c59ff0cdf7c152be1cb36d9b583d9f9d2f5015ecb8b66294918aa562bca49e6057156e95e53b49f1ce73ed298e57a180c4d69c8a4fffd6465741a8a44acc50124bbfeefecb12ddde7197116d292c75e966a8c53885e59d3e4289642ce5b2e3be9176137fd613f97afaaec770599a6339c248a01dfe42abce776e5f8b07d1f33b68c3bb90cf891d150aab2de9a4be01b0c46c0ddf3463d7af46a4e29f723e6a31a1095df30025d9fc7657e1bebd939cdbceb0cde2c61f0ea89ec6310c4304ad049838f5239fa1f8c53d8256b3ce2a3091dcd811e295083f8d8f82bdb47820d625516f9b17c8f535eddadc601ee53c6515ec25260cdba8d8441f114fcda9b89039652c921ee5f607b37aca5ce03a5f844a8ee4f5fe8593681d547455be69ddbf1dbe6751a3bd051a64a3beb94bf874497206fe63894bbd480b0bf27c2a3a76ed2687cb0f5dc3e1cc9334951d273692bf1a16dbd8adc724afd48fdca9d20944e271ac225dd09f2f44fef544a892f85b5288da1a660b3b96af832ea4b46e7231f72af1d07b5c4eb3c620bb25e8804f8e770eb298976f88210d221f4f00d52bdb91cb9a6d34996552796b98fd0c4a64c529044faed06fe64abc7fe5c12ba20312f7a1a122033bb428c87709120b0f5083566bcd59a5993ca70f5821da97ca8cba21864703aef63d494b51e197eabc5e89fb0222b8c32a732b0814b29375e8f0306f3cc946143504c27a7fc5aa68c3ba1e495e41c1406ea4305052269d2cd172838230181a15a1cf308a2ae99d25f7ed6e5a713862e723274119a860a8aa332642103fa348b1bdb9b0270aede8c836a498a911071a6da598ea656e1cd41d52e0e35674aa07a9c06f29d2cc87fd67f20f98d201c1b20f068701b3d689aaa7553796bba9ae38b04b4675886df71bde42b613b2cbf18e5acb4c24fa2d7253da334c9fa0c2ce9187528265ff8ec920ac29f1a1c4f8745f95ba7ef290bbf50d29f20d5883ca8a631eb673efc5b71ead41853c765cc9ea4130018e5ff74fd558ad02d153cecf2f88fa651259bc19f34fc43c888e7af5e254d2d35a14e89206c4275cfac8cb9c0b80abc3505d278e7c9442337c9d0c3ded9738ea54037b194606b6bbd86712e19736f4e0109cf58de47d50fb0bb3256f0839fcbaa9fece09bd97519e28c383bbe0d38ab0285d2ee474d0b79f7f8b580c54c9458d569204461c3db671ef34d20e4d9939539b90ade03869c447a2752dd569a0062f53d7373730edbbd1dfbeb690691365cc1ba166578542f69fd98108c2a801c1fc089e709450733618b9a34a4a8700dc2ead08b82ec28f8b00d5fba9b79e973f5e77323a8f5b62f2a56ed413712ac23034e9b3f185f09d90124d6fd15de4e06e4a4d2362f46bd31bb3b733914e9a55ad8eb55470b275cdd8ec9148627167b6e872862f8bcb58f414f0182a5a055326ee4835c370819f131e9c1223cd0b3adbe0921e0ccd0d5fa8465556743ebd5ff0d2ed132c8a742b5106073f3ec2e04b3cd021872fe517687c47ddb53d396c72b72029f3f550afa19853a02823d5b664b40e0ddb2071d187fab9b7dfeeb82152790e5a5fc111c9f085016080389313df9e07ed83ebf2c48d654b46db34a545ef7f41d56fedf210c456e5a9303a3fff0350368d0d2549d7003f861cd1f9b0ac1b59cf7bbc3f996e8d28a9eab162c44164f4a675191276c4f2dfd26bf42c7053cf3867ae7859feb27cb364f23e40e5d53339d8b7369d9a7b30a7f2d7a909198f96953bb4cfc5916a003a15d1d779ff92ccf520f9a3af81e3064ff1258c320b2112ff197ad885ae44fc052e1691ed22ce64e8e16d3ac68f759eb9052be495fe576e49926471e3c3ebba912d82cba33e18fe9ff2613d1a6c5fccc853d76afdfde2793591f28b4339e8673cb8d05c20232bb1558a7a3edc875773d8f54e78e3cfd13700775e6af2befe75ca3e3654ec2ca5b88b53525dcada57d0a730d9c7a32a2a5ac47e187a7979d741de5046f9f0a3bd8fdc39fbd42df7bfb815f51e6cc3e620c28e006eea2c19ceb7c7df05a83a06157560e7161db075a59c339a991f837101ea9e484215b702bf3ec72784e121f1d9f3d567cb75bf912fa0388544b0f4d15ef898f5e4689cf52fce2747cc58a1cbb181589144434069f1ed4642df7511c48693a913de025bde44729150c72135f9a9c8524d90ad030509a7eeaa8ceaa55e4d90952dcb213c5c80033ecb428bc5f3d347dc93df97e4d83fcec654e4b65ce1c87e9c1ea7b5bdcce22da5b4f52fcd6f65a951b82812071e92ec8c2cd0fab6357652af9db04dbf6e266a8275177235ff0abd27a2956b28000e96cc1f84ba83998c969b78668ed83f05a8d6be60089a9365573af605486f90e25399bc1574336d1664a0062de124dd99580bc62d32427a5ad4c09beb8f6c0d91c9717faee4605b588e83bb36e72f8a663a9da42ad1b2a7409fe27bcc2e088b80148a0e02c98667e15945bad7a977d0558685d1c57ef0e3d4af3f15f319b273f56f443429c6195dd70b50d44d73ecaee71a872104324963297b4a1e2ce07920d114450d44e3a189c8e22ff0c5ea9bc581cd0ce0e8ddd08a8177695c5468bbb78d37f606744b95458a78839163a5294ee869d4a82c6eb5efbebd9f85c25737a0c3221edb31273afe7254b2dc80adc05c0aa80a92cece1d74aa6f340cd886cd24fcdf6fae59bd609d5d444f9c14792f13baafb44edb27e8ac881c88fca570eb380bde0cae196e068d0caaf92d81488258081f0c6a0835976f2e6bff2a450a788c41724d5a3f010213b15b5c2ef6ee4e5a836bf7a7c48b110613e3e1d60901c1775b0d6b777bddfbdcf2151e0af645a7dfcd6e74c0f8036d33e7bd83318f059127887b8b944e896521a662bf9df02f33812bbd3e49ec53cc3ed337f266e20de9924b1ab5204087b34b4db7c39c23d3e3385f984bd9ee66e57b8d9e59eb76857bcb65ba4241a1ddbf2f732a6d5dc4f15deb75a47fc26f261746d6d319c7d4a40f1b2c3ebcb41d4e233c8367d16d882e257c136482d5fc6710d4b6d4a2437993b2c9f3f942978d741c5b154f8cff3e04d35d382baab23a2fa133d539e81f2409515ed270f4a8f53819b12b243b30a2634ddd55a192f1ddd6dd6c266e53114f88672534844bed54ce7b1db1ce09af67f4789ef6d3e754dc75000cd0d8fdf18a2eee5cf14f7b7c5258149d9caf5c5864e130c71021bbdb70066161242d1b135365e68a23571a8a452b6083a897c3b122b3d33a8f9431a8d680f3b00676fe9b2d6c3cc54a9d3ced3e4cbf14cd56f3294e01885fcce8cedff1f32f03eb30338fca3c5f734cd9964e9364dec6c4c3492194ee55d151fb9c17c092b183deb23060677765434ab9e8a9888883fe5227a7573bc152e635b36fb0f666a14cb7dd75fe5e014f06906861d7c99df0d9c6e6c5783e15693486f0da2b655dfeadd27eabd157f9bc50853e321efdcf753bbc68cb4bc45d4849c8b7292107bb17d87ecab9fd97ea0410ff747cc42908c54fc0e93ae3bf0fe471cd4f170aab6233257ce5dad2362529657e668241023d025d511075127ab93298fcb58e56a44b04acaa25ac01c940294ca52cdfd53986837e1c2d5a9c6bd5bdee993fc122cfec8a8eef97b208cbab3024bcccfe70b9d894b51b6295e5796bb6b021324501684f42c308af3d0c3b0f78d36d38503abdfdd02118f94b29d5620c2cd1c1aa9e4200a8c6845804d8273615ee4cdd9fda9125c467f68e40308f9af891008903c4fd54b75736449e996525539e00fae3a048a9a1ef047b69a9c24139ae9eec32504ebf198e7810c23bfdb9d0cefed9428c09148d71c84fdc60d2b5d53204f4f0a13515164c1ec620afefc3787488856b466f2af7ab304038422bcd661775824a793b39ed8c24633ca48771d9d86b0fd6947ec7cd4864f9d508d7098251911918bc60b370e787393fa92bdc180519e15e838ece0c2fd0d5664e65071d8eee382eadbc06f2b9dc6f3e9a24d2faf262e51d15e13afa4c5ce94729fd344a37089421caf5b9e5659e1954200467b8a7ffacbea7698cdcef6254f791fd7bd699052903d0411f5f044e241c9e8fcbec3f83ec4bffb9b284516e4809278c0a6095728e86665b94e5caeef5296d9cbc60433e4d663201ac7974be297ddc9aed851076dfdae5a367ad9d2f380b23d621b48678252ad5c51d85de41c142672a538b22ca8ae1031ebaa85c2408a033e847f92febedae8929c9036873c62d5c6142b9be37e84651ad0077af78b63e86436ac4068fe75a14173c13b462e9eb6ab9e0a660d9453b4bf27d75afc710db3d02936a078fc338168be5ef2d405284f4067415d0cc3312663ea6a67aea8ad2fe3869181cf36b0c47b68156c3930752fd9a0944b83189efb8881450772227cb7d5f2699b89d8ae53407f8173686033bded94700b55d7e0362e26e3987050e56c0e216b87bc5d4fe4d66c48d6b21a8c088643daa857f450f0bdc443173f91050c4c2bc3f2d62710f304ef049f12d84daa2d9536c9175734ede81447f7213eb25a8ec03c0e258d70a88d37398c6966a51e085e25e964822b37cd67de41a364699799d3031c8005a558228d3129eea74392fdee0d909a8ffa29bdde11049bd025f8281b"})
ioctl$KVM_GET_NR_MMU_PAGES(r14, 0xae45, 0x100)
getsockname$packet(r14, &(0x7f0000003f40)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003f80)=0x14)
getsockopt$inet_mreqn(r14, 0x0, 0x24, &(0x7f0000003fc0)={@loopback, @local, <r16=>0x0}, &(0x7f0000004000)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f00000040c0)={'syztnl2\x00', &(0x7f0000004040)={'syztnl1\x00', <r17=>0x0, 0x4, 0x8, 0x2, 0xd, 0x28, @local, @dev={0xfe, 0x80, '\x00', 0x3}, 0x7800, 0x700, 0x7, 0x939}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000004180)={'erspan0\x00', &(0x7f0000004100)={'syztnl0\x00', <r18=>0x0, 0x1, 0x40, 0x1, 0x3a, {{0xe, 0x4, 0x1, 0x31, 0x38, 0x67, 0x0, 0xff, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x542}, {@multicast2, 0x10}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000004280)={'gretap0\x00', &(0x7f00000041c0)={'gretap0\x00', <r19=>0x0, 0x10, 0x10, 0x6, 0x3, {{0x1b, 0x4, 0x1, 0x7, 0x6c, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0xd, "48b523e3523b58dcbe6f5e"}, @cipso={0x86, 0x1d, 0x0, [{0x2, 0xc, "04fef89c5b8c548717cc"}, {0x1, 0xb, "d97371a0cafbcdcafc"}]}, @timestamp={0x44, 0x28, 0xa7, 0x0, 0x0, [0x2, 0x2, 0x20, 0x200, 0x4d, 0x80, 0x4, 0x0, 0x7]}]}}}}}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004580)={r14, 0xe0, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000042c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r20=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000004300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004340)=[0x0], 0x0, 0x4e, &(0x7f0000004380)=[{}], 0x8, 0x10, &(0x7f00000043c0), &(0x7f0000004400), 0x8, 0x87, 0x8, 0x8, &(0x7f0000004440)}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000004640)={'syztnl1\x00', &(0x7f00000045c0)={'syztnl0\x00', <r21=>0x0, 0x2f, 0xba, 0x7, 0x3d9, 0x48, @remote, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x8, 0xaa, 0x4}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000004800)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000047c0)={&(0x7f0000004680)={0x120, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x840}, 0x8014) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(r14, 0xc0184800, &(0x7f0000004840)={0x9b, r14, 0x2})
getsockopt$inet_tcp_int(r14, 0x6, 0x32, &(0x7f0000004880), &(0x7f00000048c0)=0x4)

58.498553367s ago: executing program 0 (id=2757):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="70f3ff00", @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r7, @ANYBLOB="06000600020000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r10 = inotify_init()
inotify_add_watch(r10, 0x0, 0x82000818)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x82000818)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292c66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732c3f16da730fdd1d3678d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf41}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_open_dev$loop(0x0, 0x10, 0x202a80)

56.464013151s ago: executing program 0 (id=2760):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850300000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0xd, 0x101002)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0)
ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)=0x2)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x200000000000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x18c0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0xc0012, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f0000006480)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000700)=""/191, 0xbf}], 0x5, &(0x7f0000000840)=""/22, 0x16}, 0x1}, {{&(0x7f0000000940)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000880)=""/21, 0x15}, {&(0x7f00000009c0)=""/164, 0xa4}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000000cc0)=""/195, 0xc3}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/65, 0x41}], 0x9}, 0x1}, {{&(0x7f0000000fc0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001040)=""/247, 0xf7}, {&(0x7f0000001140)=""/175, 0xaf}, {&(0x7f0000001200)=""/2, 0x2}, {&(0x7f0000001680)=""/169, 0xa9}, {&(0x7f0000001740)=""/236, 0xec}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x6, &(0x7f00000028c0)=""/137, 0x89}, 0x2}, {{&(0x7f0000002980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/226, 0xe2}, {&(0x7f0000002b00)=""/105, 0x69}], 0x2, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003bc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003c40)=""/164, 0xa4}, {&(0x7f0000006640)=""/177, 0xb1}], 0x2, &(0x7f0000003e00)=""/4096, 0x1000}, 0xae}, {{&(0x7f0000004e00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e80)}, {&(0x7f0000004ec0)=""/201, 0xc9}, {&(0x7f0000004fc0)=""/88, 0x58}], 0x3, &(0x7f0000005080)=""/210, 0xd2}, 0x10}, {{&(0x7f0000005180)=@nfc_llcp, 0x80, &(0x7f0000006380)=[{&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/178, 0xb2}], 0x3, &(0x7f00000063c0)=""/142, 0x8e}, 0x8}], 0x7, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000003c0)={0xfd5f, 0xc, r3, 0x0, 0x0, 0x200000000})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
unshare(0x8000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)

55.308124404s ago: executing program 0 (id=2764):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) (async)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
timer_create(0x4, &(0x7f00000001c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000080)="ad182a9d89d98220cb5346ec81ef32e6f1a6409891793eddce73ba3658abc9c8e49e8e0a5f78f29c1142c26d63e98989f46eef68b0a135f8359965620541e32415245b7e1e99e65b5813997fd6a4d0a313e79a5f6a48060818531783137d0d77eb488af8916a39c992bef9e1e8bb1784113dc867753ff6b57cb9eddbf13f052cae44699ded17c4a07b1b", &(0x7f0000000180)="d4de84f88d05acfe049beb1ff2c9fba2afc67f430ab0ba9ec5dc4a741b38b496cbcc3fa45d570eb552b101e278180bc1feddc73547b9d0ea1a250773"}}, &(0x7f0000000200)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}}, &(0x7f0000000280)) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async)
syz_clone(0x80000000, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

55.205401591s ago: executing program 0 (id=2765):
r0 = socket$inet6(0xa, 0x80002, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

54.307489356s ago: executing program 0 (id=2769):
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x400}, 0x28)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f00000002c0)={0x400210000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f00000001c0)={@default, @null})

49.05377101s ago: executing program 0 (id=2790):
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x93031, 0xffffffffffffffff, 0x10000000) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='fscache_cache\x00', r0, 0x0, 0xb2}, 0x18) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f)

33.683797071s ago: executing program 34 (id=2790):
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x93031, 0xffffffffffffffff, 0x10000000) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='fscache_cache\x00', r0, 0x0, 0xb2}, 0x18) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f)

10.446427129s ago: executing program 5 (id=2938):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x9, 0x30, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

9.951536752s ago: executing program 5 (id=2939):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x62040200)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)

9.727737371s ago: executing program 7 (id=2941):
r0 = socket(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=ANY=[@ANYBLOB="4800000040000100fcff070004000000010000000800cb8004000880200001801c00108018000b8014000100fc0000000000000000000000000000000c0002"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8)
setresuid(r7, r7, r7)
fcntl$setpipe(r6, 0x407, 0x100004)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00edffffff00"/15, @ANYRESOCT=r4, @ANYRES32=r9, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, 0x0, &(0x7f0000000080)=r8}, 0x20)
recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)}, 0x10040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1)

8.610000794s ago: executing program 7 (id=2943):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES16, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
socket$inet(0x2, 0x1, 0x100)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, 0x0, 0x480d1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
msgget(0x1, 0x206)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
pread64(r5, 0x0, 0x0, 0x1000000000)
preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0)

