last executing test programs:

25m35.505477782s ago: executing program 4 (id=158):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040050bc61800000000000109022d00010000f000090400000203000000e30599063ab616e0af5e5353db2409210000000122050009058103ff0300000009050203200080b808"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x4, {[@local=@item_012={0x1, 0x2, 0x5, "b8"}, @global=@item_012={0x1, 0x1, 0x4, '1'}]}}, 0x0}, 0x0)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000280)=0xe, &(0x7f0000000440)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000300)=0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)

25m31.03834417s ago: executing program 4 (id=173):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x58080)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/106, 0x6a}], 0x1)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000060000000000000000009508000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000000c0)})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x700, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)="0072777f", 0xb}], 0x1, 0x8000, 0x0, 0x20)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60fca33f00087300fe800000000000000000695a539202802c0f889d8d79c1f8ffffffffa9f68000000000000000000000000000aa2f00074966000080"], 0x0)
r7 = dup3(r4, r0, 0x0)
ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup(r0)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)='Px', 0x2}], 0x1)
ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e)

25m30.040161516s ago: executing program 4 (id=176):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xe2, &(0x7f00000005c0)=""/226, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x4f15, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000700)=[{0x4, 0x3, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x2}, {0x4, 0x4, 0xb, 0xa}, {0x0, 0x5, 0x6, 0x8}, {0x0, 0x5, 0x7, 0x1}], 0x10, 0xc, @void, @value}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r3, r4, 0x18, 0x0, @void}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x1e90c2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0xe78, 0x2, 0x3, {0x10, 0x1, 0x5, 0x401, 0x4, 0x3}, {0x1, 0x2, 0x6, 0x7ff, 0x90e, 0x7}, 0x5, 0x6, 0xf8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x10000, 0x1000, 0x7fffffff, 0xf3, 0x7, 0xfffffff7, 0x2, 0x7, 0xd, 0x4, 0x7fff, 0xa, 0xf7, 0xfffffff8, 0x7, 0x9, 0x2, 0x1, 0x100, 0x7f, 0xa, 0x101, 0x6b0, 0x71, 0x1000, 0x8, 0x705, 0x2, 0x9, 0x5, 0xffffff00, 0x70, 0x3e2a, 0x1, 0x6, 0x2, 0x75a7, 0x7ea, 0x6, 0x96, 0x0, 0xffff, 0x4, 0xa, 0xb, 0xb84, 0x80000002, 0x1, 0x5, 0x71d, 0x10000fff, 0xce94, 0x1, 0x6, 0x1, 0x8, 0x8, 0x1ff, 0x6, 0x400000, 0x4e, 0x101, 0x2, 0x0, 0x9, 0x2, 0xc, 0x8, 0x308, 0x5cf, 0x7, 0x6, 0xfffffffb, 0x3, 0x3, 0x2, 0x1, 0x8, 0x0, 0x9, 0xfffffff9, 0x1, 0xd, 0x80000000, 0x46, 0xfdc, 0xffffff8a, 0x10, 0x2, 0x4001, 0x6, 0x7, 0x0, 0x3, 0x7, 0x1c0000, 0x7, 0xfffffff7, 0x6, 0x0, 0x1, 0x4, 0xb, 0x9, 0x8, 0x1, 0x80000000, 0xf9, 0x8, 0x2, 0x92c9, 0x80000001, 0x1c000, 0x7, 0x30000, 0x9, 0x7, 0x0, 0xb, 0x28, 0x2, 0x6, 0xd77, 0x4, 0x5, 0x4, 0x9, 0x0, 