7.552048218s ago: executing program 6 (id=2945):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x26000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x7, 0x80805, 0x10000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
syz_kvm_setup_cpu$x86(r8, r7, &(0x7f00005ae000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="0fc71c8bf926640fc7180fc7190f00120f01cf8215000f0f596c1c0f01c4660f388207", 0x23}], 0x18, 0xde, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="f3dbd3670f01c80f20d86635200000000f22d80f9d6e05440f20c066350d000000440f22c0650fc77e0066b9b70a000066b800f0000066ba000000000f300f01c90f32b85f008ed0", 0x48}], 0x1, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r9, &(0x7f0000001ec0)={0x24, @none={0x0, 0x1}}, 0x14)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6.212198896s ago: executing program 5 (id=2950):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x44081, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x3, 0x7, 0x1, 'queue1\x00', 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4080)

6.206616884s ago: executing program 4 (id=2951):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async)
r3 = gettid()
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0xfffffd50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x7, 0x9) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r7}, 0x18) (async)
r8 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bab000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x7e, {"b9030100c0b823000000ba000000000f300f1b2b66baf80cb80a62d98beffdbafc85b0eeb9c80200000f32400f3066ba4200ecc74424001d000000c74424029fdd000066baf80cb818dbec80ef66bafc0cb803000000efc7442400cb000000c744240203000000ff2c24410f07"}}], 0x7e}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x2, 0x4)

6.071954505s ago: executing program 3 (id=2952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0xa0)
connect$inet(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r4, 0x4b49, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xd76}, 0x18)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x42, 0x6e})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0xfffffdf9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000)

5.685108382s ago: executing program 7 (id=2953):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x50, 0x0, 0x7d, 0x2, 0x0, 0x127})
io_uring_enter(r1, 0x6d1c, 0x3f8a, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x99e, 0xffffffffffffffff, 0x20, {0x7, 0x400}, 0x81}, 0x1)
syz_emit_ethernet(0x123e, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x2}, 0x5})
connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

5.551233782s ago: executing program 4 (id=2954):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
close(r8)
r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
execveat$binfmt(r9, r7, 0x0, 0x0, 0x1000)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff8507000000000000000685000000500000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r6, 0x0, 0x0, 0x800)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r10, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r11, 0x0, 0xffffffff000)
connect$llc(r0, 0x0, 0x0)
r12 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)

5.472966887s ago: executing program 3 (id=2955):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210})

5.301060737s ago: executing program 3 (id=2956):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
syz_open_dev$MSR(&(0x7f0000000300), 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000400)=0x21a19, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000f40)=@ethtool_perm_addr={0x4b}})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000840)=[@rdmsr={0x66, 0x18, {0x582}}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @rdmsr={0x66, 0x18, {0xc0011039}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x663, 0x3, 0x352c27b1, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x2c}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @uexit={0x0, 0x18, 0x7}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x71, 0x0, 0x8, 0xffff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x7f, 0x81, 0x7, 0x10000}}, @nested_load_code={0x12e, 0x69, {0x1, "420f01c30f20d835200000000f22d8c442f92aa1d300c0fe660f209ac403f915ee004c0fc76ff666ba4100b85c2effffef36f043118e00000000b9440b0000b80d000000ba000000000f306665440f00d1"}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x0, 0x3}}, @wrmsr={0x65, 0x20, {0x40000081, 0x10}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18, 0x40}, @wrmsr={0x65, 0x20, {0x35f, 0x5}}, @wr_crn={0x67, 0x20, {0x8, 0xffffffff}}, @wr_drn={0x68, 0x20, {0x5, 0x522}}, @nested_create_vm={0x12d, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x80a}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x81, {0x1, "b9a80a0000b865000000ba000000000f30420f01cfc421fe6f7338b979090000b800000000ba000000800f30c4c1b571f540420fc77205c74424008000c0fec744240231d0ffffc7442406000000000f011c243666430ff4a221f70000660f3880834e738a220fe71b"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_code={0x12e, 0x4f, {0x2, "66b8ab008ed8450fc774076b0f3266bad104b896b70000ef0f01df644b0fc76d3c0f07c40105de0bc462fdb79800000000c4c27d217d5b"}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x73a3, 0x6653a1c454a10845, 0x6}}, @cpuid={0x64, 0x18, {0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @in_dx={0x69, 0x20, {0xe65e}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0xf, 0x4, 0x6}}], 0x4b1})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="3e0f79040f01cf3edfc80f0fceb40f1efcbaf80c66b858eeec8b66efbafc0cb80a00ef0a3a0fc79e0ca066660fdb5f00ba6100b87c23ef", 0x37}], 0x1, 0x20, &(0x7f00000001c0)=[@dstype0={0x6, 0x9}], 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002002000e0000009000000000000000002000100000000000008000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x6048010)

4.180907449s ago: executing program 7 (id=2957):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

3.737140492s ago: executing program 4 (id=2958):
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a75dd8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630fcc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe72752aad1d1ae315ffc0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(0x0, r3) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async)
getpriority(0x0, 0xffffffffffffffff) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async)
r7 = msgget$private(0x0, 0x3ac)
msgsnd(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000000000781fcc1add70915211077fa75319dada8c3c7d9be974a2dcb107b737372659685fbb959c9c294ed309a1180637e03f6be883f5bee486e6af399781684adf213d7d8aa764eeae8e9c29b88802f12951d581b7d7c421e2c2784548108084dfc78d59e739ed474a49093dec478fcf0019e4899b03b1df28f9bf8ccc12fda2a5fadc3d28ae543a2bad208d7c0fd0300e6e75a7740dc955b4bd19d5886450fb18042befd8a41bfa79ab5e43030ee21328fff0fa350974034ab326c14ebbbd2929e095825c1a555f13ca6fa0"], 0x8, 0x0) (async)
msgrcv(r7, 0x0, 0x0, 0x2, 0x3800) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x6, 0xe, 0x99}, 0x10)

3.522886701s ago: executing program 4 (id=2959):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102386, 0x18ff2)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r5 = fanotify_init(0x8, 0x1)
fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4)
read$FUSE(r5, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x3, &(0x7f0000000140)={0x0, 0x13, 0x0, @tid=r6}, &(0x7f0000000180)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x1, 0x0)
syz_io_uring_setup(0x1450, &(0x7f0000000440)={0x0, 0x79a9, 0x8, 0x1, 0x29a}, &(0x7f00000006c0), &(0x7f0000000280))

2.65555308s ago: executing program 5 (id=2960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4000, 0x400, &(0x7f0000000680))
prlimit64(r0, 0x9, &(0x7f0000000000)={0xf9, 0x5}, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b000100000000767d1ccf000080bfe5c06153dcf28357444b590acf00000000000000c510f062dde6ab7ed006efa1e4cf8070952174683041c7c02e3f761bbfd620800053a6161f46fe0d9b94c6a2bf3dcdc2c6a3a8436dfa15291bd041cfcfe83eb083734e5a59c4692f3543e480e419f4ad9b6347c756756754bfec6fde5642ada174f43e9ceb339994adf156e6bd24ed3b404036f69590abc6519ae10b03a36cbc2e63ef4c2d6161ad179ba19f20d193cb831a55efde3fb3565f61fdc88666e29987b95cc47a10c69569b0667774ecde30cd88826a746f228b914db305dbd238699cdcc041491a4716d24f4d5b0f7ff0ee1e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='xen_cpu_write_gdt_entry\x00', r4}, 0x18)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x0, 0x51eda, 0x100, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810dc})
add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffff9)
keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0)
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.-!)d$$/!!.^Z\x00'])
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x64000600)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x4000054)

2.385061921s ago: executing program 4 (id=2961):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8f8000000010000070000000000000000008000000000000000a900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90000000000000ffff00", [0x0, 0xca]}}) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8})

2.323574634s ago: executing program 3 (id=2962):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x340, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [@NL80211_ATTR_TESTDATA={0x2d, 0x45, "fdaff92d4315ae7b67e19d2d971a7c7a17d81dfd90a15a7e8badcbd43e0d49216f31187be5748f5210"}, @NL80211_ATTR_TESTDATA={0x70, 0x45, "d8a91fcaf76807e2f176b527cf4950ee223549e8c043182ebddcdb8ee0f8095b08d2fc1f11c1019c974a1dbbff71c98ded2cc3024e7a2a687ed14a805398c1ed433c3b86fad6a9fd467b5bf9709dc54eaef206d8b2c4f70a04a195342af8622a244f384dbae3f50a8580748f"}, @NL80211_ATTR_TESTDATA={0x4d, 0x45, "310bdbcd537912e65da8df7788d1f0809eba5242143a7b733ddb5703bbfec4af87cd7e347c67c715859c1928ae74e8a8c6cb6f59314a5c18acff8e795d9fb26eacb0544a7869bdfa33"}, @NL80211_ATTR_TESTDATA={0x67, 0x45, "04478f0223c5b9a736abb683ff4cc5f3ae8effd5f29ff24d4220d3ea7182b5a94245fb4fdf3d13a61cc5ecdbb4ec1a31b7d3436d1886c3fcdd9b3274c607cc46ce9ec3477d7f56bfc350af7db1a5c87dabd7f6df818b9c7c39625de9b2b3f245b55688"}, @NL80211_ATTR_TESTDATA={0x62, 0x45, "ff517d2a89ba19102cf4b4984ef7417fd8c800c0b930c4551135fc4656fe4ef567701de1c5ae2cf9df93ac6e2587d70922e2680c1f6f0db9d95bcb7589290196809dfd711750e3ea9a6cefcdcbc3d091f606359c61db4d74ad05c8246bc4"}, @NL80211_ATTR_TESTDATA={0x12, 0x45, "38b5bc85b4d19cfec41602d90d9d"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "7ff1cff4a8d2103e9e95819dae46de165b6ad97fd20ecb5d5fc2c9629866d1eabedf7c7d620891f8027048b8368900147df574072f38dbb20350d1ad06c1ddcdc35cb2dd7ecab8853c65adadfde05015c2e0fbd3025e397c8d68978b005ab973860cd0ba95d81cf2c84dc1f8517fc77613"}, @NL80211_ATTR_TESTDATA={0xd6, 0x45, "f94c946a10b1900fabf5ed37e96e9f88a5c97486f902ddeff5af84ccb0b9007ecafc2ce897a704d1f12e2a8555f2cd83ef4bad060e0adba0f56d8c1b71d5a90f966c8d2e2e4e9d584cc3d7fbb35016fd8c30f12cb9fb42a456a1999ee4a34706dd24619606cc2022e009ac2ef169620ded4cf577ff2a4e071176fb7ff38de99660764e73b8fc7bf2f80cafa846fb0b925dd27e3ad139a0ddc14932b5c6ffac73a672c88ee4c7d3951764164dcf8a588f40ec35a53b16c8b003f599adcff675efefa1e1e8d189260a9ecfd0378942abac188e"}]}, 0x340}, 0x1, 0x0, 0x0, 0x4008044}, 0x404c000)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x86}, 0xe, 0x3, 0x1ff, 0xadd4, 0x0, 'syz1\x00', "730edb50a93eb8b50a9ac7956c5f45ea3ed3f7cb492f43a359874fcc5060ea19", "40f7fbdf3ca423fb8ba5052ea28c1fc1e5314fd4bd447de9abe2e6b54db6302f", [{0x8, 0x9, {0x2, 0xf600}}, {0x5, 0x99b9, {0x3, 0x8}}, {0x1ff, 0x0, {0x2, 0x800}}, {0x81, 0x401, {0x2, 0x7ff}}, {0x9, 0x9, {0x1, 0x81}}, {0x5, 0x8001, {0x1, 0x7}}, {0x7, 0x0, {0x0, 0x5}}, {0x7, 0x9, {0x3, 0x8}}, {0x101, 0x2, {0x1, 0x9}}, {0x8, 0x4, {0x1, 0xb3}}, {0xfff7, 0xb, {0x3, 0xb}}, {0x8, 0x2, {0xbff9367223f21080, 0x4}}, {0x9, 0x9, {0x2, 0x95}}, {0x4, 0x7, {0x0, 0x6}}, {0xa3, 0x10, {0x3, 0x7}}, {0x7fff, 0xe, {0x2, 0x6}}, {0x5, 0x4, {0x1, 0x7fffffff}}, {0x894, 0x5, {0x1, 0x2000000}}, {0x1600, 0x4, {0x2, 0x8000}}, {0x7ff, 0xff, {0x3, 0x9}}, {0x8, 0x401, {0x1}}, {0x8, 0x9, {0x1, 0xfffffc00}}, {0xebc3, 0x8, {0x0, 0x3}}, {0x3, 0x1cf, {0x2, 0x4}}, {0x7, 0x401, {0x2}}, {0x54, 0x5, {0x2}}, {0x4, 0x6, {0x2, 0x8}}, {0x7, 0x401, {0x0, 0x81000}}, {0xd, 0x7, {0x3, 0x1000}}, {0x6, 0xad3, {0x1, 0x39b0}}, {0x0, 0x9, {0x2, 0x3}}, {0x9, 0x10, {0x2, 0x7}}, {0xc5, 0x5, {0x0, 0x200}}, {0x6, 0x43, {0x3, 0x3}}, {0x1, 0x7, {0x0, 0x6a}}, {0xa, 0x1, {0x2, 0xfffffff8}}, {0x5, 0xe4, {0x0, 0xdc2}}, {0xff, 0x0, {0x2, 0x39b}}, {0xfff, 0x5, {0x1, 0x8}}, {0x1, 0x3, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x3627}, 0x1, 0x9a, 0x8642, 0x7, 0x13, 'syz0\x00', "01bb73f0083bfc3a6027265402702dce2d2443141fcac35821ba9857799b938c", "f2fa21ce0bdd1e0ab3dda5992db23d38e64c768c4bf751ddf8ca4bfc618c4f86", [{0x1, 0x1, {0x0, 0x4}}, {0xf7, 0xb, {0x3, 0x8001}}, {0xac, 0x3, {0x0, 0x219}}, {0x2, 0x2, {0x2, 0x4}}, {0x4, 0x7, {0x1, 0x1}}, {0x2, 0xff28, {0x3, 0x1ff}}, {0xde, 0x6, {0x1, 0x1}}, {0x6, 0x0, {0x3, 0x5}}, {0x7, 0x4, {0x0, 0x89f9}}, {0x2, 0x9, {0x1}}, {0x0, 0xfffd, {0x3, 0xe}}, {0x8, 0x8001, {0x2, 0xffff8000}}, {0xe, 0xfff5, {0x3, 0x4}}, {0x8000, 0x7ff, {0x2}}, {0x0, 0x400, {0x1, 0x2}}, {0x2b07, 0x0, {0x1, 0xfffffffc}}, {0x3, 0x2, {0x1, 0x1}}, {0x0, 0x7, {0x3, 0x2}}, {0x2, 0x44, {0x1, 0x9}}, {0x7, 0x7c8, {0x1, 0x2}}, {0x6000, 0x6, {0x2, 0x6}}, {0x3, 0xd5c4, {0x1, 0x7}}, {0x7, 0x8, {0x2, 0xfffffff7}}, {0xffff, 0x8, {0x1, 0x9}}, {0x5, 0x6, {0x0, 0x4}}, {0x6, 0x0, {0x1, 0x5}}, {0xc404, 0x3, {0x2, 0x1ff}}, {0x9, 0xd2f}, {0x8001, 0xffff, {0x1, 0x3}}, {0x6, 0xff, {0x1, 0x8}}, {0x10, 0x7, {0x3, 0x2}}, {0x6, 0x1, {0x0, 0x9}}, {0xdea0, 0x1, {0x2, 0xfe000000}}, {0x1, 0x0, {0x3, 0x10001}}, {0x8001, 0x1, {0x3, 0x5}}, {0x40, 0x7, {0x3, 0x43da46a1}}, {0xabd, 0x2, {0x1, 0x8}}, {0x0, 0x0, {0x2, 0x3}}, {0x3, 0x0, {0x1, 0xa6ab}}, {0x9, 0xfff, {0x2, 0xffffd570}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x9, 0x9, 0x8, 0x9, 0x9, 'syz1\x00', "14981f98fba843a3d5eac796f322ffc6b274bfa91cd0637206067e77075fa040", "7b576b5c3713c401190ae9003f164d2999f68a5c9c0ccff1c08264f5704a6ec0", [{0xb, 0x8, {0x1, 0x9}}, {0x4, 0x4, {0x0, 0x3}}, {0x7, 0x6, {0x974a32b6a37385d6, 0x10a7}}, {0x80, 0xffff, {0x1, 0x8}}, {0xeac, 0x1, {0x1, 0xd5160f4}}, {0x4, 0x6, {0x0, 0x8000}}, {0x4, 0x5, {0x0, 0x5}}, {0xc3f, 0xa800, {0x2, 0x5}}, {0xc3, 0x7, {0x0, 0x69}}, {0xfffa, 0xa3b1, {0x1, 0x1ff}}, {0x9, 0x2, {0x2, 0x4}}, {0xb, 0x98cf, {0x2, 0xf}}, {0x8, 0x762}, {0x9, 0x9b00, {0x3, 0x2}}, {0x8000, 0x100, {0x0, 0x7f}}, {0xfbee, 0x8, {0x2, 0x1}}, {0x4, 0x3, {0x0, 0x6}}, {0x60, 0x7, {0x1, 0x5}}, {0x8d, 0x4, {0x0, 0x2b8000}}, {0x1, 0x6, {0x3}}, {0x1ff, 0x6, {0x1, 0x80}}, {0x3, 0x9bc1, {0x3, 0x5}}, {0x3, 0xfffb, {0x2, 0xf81}}, {0x4, 0x3, {0x0, 0xb1}}, {0x9, 0xffff, {0x0, 0x9}}, {0x7, 0x9, {0x3, 0x3}}, {0x101, 0x8, {0x2, 0x200}}, {0x0, 0x3, {0x0, 0xf53}}, {0x3edc, 0x5, {0x1, 0x7}}, {0x68, 0x9, {0x3, 0x2}}, {0xfff8, 0xe776, {0x1, 0x4}}, {0x0, 0xe, {0x3, 0x52}}, {0xfd9, 0x3}, {0xfffd, 0x7, {0x3, 0x80}}, {0xffff, 0x9ba3, {0x1, 0xdbf}}, {0x1000, 0x98b4, {0x1, 0x8}}, {0xbda, 0x7, {0x3, 0x81}}, {0x9, 0x1, {0x2, 0xffff}}, {0x4, 0x9, {0x2, 0xfff}}, {0x80, 0xff01, {0x2, 0x800}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40080}, 0x4010)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
ppoll(&(0x7f0000000cc0)=[{r2, 0xb100}, {r2, 0x5018}, {r3, 0xc5e6}, {r0, 0x4}, {r2, 0x4080}, {r0, 0x8}, {r2, 0x40}, {r0, 0x1020}], 0x8, &(0x7f0000000d00)={0x0, 0x3938700}, &(0x7f0000000d40)={[0x6]}, 0x8)
r4 = request_key(&(0x7f0000000d80)='cifs.spnego\x00', &(0x7f0000000dc0)={'syz', 0x3}, &(0x7f0000000e00)='{//\x00', 0xfffffffffffffff9)
keyctl$revoke(0x3, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000001000))
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000001040)={0x4, 0x5, 0x1ff, 0x80000001, '\x00', 0x9})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000001080)={0x7, 0x6, 0xfff, 0x7, '\x00', 0x3})
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000010c0)=0x1, &(0x7f0000001100)=0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001140))
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001200), 0x40)
ioctl$BLKRESETZONE(r8, 0x40101283, &(0x7f0000001240)={0x6, 0xffffffff})
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f00000012c0)=0xce)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r8)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r11, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001)
r12 = accept$netrom(r0, &(0x7f0000001440)={{0x3, @bcast}, [@remote, @null, @netrom, @netrom, @netrom, @null, @bcast, @bcast]}, &(0x7f00000014c0)=0x48)
getsockname$netrom(r12, &(0x7f0000001500)={{0x3, @null}, [@default, @rose, @netrom, @null, @rose, @default, @rose]}, &(0x7f0000001580)=0x48)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f00000015c0)={'vcan0\x00'})
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001640)=@overlay={0x5, 0x7, 0x4, 0x400, 0x9, {}, {0x1, 0x0, 0x6, 0x1, 0x8, 0x0, "4546cb81"}, 0x8, 0x3, {}, 0xd31, 0x0, r8})

2.135992283s ago: executing program 3 (id=2963):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x50002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, 0x2e, 0x120, 0x70bd26, 0x25dfdbff, {0x8}, [@typed={0x8, 0x4e, 0x0, 0x0, @str='{!\\\x00'}, @generic="d0ee4978ee062aa9614cfc7764412e7367a06036cddfee6238f43a2faf94f983a0f6b770488947fd60fb6fd422819b5339c10175af4dfe2b3202f13582e21aafb027589d5b27a9cbeb78874ab9a8457ffc2fc2de937f2b8b3a163a518ffcf5a8ea5de7e6a3368c508128ed4981f8be50aeb1b5b1f06b978cfdd5551feff2eb7438c0f379902938620d39c5157e53ca3512e02c51afd28a18ee83336c8cd5591428484eb5e3d87118a592a6ab86c4c5b407a7632bed5c88a8112ccb", @typed={0x8, 0x16, 0x0, 0x0, @u32=0xb}]}, 0xe0}, 0x1, 0x0, 0x0, 0x200020c0}, 0x10)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000380)={0x2})
getpid()
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x56b041, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000400)={0xff, @multicast2, 0x4e23, 0x2, 'dh\x00', 0xa, 0xda66, 0x71}, 0x2c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000440)={<r4=>0x0, 0x7, 0xd}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e20, @broadcast}}, [0x8001, 0x3, 0x0, 0x78f7, 0x7, 0x2b0, 0x4, 0xb7, 0x101, 0x1edf, 0x7, 0x7f, 0x7fffffff, 0x800, 0x7]}, &(0x7f00000005c0)=0x100)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000600)=@ccm_128={{0x304}, "d59556a182b534e3", "f3a4c417ca0c2441a0e783e99728b1cf", "6df30caa", "7360a0050d835fac"}, 0x28)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000640)={0x8, 0xf, 0x8, 0x80000000, 0x9, "e931ef2e35ac41ee3a2fa32ce4337bc2cb27a8", 0x10000, 0x6})
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000680)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x68}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa998}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffd6c}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xc500}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_open_dev$usbfs(&(0x7f0000000880), 0x80, 0x1)
set_robust_list(&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x10000, &(0x7f0000000980)={&(0x7f0000000940)}}, 0x18)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1)
r8 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000cc0)={0x0, &(0x7f0000000a40)=[@nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x507, 0xfffffffffffffff7, 0x100, 0xffffffffffffffff}}, @set_irq_handler={0xc8, 0x20, {0x30}}, @set_irq_handler={0xc8, 0x20, {0x9a, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0xfffffffffffffff7, 0x9}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x9, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x66, 0x2}}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0xfa8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x13, 0x4, 0x8}}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x65, 0x20, {0x1aa, 0x3}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x74, {"c4c33d494cf7b50e66b8cc008ed03e470f62a9a800000066baf80cb8145f0f81ef66bafc0c66b89dfc66ef48b8de9d0000000000000f23c80f21f8350c0030000f23f80f7961700f2d9bff7f000066400fdce6c48105d599bc970000470f8867000000"}}], 0x274})
fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x8, 0x2)
getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8)
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000e40)={0xad, 0x55})

2.123399492s ago: executing program 6 (id=2964):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x159981)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2.065085695s ago: executing program 3 (id=2965):
socket(0x1a, 0x80805, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
accept4(r0, 0x0, 0x0, 0x80800)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f00002e9000/0x4000)=nil, 0x4000, 0x13)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa08004500007800001666de29da2c6c2803922f25522e9d000000119078000000000a0190780200000000000000000000000250527772135256fe12cc3723b13bf867e030f21154fa04f66e1f79ffee956ec48c33"], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x40000000, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

1.747146616s ago: executing program 5 (id=2966):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040))
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
recvmmsg(r0, &(0x7f0000000e80)=[{{&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/160, 0xa0}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/101, 0x65}], 0xa, &(0x7f0000000e40)=""/60, 0x3c}, 0x8}], 0x1, 0x40000100, &(0x7f0000000ec0)={0x77359400})
syz_clone3(&(0x7f00000011c0)={0x80600, &(0x7f0000000f00), &(0x7f0000000f40)=<r1=>0x0, &(0x7f0000000f80), {0x12}, &(0x7f0000000fc0)=""/186, 0xba, &(0x7f0000001080)=""/195, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)
sched_setscheduler(r1, 0x1, &(0x7f0000001240)=0xd048)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
shutdown(r0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x840)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x44811)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x38, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
r8 = accept$inet(0xffffffffffffffff, &(0x7f0000001640)={0x2, 0x0, @empty}, &(0x7f0000001680)=0x10)
ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000016c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x1, @remote}, 0x90, {0x2, 0x4e20, @local}})
r9 = dup2(r0, r2)
sendmsg$802154_dgram(r9, &(0x7f0000001840)={&(0x7f0000001740)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000001800)={&(0x7f0000001780)="9a1fe2762b864a500b74544f8e953404c07f2cbe96c1516c4fea59e13c89f97cc1fb19b6933464f0c3499939d0903aebdd9de67ae2ec7fefc532a98d8126c485645b1c62dff37c0ab322c98b96120f851fbf09dfa2e632e14bdbd21a6935037a", 0x60}, 0x1, 0x0, 0x0, 0x24040821}, 0x4800)
ioctl$FBIOBLANK(r9, 0x4611, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000001880)={0x6, 0x8, 0x4, 0x79, 0x2, 0xff, 0xff, 0x10, 0x7, 0xf9, 0xa, 0x0, 0xe, 0x9a}, 0xe)
ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f00000018c0)=0x9)
syz_open_pts(r2, 0x200)
write$selinux_attr(r9, &(0x7f0000001900)='system_u:object_r:getty_log_t:s0\x00', 0x21)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r9)
sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c40)={0x210, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c05e4c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d1ac605}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75cb5d08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b68bde2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x552f5cee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x148, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2f531a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4506a7e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f455e95}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2103b7f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698c5b54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a3df29c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x173bea70}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70c0acc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe1b369f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c65ab2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22a39750}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70d184fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4780946a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4649be8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341d13a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b77dcc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e897350}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x210}, 0x1, 0x0, 0x0, 0xc080}, 0x10000000)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x140}, 0x80)

1.516884545s ago: executing program 5 (id=2967):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)

1.465338926s ago: executing program 6 (id=2968):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x80000})
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) (fail_nth: 2)

1.292093359s ago: executing program 6 (id=2969):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680))
setresgid(0x0, 0x0, 0xee01)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'})
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f00000005c0)={0x2000a210})

1.274567493s ago: executing program 7 (id=2970):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
munmap(&(0x7f0000112000/0x4000)=nil, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

284.060449ms ago: executing program 6 (id=2971):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtfilter={0x64, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0x10, 0xfff2}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x30, 0x51, 0xbe}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0)

3.802694ms ago: executing program 6 (id=2972):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmmsg$unix(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000080)="96da7a", 0x3}, {0x0, 0x500}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x4001)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680))
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.246195ms ago: executing program 4 (id=2973):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0)

0s ago: executing program 7 (id=2974):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) (async)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00400000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00400000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) (async)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x10001}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, 0xffffffffffffffff, 0x36, 0x0, @val=@tracing={0x0, 0x6}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r8, &(0x7f0000003240)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