0x6a7b, 0x1, 0x6, 0x5, 0x6, 0x10000, 0x1, 0x0, 0x9, 0x0, 0xfffffff7, 0x4717, 0x0, 0x7ff, 0x3, 0x0, 0x7, 0x78c, 0x3, 0x1a, 0x2, 0x4, 0x6, 0x800, 0xc13, 0x81, 0x90, 0xb65, 0x1, 0x1, 0x0, 0x4, 0xcc66, 0x6, 0x7, 0x91, 0x32, 0x2b, 0x401, 0x6a3, 0x6, 0x6, 0x1d, 0x3, 0xfff, 0xffffffac, 0x63c, 0x6, 0x5, 0x5, 0x3, 0x5, 0x10001, 0x2, 0x3, 0xfffffe00, 0x0, 0x9, 0x1, 0x400, 0x1ff, 0xd, 0xe64, 0x5, 0xfffffffc, 0x1, 0x200, 0x320, 0xb0c, 0x7, 0x5e37, 0x8a, 0x6, 0x0, 0xff, 0x0, 0x7, 0x8, 0xfffffffc, 0xdb2, 0x2, 0x0, 0xfffffffb, 0x7fffffff, 0x5, 0x2, 0x9, 0x9, 0x0, 0x6, 0x80d, 0x191, 0x1, 0x10, 0x9, 0x0, 0x40, 0x1000, 0x8, 0xb, 0x8000, 0xfffffffd, 0x9, 0x0, 0x9, 0x0, 0x73db, 0xbac5, 0x9, 0x51, 0x404, 0x204, 0x401, 0x10001, 0x400, 0x3, 0x8c7, 0x1, 0x8, 0x4, 0x2, 0x8, 0x0, 0x7990, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x4, 0x2, 0x1, 0x0, 0x7, 0x4, 0x9ba, 0x9, 0x40, 0x8, 0xc2bc, 0x8, 0x4, 0x3, 0x1, 0xe5, 0x8001, 0xc, 0x6, 0x1, 0x0, 0xb, 0x3, 0x3, 0xffff, 0x5fb, 0x8001, 0x7fff, 0x97c, 0x6, 0x1, 0xd, 0xc8e4, 0x6, 0x3, 0x7, 0xd, 0x8, 0x4, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x2c, 0xfffffffa, 0xfffffffd, 0x8001, 0x3, 0xfffffffc, 0x6, 0x5, 0x4, 0x2, 0x9, 0x1, 0x81, 0x200800, 0x6, 0xf, 0xdb9, 0x1, 0x7, 0xa42b, 0x3ff, 0xa, 0x7fff, 0x7744, 0x6, 0x1, 0x4, 0x4, 0xb21, 0x2, 0x0, 0xf, 0x1ff, 0x3ff, 0x4, 0x4, 0x4, 0xbd, 0xc43, 0x80, 0x1, 0x8697, 0x2, 0x2, 0xdd, 0x3e2, 0x400, 0x5, 0x3ff, 0x8, 0x3, 0x9725, 0xd541, 0xd52, 0x6, 0x6, 0x7, 0x683, 0x400009, 0x9, 0x3, 0x5, 0x400, 0x7fffffff, 0x6, 0x2, 0x4, 0xfffffffc, 0x2, 0x7f, 0x8, 0x1, 0x80, 0x0, 0x20, 0x635fb9e6, 0x2, 0x200, 0x0, 0x3, 0xfffff7fb, 0xdf, 0x875, 0x950, 0x8, 0xffffffff, 0x1, 0x4, 0x9814, 0x8, 0xc, 0x8, 0x7, 0x8, 0x9, 0x9, 0xfffff000, 0x0, 0x7, 0x8, 0x21d9, 0x7, 0x5, 0x4, 0x9, 0xfffffffa, 0x0, 0x5, 0x635, 0x4, 0x6, 0x4, 0x6, 0xff, 0xfffffff7, 0x7, 0x40, 0xa, 0x0, 0xca62, 0x7, 0x1, 0x3, 0xffffffff, 0x4, 0x94, 0x800, 0x7, 0xe, 0x5, 0x0, 0x9, 0x7ff, 0x2, 0xbb, 0x0, 0x401, 0x8001, 0xa2, 0x9, 0x5, 0x0, 0x0, 0x6, 0x1, 0x5, 0xffffff84, 0x5, 0x10000, 0x9, 0x8, 0x2, 0x380, 0x6, 0x7, 0xffff, 0x8, 0x200, 0x5, 0x200, 0x0, 0x8, 0xfffffff8, 0x3, 0x0, 0x4, 0x0, 0xd0db, 0x7, 0xfffffffa, 0x2, 0x400, 0x81, 0x3ff, 0x2, 0x5, 0xffffffff, 0x8, 0x5, 0xda99, 0x4, 0x2, 0x67cf, 0x3ff8, 0xea50, 0xfffffffb, 0x5, 0xa27, 0xd, 0x1, 0x867, 0x4179, 0x9b6, 0xf, 0x80, 0x0, 0x7, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x1ff, 0x7, 0x5, 0xbf70, 0x2, 0x1, 0x97f]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="bc04000001050500"], 0x4bc}, 0x1, 0x0, 0x0, 0x840}, 0x4)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_setup(0x874, &(0x7f0000000280)={0x0, 0x8f93, 0x8, 0x1, 0x2e9, 0x0, r4})
r9 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x80fe, @dev}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001200)="daffc38b69363a52fe80040062100f4c7af35a91f64fddcf51f405595faeea41974e5559ea91f742", 0x28}], 0x1}, 0x4010)
r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9})
gettid()