one id is out of range
[  846.966244][T16176] netlink: zone id is out of range
[  846.971469][T16176] netlink: zone id is out of range
[  846.976770][T16176] netlink: zone id is out of range
[  846.980659][T16070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.982412][T16176] netlink: zone id is out of range
[  847.039814][T16176] netlink: zone id is out of range
[  847.045505][T16176] netlink: zone id is out of range
[  847.050751][T16176] netlink: zone id is out of range
[  847.260076][ T4025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.275274][ T4025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.294351][ T4025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.303709][ T4025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.486076][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.501721][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.535555][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  847.535751][   T30] audit: type=1400 audit(1768842828.386:1182): avc:  denied  { setopt } for  pid=16189 comm="syz.6.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  847.561842][ T5928] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  847.563888][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.579595][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.737603][ T5928] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  847.748597][ T5928] usb 1-1: config 1 has no interface number 0
[  847.761557][ T5928] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  847.793009][ T5928] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  847.831447][ T5928] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.069922][ T5928] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  848.138949][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.157439][ T5871] usb 6-1: USB disconnect, device number 33
[  848.168942][ T5928] usb 1-1: Product: syz
[  848.191046][ T5928] usb 1-1: Manufacturer: syz
[  848.204219][ T5928] usb 1-1: SerialNumber: syz
[  848.222739][T16183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  849.251179][ T5832] Bluetooth: hci3: command tx timeout
[  849.263935][T16180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  849.563406][T13198] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  849.722179][ T5928] usb 1-1: Incompatible driver and firmware versions
[  849.730485][T13198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  849.763705][T13198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  849.784533][T13198] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  849.805213][T15899] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  849.866336][T13198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.877178][T13198] usb 4-1: config 0 descriptor??
[  849.899157][T16217] trusted_key: encrypted_key: master key parameter 'dZault' is invalid
[  849.910152][T16216] trusted_key: encrypted_key: master key parameter 'dZault' is invalid
[  849.919431][T16217] ������: renamed from lo (while UP)
[  850.100391][   T30] audit: type=1400 audit(1768842830.946:1183): avc:  denied  { accept } for  pid=16223 comm="syz.6.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  850.120250][T15899] usb 5-1: Using ep0 maxpacket: 32
[  850.131536][T15899] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  850.140791][T15899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.149248][T15899] usb 5-1: Product: syz
[  850.154038][T15899] usb 5-1: Manufacturer: syz
[  850.158686][T15899] usb 5-1: SerialNumber: syz
[  850.210309][T15899] usb 5-1: config 0 descriptor??
[  850.224394][T15899] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  850.235238][T15899] dvb-usb: bulk message failed: -22 (2/0)
[  850.260979][T15899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  850.273223][T15899] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  850.281969][T15899] usb 5-1: media controller created
[  850.391730][T15899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  850.437611][T16203] cxusb: i2c wr: len=95 is too big!
[  850.437611][T16203] 
[  850.505107][T13198] usbhid 4-1:0.0: can't add hid device: -71
[  850.511104][T13198] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  850.512140][T15899] usb 5-1: selecting invalid altsetting 7
[  850.527857][T13198] usb 4-1: USB disconnect, device number 24
[  850.552877][T15899] cxusb: set interface failed
[  850.564472][T15899] dvb-usb: bulk message failed: -22 (1/0)
[  850.620892][T15899] DVB: Unable to find symbol lgdt330x_attach()
[  850.634501][T15899] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  850.703485][T15899] rc_core: IR keymap rc-dvico-portable not found
[  850.712124][T15899] Registered IR keymap rc-empty
[  850.717963][T15899] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  850.729495][T15899] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input40
[  850.743528][T15899] dvb-usb: schedule remote query interval to 100 msecs.
[  850.750685][T15899] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  851.283578][T15899] dvb-usb: bulk message failed: -22 (1/0)
[  851.313584][T13198] usb 1-1: USB disconnect, device number 81
[  851.425809][T15899] dvb-usb: bulk message failed: -22 (1/0)
[  851.543474][T15899] dvb-usb: bulk message failed: -22 (1/0)
[  851.735087][T15899] dvb-usb: bulk message failed: -22 (1/0)
[  851.751428][T13198] usb 5-1: USB disconnect, device number 74
[  851.938827][T13198] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  852.029365][   T30] audit: type=1400 audit(1768842832.856:1184): avc:  denied  { getopt } for  pid=16249 comm="syz.0.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  852.385723][T16258] UHID_CREATE from different security context by process 1893 (syz.4.2485), this is not allowed.
[  852.398673][   T30] audit: type=1326 audit(1768842833.246:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.4.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd16338f749 code=0x0
[  852.498539][   T30] audit: type=1400 audit(1768842833.346:1186): avc:  denied  { read } for  pid=16273 comm="syz.3.2490" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  852.527008][   T30] audit: type=1400 audit(1768842833.376:1187): avc:  denied  { ioctl } for  pid=16273 comm="syz.3.2490" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  852.571622][T16275] vxcan1 speed is unknown, defaulting to 1000
[  852.742337][T16275] lo speed is unknown, defaulting to 1000
[  852.749442][T16275] lo speed is unknown, defaulting to 1000
[  852.819028][   T30] audit: type=1400 audit(1768842833.666:1188): avc:  denied  { ioctl } for  pid=16273 comm="syz.3.2490" path="socket:[54949]" dev="sockfs" ino=54949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  853.389342][T15899] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  853.694963][T15899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  853.707811][T15899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  853.718028][T15899] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  853.727536][T15899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.740737][T15899] usb 4-1: config 0 descriptor??
[  854.544132][T15899] usbhid 4-1:0.0: can't add hid device: -71
[  854.572581][T15899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  854.856440][T15899] usb 4-1: USB disconnect, device number 25
[  855.507818][   T30] audit: type=1400 audit(1768842836.356:1189): avc:  denied  { bind } for  pid=16300 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  855.851112][T16323] loop2: detected capacity change from 0 to 7
[  855.881980][T16323] Dev loop2: unable to read RDB block 7
[  855.895834][T16323]  loop2: unable to read partition table
[  855.912153][T16323] loop2: partition table beyond EOD, truncated
[  855.919204][T16323] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  856.053615][ T5922] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  856.126336][   T30] audit: type=1400 audit(1768842836.966:1190): avc:  denied  { create } for  pid=16315 comm="syz.5.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  856.301388][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.362329][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.428788][ T5922] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  856.476320][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.593304][ T5922] usb 4-1: config 0 descriptor??
[  856.889670][   T30] audit: type=1326 audit(1768842837.686:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.179061][ T5922] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  857.285105][   T30] audit: type=1326 audit(1768842837.686:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.316225][ T5922] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  857.351096][   T30] audit: type=1326 audit(1768842837.706:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.377688][   T30] audit: type=1326 audit(1768842837.706:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.408031][   T30] audit: type=1326 audit(1768842837.706:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.432059][ T5922] cp2112 0003:10C4:EA90.001E: Part Number: 0x1A Device Version: 0xC4
[  857.527696][   T30] audit: type=1326 audit(1768842837.716:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.554861][   T30] audit: type=1326 audit(1768842837.726:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff532b8f749 code=0x7ffc0000
[  857.777803][T16348] Invalid source name
[  857.781849][T16348] UBIFS error (pid: 16348): cannot open "ubifs", error -22
[  859.314658][T16360] cp2112 0003:10C4:EA90.001E: Error starting transaction: -38
[  859.456421][T16365] FAULT_INJECTION: forcing a failure.
[  859.456421][T16365] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  859.469638][T16365] CPU: 1 UID: 0 PID: 16365 Comm: syz.0.2512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  859.469666][T16365] Tainted: [L]=SOFTLOCKUP
[  859.469672][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  859.469682][T16365] Call Trace:
[  859.469690][T16365]  <TASK>
[  859.469698][T16365]  dump_stack_lvl+0x16c/0x1f0
[  859.469727][T16365]  should_fail_ex+0x512/0x640
[  859.469752][T16365]  _copy_from_user+0x2e/0xd0
[  859.469785][T16365]  copy_msghdr_from_user+0x98/0x160
[  859.469805][T16365]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  859.469828][T16365]  ? __schedule+0x114b/0x5ee0
[  859.469857][T16365]  ___sys_sendmsg+0xfe/0x1d0
[  859.469878][T16365]  ? __pfx____sys_sendmsg+0x10/0x10
[  859.469928][T16365]  __sys_sendmsg+0x16d/0x220
[  859.469949][T16365]  ? __pfx___sys_sendmsg+0x10/0x10
[  859.469984][T16365]  do_syscall_64+0xcd/0xf80
[  859.470009][T16365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.470026][T16365] RIP: 0033:0x7f6b5898f749
[  859.470040][T16365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  859.470061][T16365] RSP: 002b:00007f6b56bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  859.470077][T16365] RAX: ffffffffffffffda RBX: 00007f6b58be6090 RCX: 00007f6b5898f749
[  859.470088][T16365] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009
[  859.470098][T16365] RBP: 00007f6b56bd5090 R08: 0000000000000000 R09: 0000000000000000
[  859.470108][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  859.470118][T16365] R13: 00007f6b58be6128 R14: 00007f6b58be6090 R15: 00007ffefa4e3888
[  859.470143][T16365]  </TASK>
[  859.892455][ T5922] cp2112 0003:10C4:EA90.001E: error reading lock byte: -71
[  860.083553][T16370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2513'.
[  860.247004][T16367] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  860.403610][ T5922] usb 4-1: USB disconnect, device number 26
[  861.673403][ T5922] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  861.893542][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  861.917854][ T5922] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.956290][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0
[  861.988892][ T5922] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  862.029751][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.074402][ T5922] usb 4-1: config 0 descriptor??
[  862.119936][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  862.119949][   T30] audit: type=1400 audit(1768842842.956:1211): avc:  denied  { append } for  pid=16387 comm="syz.4.2520" name="pfkey" dev="proc" ino=4026533388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  862.154077][T16388] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56 sclass=netlink_xfrm_socket pid=16388 comm=syz.4.2520
[  862.172107][   T30] audit: type=1400 audit(1768842843.016:1212): avc:  denied  { ioctl } for  pid=16387 comm="syz.4.2520" path="socket:[56454]" dev="sockfs" ino=56454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  862.267806][   T30] audit: type=1400 audit(1768842843.116:1213): avc:  denied  { getopt } for  pid=16392 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  862.539212][T16404] tipc: Invalid UDP bearer configuration
[  862.539251][T16404] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  862.553661][ T5922] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  863.500564][ T5898] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  863.561605][T16413] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2527'.
[  863.686852][ T5898] usb 5-1: Using ep0 maxpacket: 8
[  863.693557][ T5898] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  863.701818][ T5898] usb 5-1: config 179 has no interface number 0
[  863.711035][ T5922] usb 4-1: USB disconnect, device number 27
[  863.721254][ T5898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  863.751863][ T5898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  863.784004][ T5898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  863.797316][T16427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2532'.
[  863.813338][ T5898] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  863.843419][ T5898] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  863.868957][ T5898] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  863.893375][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.928440][T16400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  864.364152][ T5898] usb 5-1: USB disconnect, device number 75
[  864.370102][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  864.370147][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  864.844959][T16452] vxcan1: entered promiscuous mode
[  864.864953][T16452] team0: Device vxcan1 is of different type
[  865.033764][T16455] bridge0: port 3(team0) entered disabled state
[  865.040552][T16455] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.398809][T16489] net_ratelimit: 12 callbacks suppressed
[  867.398827][T16489] openvswitch: netlink: Missing key (keys=2020040, expected=2000)
[  867.535690][   T30] audit: type=1400 audit(1768842848.376:1214): avc:  denied  { append } for  pid=16496 comm="syz.5.2551" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  867.543395][ T5871] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  867.743407][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  867.755099][ T5871] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  867.783457][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.817253][ T5871] usb 1-1: config 0 descriptor??
[  868.394550][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  868.403227][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  868.780344][T16521] xt_bpf: check failed: parse error
[  868.922806][ T5871] usbhid 1-1:0.0: can't add hid device: -71
[  868.946259][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  868.999054][T16514] vxcan1 speed is unknown, defaulting to 1000
[  869.010642][T16523] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2555'.
[  869.048433][ T5871] usb 1-1: USB disconnect, device number 82
[  869.322391][T16514] lo speed is unknown, defaulting to 1000
[  869.338991][T16514] lo speed is unknown, defaulting to 1000
[  869.403609][ T5898] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  869.555864][ T5898] usb 4-1: Using ep0 maxpacket: 32
[  869.598991][ T5898] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  869.623360][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.644544][ T5898] usb 4-1: config 0 descriptor??
[  869.827885][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  869.852078][ T5898] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  869.859679][ T6044] dummy0: left allmulticast mode
[  869.874362][ T6044] dummy0: left promiscuous mode
[  869.913188][ T6044] bridge0: port 3(dummy0) entered disabled state
[  869.968550][ T6044] bridge_slave_1: left allmulticast mode
[  870.001101][ T6044] bridge_slave_1: left promiscuous mode
[  870.016961][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.104227][ T6044] bridge_slave_0: left allmulticast mode
[  870.110627][ T6044] bridge_slave_0: left promiscuous mode
[  870.117171][ T5922] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  870.138936][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.289695][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  870.301564][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  870.309565][ T5898] usb 4-1: media controller created
[  870.313411][ T5922] usb 1-1: Using ep0 maxpacket: 8
[  870.325516][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  870.343845][ T5922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  870.380915][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  870.412552][ T5898] DVB: Unable to find symbol dib7000p_attach()
[  870.426798][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2563'.
[  870.435361][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  870.465944][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  870.628416][ T5898] rc_core: IR keymap rc-dib0700-rc5 not found
[  870.636666][ T5922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  870.652559][ T5922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  870.654392][ T5898] Registered IR keymap rc-empty
[  870.661837][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.683071][ T5898] dvb-usb: could not initialize remote control.
[  870.689746][ T5898] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  870.704472][ T5898] usb 4-1: USB disconnect, device number 28
[  870.737367][ T5898] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  871.634164][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'.
[  871.657811][T16560] openvswitch: netlink: Missing key (keys=80040, expected=100)
[  871.850732][ T5922] usb 1-1: GET_CAPABILITIES returned 0
[  871.856976][ T5922] usbtmc 1-1:16.0: can't read capabilities
[  872.924114][ T5922] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  873.106988][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  873.162758][ T5922] usb 4-1: config 2 has an invalid interface number: 1 but max is 0
[  873.249164][ T5922] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  873.414974][ T5922] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  873.462315][ T5922] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  873.474673][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.483510][ T5922] usb 4-1: Product: syz
[  873.487784][ T5922] usb 4-1: Manufacturer: syz
[  873.492815][ T5922] usb 4-1: SerialNumber: syz
[  873.502825][ T5922] cdc_acm 4-1:2.1: probe with driver cdc_acm failed with error -22
[  873.512071][ T5922] cdc_acm 4-1:2.0: probe with driver cdc_acm failed with error -22
[  873.748919][ T6003] usb 4-1: USB disconnect, device number 29
[  873.926913][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  873.937516][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  873.946647][ T6044] bond0 (unregistering): Released all slaves
[  874.039621][ T6044] bond1 (unregistering): Released all slaves
[  874.131169][ T6044] bond2 (unregistering): Released all slaves
[  874.232218][ T6044] bond3 (unregistering): (slave wlan0): Releasing active interface
[  874.242766][ T6044] bond3 (unregistering): Released all slaves
[  874.318211][T15899] usb 1-1: USB disconnect, device number 83
[  874.353975][ T6044] tipc: Left network mode
[  874.409132][ T6044] IPVS: stopping backup sync thread 12209 ...
[  874.558878][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2576'.
[  874.930952][ T5878] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  875.075234][T16603] overlayfs: failed to clone upperpath
[  875.167670][ T5878] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad
[  875.190996][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.447945][ T6044] hsr_slave_0: left promiscuous mode
[  875.454523][ T6044] hsr_slave_1: left promiscuous mode
[  876.486191][ T5878] usb 1-1: config 0 descriptor??
[  876.553366][T15899] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  876.708686][T15899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  876.738424][T15899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  876.771456][T15899] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  876.792585][T15899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.809385][T15899] usb 4-1: Product: syz
[  876.813686][T15899] usb 4-1: Manufacturer: syz
[  876.825084][T15899] usb 4-1: SerialNumber: syz
[  876.917874][T15899] usb 4-1: config 0 descriptor??
[  876.936432][T16612] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  876.949986][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.963710][T16612] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  876.980665][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.131849][ T6044] team0 (unregistering): Port device team_slave_1 removed
[  877.185202][ T6044] team0 (unregistering): Port device team_slave_0 removed
[  877.204915][T16611] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  877.231344][T16611] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  877.253198][ T5878] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  877.262894][ T6003] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  877.413447][ T6003] usb 5-1: Using ep0 maxpacket: 32
[  877.422204][ T6003] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  877.431740][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.448935][ T6003] usb 5-1: config 0 descriptor??
[  877.457487][ T6003] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state
[  877.464668][ T6003] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  877.480441][ T6003] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  877.623210][ T9050] smc: removing ib device syz2
[  877.649929][T15899] Error reading MAC address
[  877.657819][T15899] usb 4-1: USB disconnect, device number 30
[  877.682263][ T5898] usb 5-1: USB disconnect, device number 76
[  877.788311][T16626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  877.857812][ T6003] usb 1-1: USB disconnect, device number 84
[  877.904548][T16640] openvswitch: netlink: Actions may not be safe on all matching packets
[  877.959879][T16640] vlan2: entered promiscuous mode
[  877.981257][T16640] vlan2: entered allmulticast mode
[  877.993668][T16640] hsr_slave_1: entered allmulticast mode
[  878.022753][T16644] FAULT_INJECTION: forcing a failure.
[  878.022753][T16644] name failslab, interval 1, probability 0, space 0, times 0
[  878.035687][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.5.2588 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  878.035714][T16644] Tainted: [L]=SOFTLOCKUP
[  878.035720][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  878.035730][T16644] Call Trace:
[  878.035736][T16644]  <TASK>
[  878.035743][T16644]  dump_stack_lvl+0x16c/0x1f0
[  878.035774][T16644]  should_fail_ex+0x512/0x640
[  878.035790][T16644]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  878.035811][T16644]  should_failslab+0xc2/0x120
[  878.035834][T16644]  kmem_cache_alloc_noprof+0x83/0x770
[  878.035858][T16644]  ? skb_clone+0x190/0x3f0
[  878.035883][T16644]  ? skb_clone+0x190/0x3f0
[  878.035901][T16644]  skb_clone+0x190/0x3f0
[  878.035921][T16644]  netlink_deliver_tap+0xabd/0xd30
[  878.035948][T16644]  netlink_unicast+0x64c/0x870
[  878.035974][T16644]  ? __pfx_netlink_unicast+0x10/0x10
[  878.036007][T16644]  netlink_sendmsg+0x8c8/0xdd0
[  878.036034][T16644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.036067][T16644]  ____sys_sendmsg+0xa5d/0xc30
[  878.036092][T16644]  ? copy_msghdr_from_user+0x10a/0x160
[  878.036112][T16644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  878.036147][T16644]  ___sys_sendmsg+0x134/0x1d0
[  878.036168][T16644]  ? __pfx____sys_sendmsg+0x10/0x10
[  878.036208][T16644]  ? fget_raw+0x10/0x50
[  878.036239][T16644]  __sys_sendmsg+0x16d/0x220
[  878.036260][T16644]  ? __pfx___sys_sendmsg+0x10/0x10
[  878.036296][T16644]  do_syscall_64+0xcd/0xf80
[  878.036322][T16644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.036339][T16644] RIP: 0033:0x7f8f82b8f749
[  878.036354][T16644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  878.036369][T16644] RSP: 002b:00007f8f83a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  878.036386][T16644] RAX: ffffffffffffffda RBX: 00007f8f82de6090 RCX: 00007f8f82b8f749
[  878.036397][T16644] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009
[  878.036407][T16644] RBP: 00007f8f83a9f090 R08: 0000000000000000 R09: 0000000000000000
[  878.036417][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.036427][T16644] R13: 00007f8f82de6128 R14: 00007f8f82de6090 R15: 00007ffe44ee9ff8
[  878.036451][T16644]  </TASK>
[  880.539964][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2596'.
[  880.555434][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'.
[  880.569849][T16672] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  880.583086][T16674] loop3: detected capacity change from 0 to 1
[  880.613734][T16674] Dev loop3: unable to read RDB block 1
[  880.638869][T16674]  loop3: unable to read partition table
[  880.673914][T16674] loop3: partition table beyond EOD, truncated
[  880.707036][T16674] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  882.047081][ T6044] IPVS: stop unused estimator thread 0...
[  882.509896][T16686] fuse: Unknown parameter '
'
[  882.915581][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'.
[  885.336429][T16719] loop3: detected capacity change from 0 to 1
[  885.373381][T16719] Dev loop3: unable to read RDB block 1
[  885.379336][T16719]  loop3: unable to read partition table
[  885.389470][T16719] loop3: partition table beyond EOD, truncated
[  885.397066][T16719] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  885.623477][   T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  885.696696][T16728] !
: renamed from dummy0 (while UP)
[  885.856597][   T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  885.866014][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.878030][   T10] usb 5-1: config 0 descriptor??
[  885.886446][   T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  886.400825][   T10] gspca_sn9c2028: read1 error -32
[  886.407627][   T10] gspca_sn9c2028: read1 error -32
[  886.551945][   T10] gspca_sn9c2028: read1 error -71
[  886.631804][   T10] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  886.661926][   T10] usb 5-1: USB disconnect, device number 77
[  887.260906][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'.
[  887.298543][ T5922] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  887.316872][T16761] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.584206][T16770] binder: 16769:16770 ioctl c0306201 200000000080 returned -14
[  887.593317][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  887.653974][ T5922] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  887.687996][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.803485][ T5922] usb 4-1: Product: syz
[  887.807683][ T5922] usb 4-1: Manufacturer: syz
[  887.812293][ T5922] usb 4-1: SerialNumber: syz
[  888.284622][ T5922] usb 4-1: config 0 descriptor??
[  888.315118][ T5922] usb-storage 4-1:0.0: USB Mass Storage device detected
[  888.330527][ T5922] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  888.338033][ T5922] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  888.338033][ T5922]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  888.566107][ T5922] usb 4-1: USB disconnect, device number 31
[  889.281971][T16795] loop3: detected capacity change from 0 to 1
[  889.308797][T16795] Dev loop3: unable to read RDB block 1
[  889.318853][T16795]  loop3: unable to read partition table
[  889.334677][T16795] loop3: partition table beyond EOD, truncated
[  889.364115][T16795] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  889.428883][T16797] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2632'.
[  890.014611][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'.
[  891.143941][T16846] loop3: detected capacity change from 0 to 1
[  891.167066][T16846] Dev loop3: unable to read RDB block 1
[  891.180452][T16846]  loop3: unable to read partition table
[  891.203634][T16846] loop3: partition table beyond EOD, truncated
[  891.222350][T16846] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  891.293421][T15899] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  891.443376][T15899] usb 4-1: Using ep0 maxpacket: 16
[  891.459671][T15899] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  891.480595][T15899] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  891.520096][T15899] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  891.556993][T15899] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  891.600910][T15899] usb 4-1: config 0 interface 0 has no altsetting 0
[  891.622879][T15899] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  891.636105][T15899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.661454][T15899] usb 4-1: Product: syz
[  891.675222][T15899] usb 4-1: Manufacturer: syz
[  891.688744][T15899] usb 4-1: SerialNumber: syz
[  891.709631][T15899] usb 4-1: config 0 descriptor??
[  891.722534][   T30] audit: type=1400 audit(1768842872.566:1215): avc:  denied  { ioctl } for  pid=16857 comm="syz.4.2647" path="ipc:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  892.105596][ T5898] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  892.286973][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  892.345355][T16870] fuse: Unknown parameter '0x0000000000000006'
[  892.356936][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.419397][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  892.491961][ T5898] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00
[  892.512632][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.544526][ T5898] usb 5-1: config 0 descriptor??
[  892.782593][T16862] fuse: Bad value for 'fd'
[  893.703795][ T5898] hid-corsair-void 0003:1B1C:0A16.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:0a16] on usb-dummy_hcd.4-1/input0
[  894.176034][ T5871] hid-corsair-void 0003:1B1C:0A16.0020: failed to request firmware (reason: -71)
[  894.185464][ T5898] hid-corsair-void 0003:1B1C:0A16.0020: failed to request battery (reason: -71)
[  894.196653][ T5922] usb 5-1: USB disconnect, device number 78
[  894.335389][   T30] audit: type=1400 audit(1768842875.186:1216): avc:  denied  { read } for  pid=16881 comm="syz.6.2652" path="socket:[58842]" dev="sockfs" ino=58842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  894.517159][T15899] usb 4-1: Can not set alternate setting to 1, error: -71
[  894.538381][T15899] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -71
[  894.571816][T15899] usb 4-1: USB disconnect, device number 32
[  895.627009][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'.
[  895.922725][   T30] audit: type=1400 audit(1768842876.766:1217): avc:  denied  { bind } for  pid=16919 comm="syz.6.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  896.450699][   T30] audit: type=1400 audit(1768842876.786:1218): avc:  denied  { name_bind } for  pid=16919 comm="syz.6.2660" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  896.514581][   T30] audit: type=1400 audit(1768842876.786:1219): avc:  denied  { node_bind } for  pid=16919 comm="syz.6.2660" saddr=::ffff:224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  896.579969][   T30] audit: type=1400 audit(1768842876.856:1220): avc:  denied  { connect } for  pid=16917 comm="syz.4.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  896.775037][T16930] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2664'.
[  896.964525][T16938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2666'.
[  896.973369][ T5878] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  897.011615][   T30] audit: type=1400 audit(1768842877.856:1221): avc:  denied  { ioctl } for  pid=16935 comm="syz.4.2666" path="socket:[59717]" dev="sockfs" ino=59717 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  897.124166][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'.
[  897.163551][ T5878] usb 6-1: Using ep0 maxpacket: 8
[  897.178119][ T5878] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  897.194446][ T5878] usb 6-1: config 179 has no interface number 0
[  897.203345][ T5878] usb 6-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[  897.203488][T16947] netlink: 'syz.4.2668': attribute type 1 has an invalid length.
[  897.224132][ T5878] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  897.235769][T16947] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2668'.
[  897.245933][ T5878] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  897.257913][ T5878] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  897.268668][ T5878] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  897.298373][ T5878] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb
[  897.318642][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.351745][T16928] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  897.577494][ T5878] usb 6-1: USB disconnect, device number 34
[  897.659891][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2673'.
[  897.670952][T16961] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.679137][T16961] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.138491][T16974] lo speed is unknown, defaulting to 1000
[  898.151745][T16974] lo speed is unknown, defaulting to 1000
[  898.452354][T16973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2676'.
[  898.570337][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'.
[  898.903565][ T5878] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  899.230424][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  899.264682][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.281195][ T5878] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  899.297288][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2685'.
[  899.307849][ T5878] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  899.338190][ T5878] usb 5-1: Manufacturer: syz
[  899.361854][ T5878] usb 5-1: config 0 descriptor??
[  899.514480][T17003] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2687'.
[  899.576091][T17005] comedi: valid board names for 8255 driver are:
[  899.600150][T17005]  8255
[  899.604389][T17005] comedi: valid board names for vmk80xx driver are:
[  899.626602][T17005]  vmk80xx
[  899.629648][T17005] comedi: valid board names for usbduxsigma driver are:
[  899.665636][T17005]  usbduxsigma
[  899.675236][T17005] comedi: valid board names for usbduxfast driver are:
[  899.688206][T17005]  usbduxfast
[  899.692492][T17008] x_tables: ip_tables: TCPOPTSTRIP target: only valid for protocol 6
[  899.700974][T17005] comedi: valid board names for usbdux driver are:
[  899.710183][T17005]  usbdux
[  899.713613][T17005] comedi: valid board names for ni6501 driver are:
[  899.723351][T17005]  ni6501
[  899.726298][T17005] comedi: valid board names for dt9812 driver are:
[  899.733012][T17005]  dt9812
[  899.736300][T17005] comedi: valid board names for ni_labpc_cs driver are:
[  899.744658][T17005]  ni_labpc_cs
[  899.749950][T17005] comedi: valid board names for ni_daq_700 driver are:
[  899.768564][T17005]  ni_daq_700
[  899.778196][T17005] comedi: valid board names for labpc_pci driver are:
[  899.795460][T17005]  labpc_pci
[  899.803929][T17005] comedi: valid board names for adl_pci9118 driver are:
[  899.814659][T17005]  pci9118dg
[  899.820933][T17005]  pci9118hg
[  899.833622][T17005]  pci9118hr
[  899.843791][T17005] comedi: valid board names for 8255_pci driver are:
[  899.858484][T17005]  8255_pci
[  899.867474][T17005] comedi: valid board names for s526 driver are:
[  899.892498][T17005]  s526
[  899.897838][T17005] comedi: valid board names for multiq3 driver are:
[  899.910456][T17005]  multiq3
[  899.916784][T17005] comedi: valid board names for pcmuio driver are:
[  899.923735][T17005]  pcmuio48
[  899.926955][T17005]  pcmuio96
[  899.930140][T17005] comedi: valid board names for pcmmio driver are:
[  899.939087][T17005]  pcmmio
[  899.942107][T17005] comedi: valid board names for pcmda12 driver are:
[  899.952003][T17005]  pcmda12
[  899.956262][T17005] comedi: valid board names for pcmad driver are:
[  899.966564][T17005]  pcmad12
[  899.970923][T17005]  pcmad16
[  899.974159][T17005] comedi: valid board names for ni_labpc driver are:
[  899.981019][T17005]  lab-pc-1200
[  899.984601][T17005]  lab-pc-1200ai
[  899.988140][T17005]  lab-pc+
[  899.991227][T17005] comedi: valid board names for atmio16 driver are:
[  899.998184][T17005]  atmio16
[  900.001436][T17005]  atmio16d
[  900.004588][T17005] comedi: valid board names for ni_at_ao driver are:
[  900.011344][T17005]  at-ao-6
[  900.014541][T17005]  at-ao-10
[  900.017642][T17005] comedi: valid board names for ni_at_a2150 driver are:
[  900.024785][T17005]  ni_at_a2150
[  900.028147][T17005] comedi: valid board names for adq12b driver are:
[  900.035397][T17005]  adq12b
[  900.038333][T17005] comedi: valid board names for mpc624 driver are:
[  900.048077][T17005]  mpc624
[  900.051021][T17005] comedi: valid board names for c6xdigio driver are:
[  900.057946][T17005]  c6xdigio
[  900.061047][T17005] comedi: valid board names for aio_iiro_16 driver are:
[  900.070168][T17005]  aio_iiro_16
[  900.075961][T17005] comedi: valid board names for aio_aio12_8 driver are:
[  900.083019][T17005]  aio_aio12_8
[  900.086482][T17005]  aio_ai12_8
[  900.089756][T17005]  aio_ao12_4
[  900.093147][T17005] comedi: valid board names for fl512 driver are:
[  900.099698][T17005]  fl512
[  900.102541][T17005] comedi: valid board names for dmm32at driver are:
[  900.109487][T17005]  dmm32at
[  900.112666][T17005] comedi: valid board names for dt282x driver are:
[  900.119329][T17005]  dt2821
[  900.122367][T17005]  dt2821-f
[  900.142629][T17005]  dt2821-g
[  900.145992][T17005]  dt2823
[  900.152748][T17005]  dt2824-pgh
[  900.162865][T17005]  dt2824-pgl
[  900.172894][T17005]  dt2825
[  900.579294][T17005]  dt2827
[  900.579954][ T5878] uclogic 0003:256C:006D.0021: interface is invalid, ignoring
[  900.582249][T17005]  dt2828
[  900.582277][T17005]  dt2829
[  900.596356][T17005]  dt21-ez
[  900.600476][T17005]  dt23-ez
[  900.609522][T17005]  dt24-ez
[  900.613664][T17005]  dt24-ez-pgl
[  900.617036][T17005] comedi: valid board names for dt2817 driver are:
[  900.632411][T17005]  dt2817
[  900.637839][T17005] comedi: valid board names for dt2815 driver are:
[  900.650331][T17005]  dt2815
[  900.657672][T17005] comedi: valid board names for dt2814 driver are:
[  900.679474][T17005]  dt2814
[  900.684603][T17005] comedi: valid board names for dt2811 driver are:
[  900.692700][T17005]  dt2811-pgh
[  900.696106][T17005]  dt2811-pgl
[  900.699373][T17005] comedi: valid board names for dt2801 driver are:
[  900.705953][T17005]  dt2801
[  900.708867][T17005] comedi: valid board names for das6402 driver are:
[  900.715645][T17005]  das6402-12
[  900.718969][T17005]  das6402-16
[  900.722232][T17005] comedi: valid board names for das1800 driver are:
[  900.728867][T17005]  das-1701st
[  900.737437][T17005]  das-1701st-da
[  900.741006][T17005]  das-1702st
[  900.745466][T17005]  das-1702st-da
[  900.749013][T17005]  das-1702hr
[  900.752275][T17005]  das-1702hr-da
[  900.756231][T17005]  das-1701ao
[  900.759508][T17005]  das-1702ao
[  900.762818][T17005]  das-1801st
[  900.766159][T17005]  das-1801st-da
[  900.769708][T17005]  das-1802st
[  900.773014][T17005]  das-1802st-da
[  900.776699][T17005]  das-1802hr
[  900.779992][T17005]  das-1802hr-da
[  900.838001][T17005]  das-1801hc
[  900.842844][T17025] __nla_validate_parse: 1 callbacks suppressed
[  900.842855][T17025] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2693'.
[  900.859118][T17005]  das-1802hc
[  900.862628][T17005]  das-1801ao
[  900.865932][T17005]  das-1802ao
[  900.869191][T17005] comedi: valid board names for das800 driver are:
[  900.877637][T17005]  das-800
[  900.880647][T17005]  cio-das800
[  900.884644][T17005]  das-801
[  900.887651][T17005]  cio-das801
[  900.890904][T17005]  das-802
[  900.895698][T17005]  cio-das802
[  900.898982][T17005]  cio-das802/16
[  900.902525][T17005] comedi: valid board names for isa-das08 driver are:
[  900.909372][T17005]  isa-das08
[  900.912736][T17005]  das08-pgm
[  900.919724][T17005]  das08-pgh
[  900.922937][T17005]  das08-pgl
[  900.929987][T17005]  das08-aoh
[  900.940668][T17005]  das08-aol
[  900.944034][T17005]  das08-aom
[  900.947202][T17005]  das08/jr-ao
[  900.950539][T17005]  das08jr-16-ao
[  900.954138][T17005]  pc104-das08
[  900.957690][T17005]  das08jr/16
[  900.961038][T17005] comedi: valid board names for das16m1 driver are:
[  900.967736][T17005]  das16m1
[  900.970779][T17005] comedi: valid board names for dac02 driver are:
[  900.978450][T17005]  dac02
[  900.981414][T17005] comedi: valid board names for rti802 driver are:
[  900.988657][T17005]  rti802
[  900.991637][T17005] comedi: valid board names for rti800 driver are:
[  900.998232][T17005]  rti800
[  901.001155][T17005]  rti815
[  901.004245][T17005] comedi: valid board names for pcm3724 driver are:
[  901.010827][T17005]  pcm3724
[  901.019820][T17005] comedi: valid board names for pcl818 driver are:
[  901.032176][T17005]  pcl818l
[  901.035330][T17005]  pcl818h
[  901.038408][T17005]  pcl818hd
[  901.041516][T17005]  pcl818hg
[  901.045516][T17005]  pcl818
[  901.048642][T17005]  pcl718
[  901.051623][T17005]  pcm3718
[  901.055371][T17005] comedi: valid board names for pcl816 driver are:
[  901.061937][T17005]  pcl816
[  901.067352][T17005]  pcl814b
[  901.070419][T17005] comedi: valid board names for pcl812 driver are:
[  901.078873][T17005]  pcl812
[  901.081882][T17005]  pcl812pg
[  901.088605][T17005]  acl8112pg
[  901.091888][T17005]  acl8112dg
[  901.095279][T17005]  acl8112hg
[  901.098568][T17005]  a821pgl
[  901.101663][T17005]  a821pglnda
[  901.105065][T17005]  a821pgh
[  901.108111][T17005]  a822pgl
[  901.111267][T17005]  a822pgh
[  901.114844][T17005]  a823pgl
[  901.117952][T17005]  a823pgh
[  901.121067][T17005]  pcl813
[  901.124435][T17005]  pcl813b
[  901.127498][T17005]  acl8113
[  901.130536][T17005]  iso813
[  901.155311][ T5878] usb 5-1: USB disconnect, device number 79
[  901.181174][T17005]  acl8216
[  901.189136][T17005]  a826pg
[  901.194673][T17005] comedi: valid board names for pcl730 driver are:
[  901.201343][T17005]  pcl730
[  901.204602][T17005]  iso730
[  901.207583][T17005]  acl7130
[  901.210690][T17005]  pcm3730
[  901.213876][T17005]  pcl725
[  901.216849][T17005]  p8r8dio
[  901.219895][T17005]  acl7225b
[  901.222991][T17005]  p16r16dio
[  901.226351][T17005]  pcl733
[  901.229313][T17005]  pcl734
[  901.232282][T17005]  opmm-1616-xt
[  901.235888][T17005]  pearl-mm-p
[  901.239234][T17005]  ir104-pbf
[  901.253612][T17005] comedi: valid board names for pcl726 driver are:
[  901.538329][T17005]  pcl726
[  901.541290][T17005]  pcl727
[  901.544236][T17005]  pcl728
[  901.547213][T17005]  acl6126
[  901.550205][T17005]  acl6128
[  901.553203][T17005] comedi: valid board names for pcl724 driver are:
[  901.559810][T17005]  pcl724
[  901.562715][T17005]  pcl722
[  901.575013][T17005]  pcl731
[  901.577954][T17005]  acl7122
[  901.580944][T17005]  acl7124
[  901.623408][T17005]  pet48dio
[  901.641957][T17005]  pcmio48
[  901.645237][T17005]  onyx-mm-dio
[  901.653498][T17005] comedi: valid board names for pcl711 driver are:
[  901.662091][T17005]  pcl711
[  901.665118][T17005]  pcl711b
[  901.668115][T17005]  acl8112hg
[  901.671368][T17005]  acl8112dg
[  901.674633][T17005] comedi: valid board names for amplc_pc263 driver are:
[  901.693449][T17005]  pc263
[  901.719474][T17005] comedi: valid board names for amplc_pc236 driver are:
[  901.729582][T17005]  pc36at
[  901.734959][T17005] comedi: valid board names for amplc_dio200 driver are:
[  901.749795][T17005]  pc212e
[  901.752827][T17005]  pc214e
[  901.756089][T17005]  pc215e
[  901.759022][T17005]  pc218e
[  901.761948][T17005]  pc272e
[  901.765817][T17005] comedi: valid board names for comedi_parport driver are:
[  901.780147][T17005]  comedi_parport
[  901.795699][T17005] comedi: valid board names for comedi_test driver are:
[  901.811784][T17005]  comedi_test
[  901.820491][T17005] comedi: valid board names for comedi_bond driver are:
[  901.830579][T17005]  comedi_bond
[  904.218012][T17085] PKCS8: Unsupported PKCS#8 version
[  904.408515][T17085] syzkaller0: entered promiscuous mode
[  904.425426][T17088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17088 comm=syz.3.2706
[  904.450249][T17085] syzkaller0: entered allmulticast mode
[  904.645721][ T5871] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  904.814694][ T5871] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  904.847867][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.881719][ T5871] usb 5-1: config 0 descriptor??
[  904.914716][ T5871] cp210x 5-1:0.0: cp210x converter detected
[  905.313600][ T5871] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  905.539817][ T5871] usb 5-1: cp210x converter now attached to ttyUSB0
[  905.740025][T15899] usb 5-1: USB disconnect, device number 80
[  905.765605][T15899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  905.796463][T15899] cp210x 5-1:0.0: device disconnected
[  905.813904][ T5871] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  906.003366][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  906.019193][ T5871] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  906.034075][ T5871] usb 1-1: config 0 has no interface number 0
[  906.046900][ T5871] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  906.081243][ T5871] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  906.092781][ T5871] usb 1-1: config 0 interface 126 has no altsetting 0
[  906.134598][ T5871] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  906.149738][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.161698][ T5871] usb 1-1: Product: syz
[  906.171982][ T5871] usb 1-1: Manufacturer: syz
[  906.185355][ T5871] usb 1-1: SerialNumber: syz
[  906.196153][ T5871] usb 1-1: config 0 descriptor??
[  906.209294][T17106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  906.216857][T17106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  907.015654][ T5871] ir_usb 1-1:0.126: IR Dongle converter detected
[  907.106939][T17106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2711'.