close(r10)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x7c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000003d00090000000000000000000100", @ANYRES32, @ANYBLOB="4236572d3e5cf133498eb214765e536d71527ac1243402f5b99107000000a46f49cce13856de95"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$inet6_mptcp(0xa, 0x1, 0x106)

25m28.79084945s ago: executing program 4 (id=179):
ptrace(0x10, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8)
ptrace(0x11, 0x0)

25m25.023255171s ago: executing program 4 (id=190):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000280)={0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xe2, &(0x7f00000005c0)=""/226, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x4f15, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000700)=[{0x4, 0x3, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x2}, {0x4, 0x4, 0xb, 0xa}, {0x0, 0x5, 0x6, 0x8}, {0x0, 0x5, 0x7, 0x1}], 0x10, 0xc, @void, @value}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r3, r4, 0x18, 0x0, @void}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x1e90c2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0xe78, 0x2, 0x3, {0x10, 0x1, 0x5, 0x401, 0x4, 0x3}, {0x1, 0x2, 0x6, 0x7ff, 0x90e, 0x7}, 0x5, 0x6, 0xf8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x10000, 0x1000, 0x7fffffff, 0xf3, 0x7, 0xfffffff7, 0x2, 0x7, 0xd, 0x4, 0x7fff, 0xa, 0xf7, 0xfffffff8, 0x7, 0x9, 0x2, 0x1, 0x100, 0x7f, 0xa, 0x101, 0x6b0, 0x71, 0x1000, 0x8, 0x705, 0x2, 0x9, 0x5, 0xffffff00, 0x70, 0x3e2a, 0x1, 0x6, 0x2, 0x75a7, 0x7ea, 0x6, 0x96, 0x0, 0xffff, 0x4, 0xa, 0xb, 0xb84, 0x80000002, 0x1, 0x5, 0x71d, 0x10000fff, 0xce94, 0x1, 0x6, 0x1, 0x8, 0x8, 0x1ff, 0x6, 0x400000, 0x4e, 0x101, 0x2, 0x0, 0x9, 0x2, 0xc, 0x8, 0x308, 0x5cf, 0xa5de, 0x6, 0xfffffffb, 0x3, 0x3, 0x2, 0x1, 0x8, 0x0, 0x9, 0xfffffff9, 0x1, 0xd, 0x80000000, 0x46, 0xfdc, 0xffffff8a, 0x10, 0x2, 0x4001, 0x6, 0x7, 0x0, 0x3, 0x7, 0x1c0000, 0x7, 0xfffffff7, 0x6, 0x0, 0x1, 0x4, 0xb, 0x9, 0x8, 0x1, 0x80000000, 0xf9, 0x8, 0x2, 0x92c9, 0x80000001, 0x1c000, 0x7, 0x30000, 0x9, 0x7, 0xffffffc0, 0xb, 0x28, 0x2, 0x6, 0xd77, 0x4, 0x5, 0x4, 0x9, 0x0, 0x6a7b, 0x1, 0x6, 0x5, 0x6, 0x10000, 0x1, 0x0, 0x9, 0x0, 0xfffffff7, 0x4717, 0x0, 0x7ff, 0x3, 0x0, 0x7, 0x78c, 0x3, 0x1a, 0x2, 0x4, 0x6, 0x800, 0xc13, 0x81, 0x90, 0xb65, 0x1, 0x1, 0x0, 0x4, 0xcc66, 0x6, 0x7, 0x91, 0x32, 0x2b, 0x401, 0x6a3, 0x6, 0x6, 0x1d, 0x3, 0xfff, 0xffffffac, 0x63c, 0x6, 0x5, 0x5, 0x3, 0x5, 0x10001, 0x2, 0x3, 0xfffffe00, 0x0, 0x9, 0x1, 0x400, 0x1ff, 0xd, 0xe64, 0x5, 0xfffffffc, 0x1, 0x200, 0x320, 0xb0c, 0x7, 0x5e37, 0x8a, 0x6, 0x0, 0xff, 0x0, 0x7, 0x8, 0xfffffffc, 0xdb2, 0x2, 0x0, 0xfffffffb, 0x7fffffff, 0x5, 0x2, 0x9, 0x9, 0x0, 0x6, 0x80d, 0x191, 0x1, 0x10, 0x9, 0x0, 0x3c, 0x1000, 0x8, 0xb, 0x8000, 0xfffffffd, 0x9, 0x0, 0x9, 0x0, 0x73db, 0xbac5, 0x9, 0x51, 0x404, 0x204, 0x401, 0x10001, 0x400, 0x3, 0x8c7, 0x1, 0xa, 0x4, 0x2, 0x8, 0x0, 0x7990, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x4, 0x2, 0x1, 0x0, 0x7, 0x4, 0x9ba, 0x9, 0x40, 0x8, 0xc2bc, 0x8, 0x4, 0x3, 0x1, 0xe5, 0x8001, 0xc, 0x6, 0x1, 0x0, 0xb, 0x3, 0x3, 0xffff, 0x5fb, 0x8001, 0x7fff, 0x97c, 0x6, 0x1, 0xd, 0xc8e4, 0x6, 0x3, 0x7, 0xd, 0x8, 0x4, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x2c, 