[  907.126712][   T30] audit: type=1400 audit(1768842887.976:1222): avc:  denied  { view } for  pid=17105 comm="syz.0.2711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  907.796613][T17119] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  907.807202][T17119] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  907.817441][   T30] audit: type=1400 audit(1768842888.666:1223): avc:  denied  { firmware_load } for  pid=17118 comm="syz.6.2715" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  907.838057][T17119] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  908.057239][ T5871] usb 1-1: IRDA class descriptor not found, device not bound
[  908.163393][ T5898] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  908.246181][ T5871] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  908.339518][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.360592][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.377698][ T5898] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  908.388428][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.403474][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  908.417040][ T5871] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  908.426315][ T5898] usb 5-1: config 0 descriptor??
[  908.432897][ T5871] usb 6-1: config 0 has no interface number 0
[  908.458426][ T5871] usb 6-1: config 0 interface 184 has no altsetting 0
[  908.494522][ T5871] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  908.504568][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.512682][ T5871] usb 6-1: Product: syz
[  908.517737][ T5871] usb 6-1: Manufacturer: syz
[  908.522473][ T5871] usb 6-1: SerialNumber: syz
[  908.552298][ T5871] usb 6-1: config 0 descriptor??
[  908.590982][ T5871] smsc75xx v1.0.0
[  908.832326][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  908.844485][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  908.854785][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  908.868647][ T5871] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  908.914495][ T5898] usbhid 5-1:0.0: can't add hid device: -71
[  908.929181][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  908.952467][ T5898] usb 5-1: USB disconnect, device number 81
[  909.438726][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.450074][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.527841][ T5898] usb 6-1: USB disconnect, device number 35
[  909.573501][ T6003] usb 1-1: USB disconnect, device number 85
[  909.637755][T17156] ufs: You didn't specify the type of your ufs filesystem
[  909.637755][T17156] 
[  909.637755][T17156] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  909.637755][T17156] 
[  909.637755][T17156] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  909.669264][T17156] ufs: ufstype=old is supported read-only
[  909.786531][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'.
[  909.970709][T17174] loop3: detected capacity change from 0 to 1
[  909.999080][T17174] Dev loop3: unable to read RDB block 1
[  910.011504][T17174]  loop3: unable to read partition table
[  910.082225][T17175] FAULT_INJECTION: forcing a failure.
[  910.082225][T17175] name failslab, interval 1, probability 0, space 0, times 0
[  910.095499][T17175] CPU: 1 UID: 0 PID: 17175 Comm: syz.3.2729 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  910.095527][T17175] Tainted: [L]=SOFTLOCKUP
[  910.095533][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  910.095542][T17175] Call Trace:
[  910.095549][T17175]  <TASK>
[  910.095556][T17175]  dump_stack_lvl+0x16c/0x1f0
[  910.095584][T17175]  should_fail_ex+0x512/0x640
[  910.095604][T17175]  ? __kmalloc_cache_noprof+0x5f/0x800
[  910.095625][T17175]  should_failslab+0xc2/0x120
[  910.095647][T17175]  __kmalloc_cache_noprof+0x80/0x800
[  910.095664][T17175]  ? xskq_create+0x52/0x1d0
[  910.095686][T17175]  ? xskq_create+0x52/0x1d0
[  910.095703][T17175]  xskq_create+0x52/0x1d0
[  910.095723][T17175]  xsk_setsockopt+0x8d2/0xc00
[  910.095741][T17175]  ? __pfx_xsk_setsockopt+0x10/0x10
[  910.095761][T17175]  ? selinux_socket_setsockopt+0x4c/0x80
[  910.095787][T17175]  ? selinux_socket_setsockopt+0x6a/0x80
[  910.095808][T17175]  ? __pfx_xsk_setsockopt+0x10/0x10
[  910.095827][T17175]  do_sock_setsockopt+0xf3/0x1d0
[  910.095853][T17175]  __sys_setsockopt+0x1a0/0x230
[  910.095876][T17175]  __x64_sys_setsockopt+0xbd/0x160
[  910.095892][T17175]  ? do_syscall_64+0x91/0xf80
[  910.095915][T17175]  ? lockdep_hardirqs_on+0x7c/0x110
[  910.095938][T17175]  do_syscall_64+0xcd/0xf80
[  910.095962][T17175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.095979][T17175] RIP: 0033:0x7f392898f749
[  910.095993][T17175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  910.096009][T17175] RSP: 002b:00007f3929890038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  910.096026][T17175] RAX: ffffffffffffffda RBX: 00007f3928be6180 RCX: 00007f392898f749
[  910.096038][T17175] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  910.096047][T17175] RBP: 00007f3929890090 R08: 0000000000000004 R09: 0000000000000000
[  910.096057][T17175] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  910.096067][T17175] R13: 00007f3928be6218 R14: 00007f3928be6180 R15: 00007ffdfcb9c738
[  910.096092][T17175]  </TASK>
[  910.983749][T17174] loop3: partition table beyond EOD, truncated
[  910.989909][T17174] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  911.071582][T17177] overlayfs: missing 'lowerdir'
[  911.227428][   T30] audit: type=1400 audit(1768842892.076:1224): avc:  denied  { map } for  pid=17182 comm="syz.0.2732" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  912.204222][T17195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2733'.
[  913.659563][   T30] audit: type=1400 audit(1768842894.506:1225): avc:  denied  { read } for  pid=17203 comm="syz.0.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  913.795296][T17210] netlink: 'syz.6.2738': attribute type 4 has an invalid length.
[  913.892889][ T5898] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  914.396385][T17210] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2738'.
[  914.713818][T17205] delete_channel: no stack
[  914.793364][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  914.804990][ T5898] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 5
[  914.826374][ T5898] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  914.849891][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  914.864009][ T5898] usb 6-1: Product: syz
[  914.868197][ T5898] usb 6-1: Manufacturer: syz
[  914.876472][ T5898] usb 6-1: SerialNumber: syz
[  914.894368][ T5898] usb 6-1: config 0 descriptor??
[  914.974876][   T30] audit: type=1400 audit(1768842895.826:1226): avc:  denied  { lock } for  pid=17226 comm="syz.3.2743" path="socket:[60911]" dev="sockfs" ino=60911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  914.984247][T17202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  915.077901][T17230] FAULT_INJECTION: forcing a failure.
[  915.077901][T17230] name failslab, interval 1, probability 0, space 0, times 0
[  915.090847][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.0.2742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  915.090873][T17230] Tainted: [L]=SOFTLOCKUP
[  915.090879][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  915.090889][T17230] Call Trace:
[  915.090895][T17230]  <TASK>
[  915.090902][T17230]  dump_stack_lvl+0x16c/0x1f0
[  915.090929][T17230]  should_fail_ex+0x512/0x640
[  915.090944][T17230]  ? __kmalloc_cache_node_noprof+0x62/0x830
[  915.090968][T17230]  should_failslab+0xc2/0x120
[  915.090989][T17230]  __kmalloc_cache_node_noprof+0x83/0x830
[  915.091009][T17230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.091025][T17230]  ? __get_vm_area_node+0x101/0x330
[  915.091049][T17230]  ? __schedule+0x10b9/0x5ee0
[  915.091073][T17230]  ? __get_vm_area_node+0x101/0x330
[  915.091094][T17230]  __get_vm_area_node+0x101/0x330
[  915.091114][T17230]  ? __kasan_kmalloc+0xaa/0xb0
[  915.091133][T17230]  ? xskq_create+0xfb/0x1d0
[  915.091151][T17230]  __vmalloc_node_range_noprof+0x247/0x16b0
[  915.091176][T17230]  ? xskq_create+0xfb/0x1d0
[  915.091201][T17230]  ? xskq_create+0xfb/0x1d0
[  915.091225][T17230]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  915.091259][T17230]  ? xskq_create+0xfb/0x1d0
[  915.091276][T17230]  vmalloc_user_noprof+0x9e/0xe0
[  915.091300][T17230]  ? xskq_create+0xfb/0x1d0
[  915.091318][T17230]  xskq_create+0xfb/0x1d0
[  915.091338][T17230]  xsk_setsockopt+0x8d2/0xc00
[  915.091356][T17230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  915.091382][T17230]  ? selinux_socket_setsockopt+0x6a/0x80
[  915.091410][T17230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  915.091429][T17230]  do_sock_setsockopt+0xf3/0x1d0
[  915.091455][T17230]  __sys_setsockopt+0x1a0/0x230
[  915.091478][T17230]  __x64_sys_setsockopt+0xbd/0x160
[  915.091495][T17230]  ? do_syscall_64+0x91/0xf80
[  915.091516][T17230]  ? lockdep_hardirqs_on+0x7c/0x110
[  915.091538][T17230]  do_syscall_64+0xcd/0xf80
[  915.091562][T17230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.091579][T17230] RIP: 0033:0x7f6b5898f749
[  915.091593][T17230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  915.091608][T17230] RSP: 002b:00007f6b56bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  915.091624][T17230] RAX: ffffffffffffffda RBX: 00007f6b58be6180 RCX: 00007f6b5898f749
[  915.091635][T17230] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  915.091645][T17230] RBP: 00007f6b56bb4090 R08: 0000000000000004 R09: 0000000000000000
[  915.091653][T17230] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  915.091662][T17230] R13: 00007f6b58be6218 R14: 00007f6b58be6180 R15: 00007ffefa4e3888
[  915.091686][T17230]  </TASK>
[  915.356889][T17230] syz.0.2742: vmalloc error: size 2101248, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  915.372718][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.0.2742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  915.372746][T17230] Tainted: [L]=SOFTLOCKUP
[  915.372752][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  915.372762][T17230] Call Trace:
[  915.372770][T17230]  <TASK>
[  915.372778][T17230]  dump_stack_lvl+0x16c/0x1f0
[  915.372807][T17230]  warn_alloc+0x248/0x3a0
[  915.372827][T17230]  ? __pfx_warn_alloc+0x10/0x10
[  915.372844][T17230]  ? trace_kmalloc+0x2b/0xb0
[  915.372866][T17230]  ? __get_vm_area_node+0x101/0x330
[  915.372893][T17230]  ? __kasan_kmalloc+0x8a/0xb0
[  915.372912][T17230]  ? __get_vm_area_node+0x208/0x330
[  915.372937][T17230]  ? xskq_create+0xfb/0x1d0
[  915.372956][T17230]  __vmalloc_node_range_noprof+0xbe0/0x16b0
[  915.372989][T17230]  ? xskq_create+0xfb/0x1d0
[  915.373013][T17230]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  915.373048][T17230]  ? xskq_create+0xfb/0x1d0
[  915.373064][T17230]  vmalloc_user_noprof+0x9e/0xe0
[  915.373088][T17230]  ? xskq_create+0xfb/0x1d0
[  915.373107][T17230]  xskq_create+0xfb/0x1d0
[  915.373127][T17230]  xsk_setsockopt+0x8d2/0xc00
[  915.373146][T17230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  915.373172][T17230]  ? selinux_socket_setsockopt+0x6a/0x80
[  915.373192][T17230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  915.373211][T17230]  do_sock_setsockopt+0xf3/0x1d0
[  915.373240][T17230]  __sys_setsockopt+0x1a0/0x230
[  915.373263][T17230]  __x64_sys_setsockopt+0xbd/0x160
[  915.373280][T17230]  ? do_syscall_64+0x91/0xf80
[  915.373302][T17230]  ? lockdep_hardirqs_on+0x7c/0x110
[  915.373323][T17230]  do_syscall_64+0xcd/0xf80
[  915.373347][T17230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.373364][T17230] RIP: 0033:0x7f6b5898f749
[  915.373379][T17230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  915.373395][T17230] RSP: 002b:00007f6b56bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  915.373411][T17230] RAX: ffffffffffffffda RBX: 00007f6b58be6180 RCX: 00007f6b5898f749
[  915.373421][T17230] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  915.373431][T17230] RBP: 00007f6b56bb4090 R08: 0000000000000004 R09: 0000000000000000
[  915.373441][T17230] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  915.373450][T17230] R13: 00007f6b58be6218 R14: 00007f6b58be6180 R15: 00007ffefa4e3888
[  915.373474][T17230]  </TASK>
[  915.609150][T17230] Mem-Info:
[  915.612331][T17230] active_anon:8773 inactive_anon:0 isolated_anon:0
[  915.612331][T17230]  active_file:21975 inactive_file:41013 isolated_file:0
[  915.612331][T17230]  unevictable:768 dirty:349 writeback:0
[  915.612331][T17230]  slab_reclaimable:9044 slab_unreclaimable:110041
[  915.612331][T17230]  mapped:33930 shmem:4477 pagetables:1335
[  915.612331][T17230]  sec_pagetables:0 bounce:0
[  915.612331][T17230]  kernel_misc_reclaimable:0
[  915.612331][T17230]  free:1273115 free_pcp:14116 free_cma:0
[  915.657922][T17230] Node 0 active_anon:35092kB inactive_anon:0kB active_file:87664kB inactive_file:163792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135556kB dirty:1396kB writeback:0kB shmem:16372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13864kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  915.690047][T17230] Node 1 active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  915.720301][T17230] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB
[  915.750727][T17230] lowmem_reserve[]: 0 2481 2482 2482 2482
[  915.756847][T17230] Node 0 DMA32 free:1185832kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35092kB inactive_anon:0kB active_file:87664kB inactive_file:163792kB unevictable:1536kB writepending:1396kB zspages:0kB present:3129332kB managed:2540800kB mlocked:0kB bounce:0kB free_pcp:42100kB local_pcp:22220kB free_cma:0kB
[  915.790383][T17230] lowmem_reserve[]: 0 0 1 1 1
[  915.795262][T17230] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  915.826950][T17230] lowmem_reserve[]: 0 0 0 0 0
[  915.832154][T17230] Node 1 Normal free:3891300kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:260kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14300kB local_pcp:7868kB free_cma:0kB
[  915.865025][T17230] lowmem_reserve[]: 0 0 0 0 0
[  915.870000][T17230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  915.885319][T17230] Node 0 DMA32: 4171*4kB (UME) 2730*8kB (UME) 1493*16kB (UME) 1345*32kB (UME) 881*64kB (UME) 524*128kB (UME) 250*256kB (UME) 80*512kB (UME) 38*1024kB (UME) 9*2048kB (UM) 194*4096kB (UM) = 1185836kB
[  915.905523][T17230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  915.917554][T17230] Node 1 Normal: 147*4kB (UME) 53*8kB (UME) 36*16kB (UME) 217*32kB (UME) 81*64kB (UME) 25*128kB (UE) 6*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3891220kB
[  915.936721][T17230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.946346][T17230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  915.957819][T17230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.967505][T17230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  915.976822][T17230] 67461 total pagecache pages
[  915.981477][T17230] 0 pages in swap cache
[  916.023420][T17230] Free swap  = 124996kB
[  916.029023][T17230] Total swap = 124996kB
[  916.033162][T17230] 2097051 pages RAM
[  916.037091][T17230] 0 pages HighMem/MovableOnly
[  916.061663][T17230] 429825 pages reserved
[  916.068050][T17230] 0 pages cma reserved
[  916.863681][ T5878] usb 6-1: USB disconnect, device number 36
[  918.690407][T17261] CUSE: info not properly terminated
[  918.930010][   T30] audit: type=1400 audit(1768842899.776:1227): avc:  denied  { bind } for  pid=17257 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  920.452067][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'.
[  921.271376][   T30] audit: type=1400 audit(1768842902.116:1228): avc:  denied  { write } for  pid=17288 comm="syz.6.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  921.293625][   T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  921.313512][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  921.431102][T17292] xt_CT: You must specify a L4 protocol and not use inversions on it
[  921.443363][   T10] usb 5-1: device descriptor read/64, error -32
[  921.683529][   T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  921.707294][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2761'.
[  921.853386][   T10] usb 5-1: device descriptor read/64, error -71
[  921.963582][   T10] usb usb5-port1: attempt power cycle
[  921.973341][ T5898] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  922.056537][   T30] audit: type=1326 audit(1768842902.906:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  922.082712][   T30] audit: type=1326 audit(1768842902.936:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  922.107959][   T30] audit: type=1326 audit(1768842902.956:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  922.135227][   T30] audit: type=1326 audit(1768842902.986:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  922.158872][ T5898] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad
[  922.168568][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.178141][ T5898] usb 4-1: config 0 descriptor??
[  922.303360][   T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  922.416618][ T5898] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  922.626357][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.641817][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.804962][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.814180][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.824758][T15899] usb 4-1: USB disconnect, device number 33
[  923.345446][   T10] usb 5-1: device descriptor read/8, error -71
[  923.389533][   T30] audit: type=1326 audit(1768842904.236:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  923.415993][   T30] audit: type=1326 audit(1768842904.266:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f82b8f749 code=0x7ffc0000
[  924.537547][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'.
[  924.855323][T17344] overlayfs: failed to clone upperpath
[  925.455664][T17348] netlink: 'syz.3.2775': attribute type 6 has an invalid length.
[  925.474119][T17348] overlayfs: missing 'lowerdir'
[  925.660981][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2777'.
[  925.810242][T17353] lo speed is unknown, defaulting to 1000
[  926.023429][T17353] lo speed is unknown, defaulting to 1000
[  927.322540][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'.
[  928.323714][ T5898] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  928.645202][T17399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2789'.
[  928.904275][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  928.916194][ T5898] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  928.983644][ T5898] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  928.995975][ T5898] usb 4-1: config 127 has 1 interface, different from the descriptor's value: 2
[  929.005385][ T5898] usb 4-1: config 127 has no interface number 0
[  929.011655][ T5898] usb 4-1: config 127 interface 171 has no altsetting 0
[  929.024626][ T5898] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  929.036649][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.047506][ T5898] usb 4-1: Product: syz
[  929.051684][ T5898] usb 4-1: Manufacturer: syz
[  929.056656][ T5898] usb 4-1: SerialNumber: syz
[  929.399206][   T30] audit: type=1400 audit(1768842910.236:1235): avc:  denied  { ioctl } for  pid=17402 comm="syz.5.2791" path="socket:[61305]" dev="sockfs" ino=61305 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  930.552659][T17419] gfs2: not a GFS2 filesystem
[  930.972400][ T5898] usb 4-1: USB disconnect, device number 34
[  931.247918][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  933.393549][ T5878] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  933.625063][ T5878] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  933.672435][ T5878] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  933.682822][ T5878] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0
[  933.694041][ T5878] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  933.707508][ T5878] usb 4-1: config 220 interface 0 has no altsetting 0
[  934.169850][ T5878] usb 4-1: config 220 interface 1 has no altsetting 0
[  934.179021][ T5878] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9
[  934.188373][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.196692][ T5878] usb 4-1: Product: syz
[  934.201526][ T5878] usb 4-1: Manufacturer: syz
[  934.206697][ T5878] usb 4-1: SerialNumber: syz
[  934.444587][ T5898] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  934.462208][ T5878] usb 4-1: selecting invalid altsetting 0
[  934.472828][ T5878] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[  934.488798][ T5878] usb 4-1: selecting invalid altsetting 0
[  934.494816][ T5878] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  934.506282][ T5878] usb 4-1: USB disconnect, device number 35
[  934.528988][T17480] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2810'.
[  934.539210][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2810'.
[  934.550926][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2810'.
[  934.616710][ T5898] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  934.626167][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.635979][ T5898] usb 6-1: Product: syz
[  934.640323][ T5898] usb 6-1: Manufacturer: syz
[  934.646158][ T5898] usb 6-1: SerialNumber: syz
[  934.660615][ T5898] usb 6-1: config 0 descriptor??
[  934.767153][T17482] trusted_key: syz.4.2811 sent an empty control message without MSG_MORE.
[  935.843487][   T10] usb 6-1: USB disconnect, device number 37
[  936.186965][T17499] binder_alloc: 17498: binder_alloc_buf, no vma
[  936.243075][T17499] binder: 17498:17499 ioctl c0306201 200000000b00 returned -11
[  936.288756][T17499] binder: 17498:17499 ioctl c0306201 200000000300 returned -11
[  937.168479][T17514] netlink: 'syz.6.2819': attribute type 12 has an invalid length.
[  937.224435][T17514] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  937.363401][T17514] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  937.375050][T17514] overlayfs: missing 'lowerdir'
[  937.556193][T17520] ceph: No mds server is up or the cluster is laggy
[  938.129846][   T30] audit: type=1400 audit(1768842918.966:1236): avc:  denied  { shutdown } for  pid=17525 comm="syz.4.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  938.876290][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  938.930020][T17542] overlayfs: overlapping lowerdir path
[  938.960200][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  938.994035][T17542] overlayfs: overlapping lowerdir path
[  939.018526][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.054132][T17542] overlayfs: overlapping lowerdir path
[  939.073942][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.123809][ T6003] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  939.172014][T17542] overlayfs: overlapping lowerdir path
[  939.223151][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.273591][T17542] overlayfs: overlapping lowerdir path
[  939.304694][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.343689][ T6003] usb 4-1: Using ep0 maxpacket: 16
[  939.369077][T17542] overlayfs: overlapping lowerdir path
[  939.380408][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.421813][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.462486][ T6003] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  939.476656][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.494494][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.523383][ T6003] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  939.542832][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.549371][T17542] overlayfs: overlapping lowerdir path
[  939.560018][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.592805][ T6003] usb 4-1: config 0 descriptor??
[  939.603480][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.638555][T17542] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  939.665590][T17542] overlayfs: overlapping lowerdir path
[  939.757726][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.784746][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.808026][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.838305][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.840505][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.904711][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.905231][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  939.954689][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2827'.
[  940.092155][T17547] netlink: 'syz.3.2825': attribute type 20 has an invalid length.
[  940.099966][T17556] lo speed is unknown, defaulting to 1000
[  940.108876][T17556] lo speed is unknown, defaulting to 1000
[  940.165255][ T6003] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  940.204696][ T6003] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max
[  940.210680][ T3463] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  940.258199][ T3463] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  940.266187][ T6003] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0022/input/input43
[  940.277408][ T3463] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  940.301557][ T3463] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  940.401265][ T6003] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  940.468781][ T6003] usb 4-1: USB disconnect, device number 36
[  940.483345][ T5898] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[  940.652089][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short
[  940.696398][ T5898] usb 6-1: config index 0 descriptor too short (expected 2322, got 18)
[  940.732615][ T5898] usb 6-1: config 7 has an invalid interface number: 67 but max is 0
[  940.741130][ T5898] usb 6-1: config 7 has no interface number 0
[  940.762534][ T5898] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  940.779238][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.790080][ T5898] usb 6-1: Product: 㯑
[  941.078939][ T5898] usb 6-1: USB disconnect, device number 38
[  941.411141][   T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  941.575241][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  941.598670][   T10] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  941.618286][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.640667][   T10] usb 4-1: config 0 descriptor??
[  941.667009][T17591] syzkaller0: entered allmulticast mode
[  941.685725][T17591] syzkaller0 (unregistering): left allmulticast mode
[  941.877240][   T10] usb 4-1: USB disconnect, device number 37
[  942.073882][ T5898] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  942.116244][T17599] fuse: Unknown parameter '/dev/fuse'
[  942.284248][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  942.291837][T17607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  942.301440][ T5898] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  942.311138][ T5898] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  942.342713][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  942.364962][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  942.376843][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.384880][ T5898] usb 6-1: Product: syz
[  942.389482][ T5898] usb 6-1: Manufacturer: syz
[  942.408121][ T5898] usb 6-1: SerialNumber: syz
[  942.642434][ T5898] usb 6-1: 0:2 : does not exist
[  942.673633][ T6003] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  942.682877][ T5898] usb 6-1: USB disconnect, device number 39
[  942.883510][ T6003] usb 5-1: Using ep0 maxpacket: 16
[  942.895286][ T6003] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  942.913658][ T6003] usb 5-1: config 0 has no interface number 0
[  942.919771][ T6003] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.953551][ T6003] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  942.973292][ T6003] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  942.982345][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.993327][T15899] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  943.005652][ T6003] usb 5-1: config 0 descriptor??
[  943.143375][T15899] usb 4-1: Using ep0 maxpacket: 16
[  943.154422][T15899] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  943.183393][T15899] usb 4-1: config 0 has no interface number 0
[  943.197878][T15899] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  943.222893][T15899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.253414][T15899] usb 4-1: Product: syz
[  943.257594][T15899] usb 4-1: Manufacturer: syz
[  943.262189][T15899] usb 4-1: SerialNumber: syz
[  943.275245][T15899] usb 4-1: config 0 descriptor??
[  943.285809][T15899] hub 4-1:0.132: bad descriptor, ignoring hub
[  943.291909][T15899] hub 4-1:0.132: probe with driver hub failed with error -5
[  943.302640][T15899] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input44
[  943.313146][T17631] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  943.509050][T15899] usb 4-1: USB disconnect, device number 38
[  943.650038][   T30] audit: type=1400 audit(1768842924.496:1237): avc:  denied  { mount } for  pid=17602 comm="syz.4.2842" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  944.247701][   T30] audit: type=1400 audit(1768842925.096:1238): avc:  denied  { read } for  pid=17639 comm="syz.5.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  944.291905][   T30] audit: type=1400 audit(1768842925.126:1239): avc:  denied  { ioctl } for  pid=17639 comm="syz.5.2853" path="socket:[62824]" dev="sockfs" ino=62824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  944.519594][T14961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  944.531666][T14961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  944.540458][T14961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  944.550255][T14961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  944.559977][T14961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  944.662124][T17651] lo speed is unknown, defaulting to 1000
[  944.667992][ T5878] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  944.673355][ T5898] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  944.693804][T17651] lo speed is unknown, defaulting to 1000
[  944.835971][ T5878] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  944.848678][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.860960][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  944.861388][ T5878] usb 4-1: config 0 descriptor??
[  944.890527][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  944.898017][ T5878] cp210x 4-1:0.0: cp210x converter detected
[  944.900943][ T5898] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  944.922770][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  944.945216][ T5898] usb 6-1: SerialNumber: syz
[  945.125109][T17651] chnl_net:caif_netlink_parms(): no params data found
[  945.166954][T17649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  945.204801][T17649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.224358][ T5898] usb 6-1: 0:2 : does not exist
[  945.264041][ T6003] uclogic 0003:28BD:0071.0023: failed retrieving string descriptor #100: -71
[  945.272917][ T6003] uclogic 0003:28BD:0071.0023: failed retrieving pen parameters: -71
[  945.335969][ T5898] usb 6-1: USB disconnect, device number 40
[  945.351482][ T5878] usb 4-1: cp210x converter now attached to ttyUSB0
[  945.363915][ T9047] bridge_slave_1: left allmulticast mode
[  945.369716][ T9047] bridge_slave_1: left promiscuous mode
[  945.378863][ T6003] uclogic 0003:28BD:0071.0023: pen probing failed: -71
[  945.393555][ T5878] usb 4-1: USB disconnect, device number 39
[  945.403518][ T6003] uclogic 0003:28BD:0071.0023: failed probing parameters: -71
[  945.411309][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  945.419308][ T6003] uclogic 0003:28BD:0071.0023: probe with driver uclogic failed with error -71
[  945.430735][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.456369][ T9047] bridge_slave_0: left allmulticast mode
[  945.462166][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.471178][ T6003] usb 5-1: USB disconnect, device number 86
[  945.486713][ T5878] cp210x 4-1:0.0: device disconnected
[  946.321565][T17665] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[17665]
[  946.607572][T14961] Bluetooth: hci4: command tx timeout
[  946.923346][   T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  947.000980][ T5878] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  947.073649][   T10] usb 6-1: Using ep0 maxpacket: 32
[  947.080047][   T10] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  947.088265][   T10] usb 6-1: config 0 has no interface number 0
[  947.094897][   T10] usb 6-1: too many endpoints for config 0 interface 65 altsetting 60: 250, using maximum allowed: 30
[  947.106287][   T10] usb 6-1: config 0 interface 65 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 250
[  947.119809][   T10] usb 6-1: config 0 interface 65 has no altsetting 0
[  947.126734][   T10] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  947.153742][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.184804][ T5878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  947.186040][   T10] usb 6-1: config 0 descriptor??
[  947.195038][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  947.212419][ T5878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  947.227997][ T5878] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  947.238524][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.247202][ T5878] usb 4-1: Product: syz
[  947.251597][ T5878] usb 4-1: Manufacturer: syz
[  947.270279][ T5878] usb 4-1: SerialNumber: syz
[  947.277928][ T5878] usb 4-1: config 0 descriptor??
[  947.283637][T17669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  947.290919][T17669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  947.301420][ T5878] usb 4-1: ucan: probing device on interface #0
[  947.414124][ T9047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  947.423955][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.432525][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.443370][ T9047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  947.452323][   T10] usb 6-1: string descriptor 0 read error: -71
[  947.459942][ T9047] bond0 (unregistering): Released all slaves
[  947.468345][   T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  947.487683][   T10] gspca_vc032x: reg_r err -71
[  947.493159][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.499274][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.514173][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.519534][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.532153][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.544874][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.550283][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.555663][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.568318][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.590461][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.595970][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.608930][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.621172][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.626635][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.638952][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.651423][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.656973][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.662262][   T10] gspca_vc032x: I2c Bus Busy Wait 00
[  947.675299][   T10] gspca_vc032x: Unknown sensor...
[  947.697243][   T10] vc032x 6-1:0.65: probe with driver vc032x failed with error -22
[  947.714468][   T10] usb 6-1: USB disconnect, device number 41
[  947.731097][ T9047] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  947.739690][ T9047] wireguard0: left promiscuous mode
[  947.745606][ T9047] bond1 (unregistering): Released all slaves
[  947.865880][ T9047] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[  947.875225][ T9047] wireguard1: left promiscuous mode
[  947.880905][ T9047] bond2 (unregistering): Released all slaves
[  947.983926][ T9047] bond3 (unregistering): Released all slaves
[  948.002481][T17678] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  948.051656][ T5878] ucan 4-1:0.0 can0: registered device
[  948.103021][T17651] bridge0: port 1(bridge_slave_0) entered blocking state
[  948.111115][T17651] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.118617][T17651] bridge_slave_0: entered allmulticast mode
[  948.125537][ T5878] ucan 4-1:0.0 can0: firmware string: ��p$v�]!i��n��0��w�FaD��7��0�^����+�f���
[  948.136661][T17651] bridge_slave_0: entered promiscuous mode
[  948.152575][T17651] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.171117][T17651] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.181270][T17651] bridge_slave_1: entered allmulticast mode
[  948.213664][T17651] bridge_slave_1: entered promiscuous mode
[  948.683548][T14961] Bluetooth: hci4: command tx timeout
[  948.755744][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.858066][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  949.869453][T15899] usb 4-1: USB disconnect, device number 40
[  950.011773][T17651] team0: Port device team_slave_0 added
[  950.022682][T17651] team0: Port device team_slave_1 added
[  950.034426][ T9047] hsr_slave_0: left promiscuous mode
[  950.041271][ T9047] hsr_slave_1: left promiscuous mode
[  950.047342][ T9047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  950.060066][ T9047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  950.139085][ T9047] team0 (unregistering): Port device batadv1 removed
[  950.534486][T17719] netlink: zone id is out of range
[  950.539727][T17719] netlink: zone id is out of range
[  950.544981][T17719] netlink: zone id is out of range
[  950.552146][T17719] netlink: zone id is out of range
[  950.557367][T17719] netlink: zone id is out of range
[  950.562665][T17719] netlink: zone id is out of range
[  950.568134][T17719] netlink: zone id is out of range
[  950.573359][T17719] netlink: zone id is out of range
[  950.578535][T17719] netlink: zone id is out of range
[  950.585400][T17719] netlink: zone id is out of range
[  950.814465][T14961] Bluetooth: hci4: command tx timeout
[  951.460883][T17721] trusted_key: encrypted_key: hex blob is missing
[  951.584166][   T30] audit: type=1400 audit(1768842932.436:1240): avc:  denied  { create } for  pid=17727 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  951.664691][   T30] audit: type=1400 audit(1768842932.436:1241): avc:  denied  { accept } for  pid=17727 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  951.693404][   T30] audit: type=1400 audit(1768842932.436:1242): avc:  denied  { write } for  pid=17727 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  951.714495][   T30] audit: type=1400 audit(1768842932.456:1243): avc:  denied  { getopt } for  pid=17727 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  951.792042][   T30] audit: type=1400 audit(1768842932.456:1244): avc:  denied  { write } for  pid=17725 comm="syz.6.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  951.812299][T17732] __nla_validate_parse: 58 callbacks suppressed
[  951.812319][T17732] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2878'.
[  951.858854][   T30] audit: type=1400 audit(1768842932.456:1245): avc:  denied  { setopt } for  pid=17727 comm="syz.5.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  952.379462][ T9047] team0 (unregistering): Port device team_slave_1 removed
[  952.419788][ T9047] team0 (unregistering): Port device team_slave_0 removed
[  952.843949][T14961] Bluetooth: hci4: command tx timeout
[  953.031004][T17718] batadv_slave_0: entered promiscuous mode
[  953.126641][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  953.143601][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  953.223301][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  953.430232][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  953.447724][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  953.899334][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  954.018082][T17651] hsr_slave_0: entered promiscuous mode
[  954.045127][T17651] hsr_slave_1: entered promiscuous mode
[  954.064090][T17651] debugfs: 'hsr0' already exists in 'hsr'
[  954.072728][ T5871] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  954.133377][T17651] Cannot create hsr debugfs directory
[  954.223462][ T5871] usb 4-1: device descriptor read/64, error -71
[  954.398551][ T9047] IPVS: stop unused estimator thread 0...
[  954.473473][ T5871] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  954.559477][T17651] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  954.569951][T17786] ADFS-fs (nbd5): error: unable to read block 3, try 0
[  954.581421][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2891'.
[  954.584718][T17651] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  954.606636][T17779] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  954.614117][T17779] team0: Device ipvlan3 is already an upper device of the team interface
[  954.623524][ T5871] usb 4-1: device descriptor read/64, error -71
[  954.640029][T17651] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  954.652213][T17651] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  954.747035][ T5871] usb usb4-port1: attempt power cycle
[  954.761114][T17651] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.794055][T17651] 8021q: adding VLAN 0 to HW filter on device team0
[  954.810557][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.817729][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  954.831386][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.838499][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  955.102822][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  955.103313][ T5871] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  955.132782][T17801] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  955.139682][T17801] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  955.152195][T17801] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  955.161095][ T5871] usb 4-1: device descriptor read/8, error -71
[  955.180741][T17801] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  955.192250][T17801] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  955.199671][T17801] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  955.411824][T17651] veth0_vlan: entered promiscuous mode
[  955.423701][ T5871] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  955.427246][T17651] veth1_vlan: entered promiscuous mode
[  955.443420][ T5898] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  955.454489][ T5871] usb 4-1: device descriptor read/8, error -71
[  955.472558][T17651] veth0_macvtap: entered promiscuous mode
[  955.482461][T17651] veth1_macvtap: entered promiscuous mode
[  955.504968][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  955.519142][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  955.535182][ T4025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  955.545311][ T4025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  955.574429][ T5871] usb usb4-port1: unable to enumerate USB device
[  955.581974][ T4025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  955.598215][ T5898] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  955.608853][ T4025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  955.614210][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.634013][ T5898] usb 6-1: config 0 descriptor??
[  955.719293][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.732602][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.110452][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.146749][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.488772][T17836] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.2852'.
[  956.623363][ T6003] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  956.633447][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  956.783382][ T6003] usb 5-1: Using ep0 maxpacket: 16
[  956.783385][ T5924] usb 4-1: Using ep0 maxpacket: 32
[  956.787988][ T6003] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  956.790206][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.794530][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.804074][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  956.817361][ T6003] usb 5-1: Product: syz
[  956.832246][ T5924] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  956.836319][ T6003] usb 5-1: Manufacturer: syz
[  956.845382][ T6003] usb 5-1: SerialNumber: syz
[  956.855710][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.866097][ T5924] usb 4-1: config 0 descriptor??
[  957.058998][ T6003] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  957.071162][ T6003] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  957.081659][ T6003] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  957.090512][T14961] Bluetooth: hci3: command 0x0c1a tx timeout
[  957.104932][ T6003] usb 5-1: media controller created
[  957.117456][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  957.243790][T14961] Bluetooth: hci4: command 0x0c1a tx timeout
[  957.269694][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'.
[  957.278984][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'.
[  957.282166][ T5924] ft260 0003:0403:6030.0024: unknown main item tag 0x7
[  957.318513][ T6003] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  957.479941][ T5924] ft260 0003:0403:6030.0024: chip code: 6424 8183
[  957.509086][ T6003] usb 5-1: USB disconnect, device number 87
[  957.687969][T17832] input: syz0 as /devices/virtual/input/input45
[  957.694657][T17832] input: failed to attach handler leds to device input45, error: -6
[  957.801168][ T5898] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  957.816288][ T5898] [drm:udl_init] *ERROR* Selecting channel failed
[  957.862264][ T5898] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  957.879965][ T5898] [drm] Initialized udl on minor 2
[  957.899882][ T5898] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  957.932941][ T5898] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  957.944057][ T5924] usb 4-1: USB disconnect, device number 45
[  957.969460][   T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  957.979137][ T5898] usb 6-1: USB disconnect, device number 42
[  958.000123][   T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  958.533461][ T5898] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  959.163344][T14961] Bluetooth: hci3: command 0x0c1a tx timeout
[  959.213672][ T5898] usb 6-1: Using ep0 maxpacket: 16
[  959.225328][ T5898] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  959.248186][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  959.286704][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  959.298660][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  959.308249][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  959.316027][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  959.325290][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[  959.331429][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  959.339634][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  959.354970][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  959.364106][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.372103][ T5898] usb 6-1: Product: syz
[  959.376828][ T5898] usb 6-1: Manufacturer: syz
[  959.381482][ T5898] usb 6-1: SerialNumber: syz
[  959.430653][T17861] lo speed is unknown, defaulting to 1000
[  960.233412][ T5898] usb 6-1: 0:2 : does not exist
[  960.334750][ T7491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  960.362958][ T7491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.376785][ T7491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  960.531250][T17861] chnl_net:caif_netlink_parms(): no params data found
[  961.007778][ T7491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.023360][ T7491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.192529][ T7491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  961.244578][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  961.403956][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  961.410182][ T5823] Bluetooth: hci0: command tx timeout
[  961.523942][ T7491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.545676][ T7491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.567935][ T7491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  961.736533][ T7491] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.747602][ T7491] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.757962][ T7491] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  961.923472][T17847] sp0: Synchronizing with TNC
[  961.929164][T17861] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.953349][T17861] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.960561][T17861] bridge_slave_0: entered allmulticast mode
[  961.994768][T17861] bridge_slave_0: entered promiscuous mode
[  962.044102][T17861] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.051316][T17861] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.071149][T17861] bridge_slave_1: entered allmulticast mode
[  962.085039][ T5898] usb 6-1: 1:0: cannot get min/max values for control 6 (id 1)
[  962.117240][T17861] bridge_slave_1: entered promiscuous mode
[  962.147595][ T5898] usb 6-1: USB disconnect, device number 43
[  962.251879][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2916'.
[  962.572395][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  962.587304][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  962.637667][T17903] syz.3.2917 (17903): drop_caches: 2
[  962.648626][T17903] syz.3.2917 (17903): drop_caches: 2
[  962.658566][T17861] team0: Port device team_slave_0 added
[  962.668966][T17861] team0: Port device team_slave_1 added
[  962.677623][ T7491] team0: left allmulticast mode
[  962.682517][ T7491] team_slave_0: left allmulticast mode
[  962.688724][ T7491] team_slave_1: left allmulticast mode
[  962.694488][ T7491] team0: left promiscuous mode
[  962.699723][ T7491] team_slave_0: left promiscuous mode
[  962.705297][ T7491] team_slave_1: left promiscuous mode
[  962.710826][ T7491] bridge0: port 3(team0) entered disabled state
[  962.720350][ T7491] bridge_slave_1: left allmulticast mode
[  962.726097][ T7491] bridge_slave_1: left promiscuous mode
[  962.731755][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.740331][ T7491] bridge_slave_0: left promiscuous mode
[  962.746063][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.833331][ T5898] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  962.902293][   T30] audit: type=1400 audit(1768842943.746:1246): avc:  denied  { nlmsg_read } for  pid=17905 comm="syz.5.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  962.902327][T17906] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2919'.
[  962.975086][ T7491] bond1 (unregistering): (slave geneve2): Releasing active interface
[  963.033404][ T5898] usb 8-1: Using ep0 maxpacket: 8
[  963.040717][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  963.051794][ T5898] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  963.060983][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.071441][ T5898] usb 8-1: config 0 descriptor??
[  963.280218][T17902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.288988][T17902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.300394][ T5898] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  963.483614][T17864] Bluetooth: hci0: command tx timeout
[  963.534908][T17910] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff'
[  963.600171][ T7491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  963.610803][ T7491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  963.620996][ T7491] bond0 (unregistering): Released all slaves
[  963.631532][ T7491] bond1 (unregistering): Released all slaves
[  963.642501][ T7491] bond2 (unregistering): Released all slaves
[  963.696326][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  963.704405][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.736631][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  963.751065][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  963.759347][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  963.760691][T17912] net_ratelimit: 12 callbacks suppressed
[  963.760703][T17912] netlink: zone id is out of range
[  963.798849][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  963.806648][T17912] netlink: zone id is out of range
[  963.834769][T17912] netlink: zone id is out of range
[  963.839996][T17912] netlink: zone id is out of range
[  963.845912][T17912] netlink: zone id is out of range
[  963.851150][T17912] netlink: zone id is out of range
[  963.857824][T17912] netlink: zone id is out of range
[  963.863964][T17912] netlink: zone id is out of range
[  963.869193][T17912] netlink: zone id is out of range
[  963.875182][T17912] netlink: zone id is out of range
[  963.892300][T17861] hsr_slave_0: entered promiscuous mode
[  963.899894][T17861] hsr_slave_1: entered promiscuous mode
[  963.906977][T17861] debugfs: 'hsr0' already exists in 'hsr'
[  963.912800][T17861] Cannot create hsr debugfs directory
[  963.930566][ T7491] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode
[  964.082827][ T7491] hsr_slave_0: left promiscuous mode
[  964.091306][ T7491] hsr_slave_1: left promiscuous mode
[  964.105800][ T7491] batadv_slave_0: left promiscuous mode
[  964.111554][ T7491] veth1_macvtap: left promiscuous mode
[  964.117307][ T7491] veth0_macvtap: left promiscuous mode
[  964.122971][ T7491] veth0_vlan: left promiscuous mode
[  964.820405][ T5927] IPVS: starting estimator thread 0...
[  964.934497][T17933] IPVS: using max 50 ests per chain, 120000 per kthread
[  965.425278][ T7491] team0 (unregistering): Port device team_slave_1 removed
[  965.470222][ T7491] team0 (unregistering): Port device team_slave_0 removed
[  965.573476][T17864] Bluetooth: hci0: command tx timeout
[  965.610533][ T5924] usb 8-1: USB disconnect, device number 2
[  965.957449][ T5898] lo speed is unknown, defaulting to 1000
[  965.963714][ T5898] syz�: Port: 1 Link DOWN
[  966.027041][ T5924] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  966.153508][   T30] audit: type=1400 audit(1768842947.006:1247): avc:  denied  { read } for  pid=17946 comm="syz.5.2931" path="socket:[65989]" dev="sockfs" ino=65989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  966.225961][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.269004][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  966.295918][ T5924] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  966.313161][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.326364][ T5924] usb 8-1: config 0 descriptor??
[  966.468958][T17861] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  966.487712][T15899] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  966.717944][T17861] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  966.752711][T15899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.809689][T15899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  966.822628][T17861] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  966.825509][T15899] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  966.839534][T15899] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  966.842042][T17861] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  966.854363][T15899] usb 4-1: Manufacturer: syz
[  966.861397][T15899] usb 4-1: config 0 descriptor??
[  966.865033][ T7491] IPVS: stop unused estimator thread 0...
[  966.928841][T17861] 8021q: adding VLAN 0 to HW filter on device bond0
[  966.946592][T17861] 8021q: adding VLAN 0 to HW filter on device team0
[  966.958101][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.965227][ T7491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  966.981555][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.988716][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  967.011323][ T5924] usbhid 8-1:0.0: can't add hid device: -71
[  967.018328][ T5924] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  967.030825][ T5924] usb 8-1: USB disconnect, device number 3
[  967.245517][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2936'.
[  967.345284][T17861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.643500][T17864] Bluetooth: hci0: command tx timeout
[  967.938617][T15899] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0025/input/input46
[  968.068200][T15899] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0025/input/input47
[  968.076132][T17861] veth0_vlan: entered promiscuous mode
[  968.096271][T17861] veth1_vlan: entered promiscuous mode
[  968.117226][T15899] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0025/input/input48
[  968.129170][T17861] veth0_macvtap: entered promiscuous mode
[  968.145960][T15899] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0025/input/input49
[  968.164684][T15899] uclogic 0003:256C:006D.0025: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0
[  968.178387][T15899] usb 4-1: USB disconnect, device number 46
[  968.218206][T17861] veth1_macvtap: entered promiscuous mode
[  968.803682][ T6303] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  968.944050][T17990] netlink: 'syz.7.2941': attribute type 9 has an invalid length.
[  969.013741][ T6303] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  969.037126][ T6303] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  969.071608][ T6303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.248336][ T6303] usb 6-1: config 0 descriptor??
[  969.257463][T17861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  969.261575][ T6303] pwc: Askey VC010 type 2 USB webcam detected.
[  969.711993][T17861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  969.741364][ T6165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.756553][T17864] Bluetooth: hci3: unexpected event for opcode 0x042c
[  969.765603][ T6165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.856038][ T6165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.865687][ T6303] pwc: recv_control_msg error -32 req 02 val 2b00
[  969.866938][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2944'.
[  969.981449][ T6303] pwc: recv_control_msg error -32 req 02 val 2700
[  969.991111][T18002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18002 comm=syz.3.2944
[  970.032343][T18002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=18002 comm=syz.3.2944
[  970.059314][T18002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=18002 comm=syz.3.2944
[  970.283174][   T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.536138][ T7491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.544243][ T7491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.662425][ T6303] pwc: recv_control_msg error -71 req 04 val 1000
[  970.667806][ T7491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.681726][ T6303] pwc: recv_control_msg error -71 req 04 val 1300
[  970.689390][ T6303] pwc: recv_control_msg error -71 req 04 val 1400
[  970.696792][ T6303] pwc: recv_control_msg error -71 req 02 val 2000
[  970.713513][ T6303] pwc: recv_control_msg error -71 req 02 val 2100
[  970.730332][ T6303] pwc: recv_control_msg error -71 req 04 val 1500
[  970.731517][ T7491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.737275][ T6303] pwc: recv_control_msg error -71 req 02 val 2500
[  970.751615][ T6303] pwc: recv_control_msg error -71 req 02 val 2400
[  970.765085][ T6303] pwc: recv_control_msg error -71 req 02 val 2600
[  970.774812][ T6303] pwc: recv_control_msg error -71 req 02 val 2900
[  970.782069][T18011] netlink: 'syz.3.2946': attribute type 1 has an invalid length.
[  970.782198][ T6303] pwc: recv_control_msg error -71 req 02 val 2800
[  970.796868][ T6303] pwc: recv_control_msg error -71 req 04 val 1100
[  970.803864][ T6303] pwc: recv_control_msg error -71 req 04 val 1200
[  970.812206][ T6303] pwc: Registered as video103.
[  970.819642][ T6303] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50
[  970.837266][ T6303] usb 6-1: USB disconnect, device number 44
[  970.849982][   T30] audit: type=1400 audit(1768842951.696:1248): avc:  denied  { create } for  pid=18010 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  970.880128][T18011] 8021q: adding VLAN 0 to HW filter on device bond1
[  970.953698][T18013] bond1: (slave gretap1): making interface the new active one
[  970.966169][   T30] audit: type=1400 audit(1768842951.716:1249): avc:  denied  { write } for  pid=18010 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  970.971857][T18013] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  971.256682][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'.
[  971.274763][T18023] fuse: Bad value for 'fd'
[  972.036552][T18043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2952'.
[  972.650096][   T30] audit: type=1400 audit(1768842953.496:1250): avc:  denied  { bind } for  pid=18048 comm="syz.4.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  972.897016][   T30] audit: type=1400 audit(1768842953.706:1251): avc:  denied  { write } for  pid=18048 comm="syz.4.2954" path="socket:[66514]" dev="sockfs" ino=66514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  973.053073][   T30] audit: type=1400 audit(1768842953.856:1252): avc:  denied  { connect } for  pid=18048 comm="syz.4.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1082.943186][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1082.950145][    C0] rcu: 	1-...!: (1 GPs behind) idle=36dc/0/0x1 softirq=94330/94331 fqs=2
[ 1082.959619][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=80745, q=454 ncpus=2)
[ 1082.967426][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1082.967454][    C1] NMI backtrace for cpu 1
[ 1082.967467][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1082.967486][    C1] Tainted: [L]=SOFTLOCKUP
[ 1082.967490][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1082.967498][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70
[ 1082.967519][    C1] Code: 00 00 5b e9 e2 11 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 78 f0 f3 11 <65> 8b 05 89 f0 f3 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00
[ 1082.967531][    C1] RSP: 0018:ffffc90000a08d88 EFLAGS: 00000002
[ 1082.967542][    C1] RAX: ffffffff89814458 RBX: 0000000000000001 RCX: ffffffff89814479
[ 1082.967551][    C1] RDX: ffff88801daba4c0 RSI: ffffffff89814707 RDI: 0000000000000005
[ 1082.967560][    C1] RBP: ffff88802a000000 R08: 0000000000000005 R09: 0000000000000000
[ 1082.967569][    C1] R10: 0000000000000001 R11: ffff88801dabaff0 R12: 18933f9f76652ab8
[ 1082.967577][    C1] R13: 18933f9f76652ab8 R14: 0000000000000002 R15: ffff88802a002c10
[ 1082.967586][    C1] FS:  0000000000000000(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000
[ 1082.967600][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1082.967610][    C1] CR2: 00007f56e93f5f98 CR3: 000000007a880000 CR4: 00000000003526f0
[ 1082.967619][    C1] Call Trace:
[ 1082.967625][    C1]  <IRQ>
[ 1082.967630][    C1]  advance_sched+0x937/0xc80
[ 1082.967657][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1082.967674][    C1]  __hrtimer_run_queues+0x202/0xc40
[ 1082.967696][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1082.967713][    C1]  ? read_tsc+0x9/0x20
[ 1082.967734][    C1]  hrtimer_interrupt+0x397/0x8e0
[ 1082.967751][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x3c0
[ 1082.967768][    C1]  sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1082.967786][    C1]  </IRQ>
[ 1082.967790][    C1]  <TASK>
[ 1082.967795][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1082.967809][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1082.967826][    C1] Code: 16 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 89 11 00 fb f4 <e9> 4c 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1082.967838][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[ 1082.967848][    C1] RAX: 0000000003b6d871 RBX: 0000000000000001 RCX: ffffffff8b78d6d9
[ 1082.967857][    C1] RDX: 0000000000000000 RSI: ffffffff8dacf385 RDI: ffffffff8bf2b280
[ 1082.967865][    C1] RBP: ffffed1003b57498 R08: 0000000000000001 R09: ffffed10170a673d
[ 1082.967873][    C1] R10: ffff8880b85339eb R11: ffff88801dabaff0 R12: 0000000000000001
[ 1082.967882][    C1] R13: ffff88801daba4c0 R14: ffffffff9088cbd0 R15: 0000000000000000
[ 1082.967893][    C1]  ? ct_kernel_exit+0x139/0x190
[ 1082.967913][    C1]  default_idle+0x13/0x20
[ 1082.967925][    C1]  default_idle_call+0x6c/0xb0
[ 1082.967936][    C1]  do_idle+0x38d/0x510
[ 1082.967955][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1082.967975][    C1]  cpu_startup_entry+0x4f/0x60
[ 1082.967993][    C1]  start_secondary+0x21d/0x2d0
[ 1082.968006][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1082.968021][    C1]  common_startup_64+0x13e/0x148
[ 1082.968042][    C1]  </TASK>
[ 1082.968449][    C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g80745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1083.283732][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1083.293683][    C0] rcu: RCU grace-period kthread stack dump:
[ 1083.299548][    C0] task:rcu_preempt     state:R  running task     stack:28296 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1083.313111][    C0] Call Trace:
[ 1083.316376][    C0]  <TASK>
[ 1083.319316][    C0]  ? __schedule+0x10b9/0x5ee0
[ 1083.323986][    C0]  __schedule+0x1138/0x5ee0
[ 1083.328499][    C0]  ? __pfx___schedule+0x10/0x10
[ 1083.333336][    C0]  ? find_held_lock+0x2b/0x80
[ 1083.338093][    C0]  ? schedule+0x2d7/0x3a0
[ 1083.342425][    C0]  schedule+0xe7/0x3a0
[ 1083.346483][    C0]  schedule_timeout+0x123/0x290
[ 1083.351329][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1083.356691][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1083.361969][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1083.367764][    C0]  ? prepare_to_swait_event+0xf5/0x480
[ 1083.373217][    C0]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1083.377976][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1083.383250][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1083.388438][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1083.393364][    C0]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1083.398213][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1083.404014][    C0]  rcu_gp_kthread+0x26d/0x380
[ 1083.408681][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1083.413870][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1083.418617][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1083.423807][    C0]  ? __kthread_parkme+0x19e/0x250
[ 1083.428820][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1083.434022][    C0]  kthread+0x3c5/0x780
[ 1083.438100][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.442685][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1083.447451][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.452051][    C0]  ret_from_fork+0x983/0xb10
[ 1083.456649][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1083.461754][    C0]  ? __switch_to+0x7af/0x10d0
[ 1083.466487][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.471083][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1083.475867][    C0]  </TASK>
[ 1083.478880][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1083.485188][    C0] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1083.496021][    C0] Tainted: [L]=SOFTLOCKUP
[ 1083.500414][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1083.510460][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 1083.516958][    C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0
[ 1083.523621][    C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 45 5f 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31
[ 1083.543216][    C0] RSP: 0018:ffffc9000214f808 EFLAGS: 00000293
[ 1083.549268][    C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b2a071
[ 1083.557228][    C0] RDX: ffff88801c35c980 RSI: ffffffff81b2a04b RDI: 0000000000000005
[ 1083.565184][    C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[ 1083.573138][    C0] R10: 0000000000000001 R11: ffff88801c35d4b0 R12: dffffc0000000000
[ 1083.581097][    C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001
[ 1083.589050][    C0] FS:  0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000
[ 1083.598055][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1083.604628][    C0] CR2: 000000110c37e856 CR3: 000000000e184000 CR4: 00000000003526f0
[ 1083.612598][    C0] Call Trace:
[ 1083.616059][    C0]  <TASK>
[ 1083.618994][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1083.624025][    C0]  ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0
[ 1083.630528][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1083.636850][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 1083.642219][    C0]  ? __pfx___text_poke+0x10/0x10
[ 1083.647178][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1083.652190][    C0]  on_each_cpu_cond_mask+0x40/0x90
[ 1083.657379][    C0]  ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0
[ 1083.663873][    C0]  smp_text_poke_batch_finish+0x27b/0xdb0
[ 1083.669592][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 1083.675839][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[ 1083.682090][    C0]  ? find_held_lock+0x2b/0x80
[ 1083.686779][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 1083.692759][    C0]  jump_label_update+0x376/0x550
[ 1083.697693][    C0]  static_key_enable_cpuslocked+0x1b7/0x270
[ 1083.703575][    C0]  static_key_enable+0x1a/0x20
[ 1083.708334][    C0]  toggle_allocation_gate+0xfa/0x280
[ 1083.713612][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1083.719495][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1083.724861][    C0]  process_one_work+0x9ba/0x1b20
[ 1083.729801][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1083.735168][    C0]  ? assign_work+0x1a0/0x250
[ 1083.739748][    C0]  worker_thread+0x6c8/0xf10
[ 1083.744341][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1083.749448][    C0]  kthread+0x3c5/0x780
[ 1083.753511][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.758178][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1083.762927][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.767510][    C0]  ret_from_fork+0x983/0xb10
[ 1083.772088][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1083.777190][    C0]  ? __switch_to+0x7af/0x10d0
[ 1083.781859][    C0]  ? __pfx_kthread+0x10/0x10
[ 1083.786443][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1083.791219][    C0]  </TASK>