0xfffffffa, 0xfffffffd, 0x8001, 0x3, 0xfffffffc, 0x6, 0x5, 0x4, 0x2, 0x9, 0x1, 0x81, 0x200800, 0x6, 0xf, 0xdb9, 0x1, 0x7, 0xa42b, 0x3ff, 0xa, 0x7fff, 0x7744, 0x6, 0x1, 0x4, 0x4, 0xb21, 0x1, 0x0, 0xf, 0x1ff, 0x3ff, 0x4, 0x4, 0x4, 0xbd, 0xc43, 0x80, 0x1, 0x8697, 0x2, 0x2, 0xdd, 0x3e2, 0x400, 0x9, 0x3ff, 0x8, 0x3, 0x9725, 0xd541, 0xd52, 0x6, 0x6, 0x7, 0x40000683, 0x400009, 0x9, 0x3, 0x5, 0x400, 0x7fffffff, 0x6, 0x2, 0x4, 0xfffffffc, 0x2, 0x7f, 0x8, 0x1, 0x80, 0x0, 0x20, 0x635fb9e6, 0x2, 0x200, 0x0, 0x3, 0xfffff7fb, 0xdf, 0x875, 0x950, 0x8, 0xffffffff, 0x1, 0x4, 0x9814, 0x8, 0xc, 0x8, 0x7, 0x8, 0x9, 0x9, 0xfffff000, 0x0, 0x7, 0x8, 0x21d9, 0x7, 0x5, 0x4, 0x9, 0xfffffffa, 0x0, 0x5, 0x635, 0x4, 0x6, 0x4, 0x6, 0xff, 0xfffffff7, 0x7, 0x40, 0xa, 0x0, 0xca62, 0x7, 0x1, 0x3, 0xffffffff, 0xd2ce, 0x94, 0x800, 0x7, 0xe, 0x5, 0x0, 0x9, 0x7ff, 0x2, 0xbb, 0x0, 0x401, 0x8001, 0xa2, 0x9, 0x5, 0x0, 0x0, 0x6, 0x1, 0x5, 0xffffff84, 0x5, 0x10000, 0x9, 0x8, 0x2, 0x380, 0x6, 0x7, 0xffff, 0x8, 0x200, 0x5, 0x200, 0x0, 0x10000, 0xfffffff8, 0x3, 0x0, 0x4, 0x0, 0xd0db, 0x7, 0xfffffffa, 0x2, 0x400, 0x81, 0x3ff, 0x2, 0x5, 0xffffffff, 0x8, 0x5, 0xda99, 0x4, 0x2, 0x67cf, 0x3ff8, 0xea50, 0xfffffffb, 0x805, 0xa27, 0xd, 0x1, 0x867, 0x4179, 0x9b6, 0xf, 0x80, 0x50, 0x7, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x1ff, 0x7, 0x5, 0xbf70, 0x2, 0x1, 0x97f]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="bc04000001050500"], 0x4bc}, 0x1, 0x0, 0x0, 0x840}, 0x4)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
io_uring_setup(0x874, &(0x7f0000000280)={0x0, 0x8f93, 0x8, 0x1, 0x2e9, 0x0, r4})
r9 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001200)="daffc38b69363a52fe80040062100f4c7af35a91f64fddcf51f405595faeea41974e5559ea91f742", 0x28}], 0x1}, 0x4010)
r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x8, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0xb})
gettid()
close(r10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000003d00090000000000000000000100", @ANYRES32, @ANYBLOB="4236572d3e5cf133498eb214765e536d71527ac1243402f5b99107000000a46f49cce13856de95"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

25m24.490651778s ago: executing program 4 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0xe4, 0x1000000000, 0x7, 0x0, 0x2, 0x9, 0x0, 0x6, 0xf})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}, 0x1000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@fallback=r5, r5, 0x0, 0x0, 0x0, @void, @value=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000024e3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="e115511b66e9bdaca597fa6aee005cdd18010000010200000000000000000000870000006dc8000000", @ANYBLOB="8c6739e2d6e05ef16cf130f479019576973dab42f7cd645413f526d838ba2c75809ac0d4101a91a0e369a8b2cbfeb09b8e86ccaa0cebb5317e69cfed0b46441090c932475332ff1d4673bf9768906fe98de38c5d29d9b78df9d034683b63700b9c5de24a4893a8fcdcc948771fb327851ad4d9da10b78dc71c9314e19183639bff3faeec1081a0c9585014091aec8d93a2e5aedaea24fa2a1e4a4d7c7176650b68593b3ecff924a42a9b7873a0b3ece028d629737b32ead8de120cbc92d159f24d89713c30279498b59076a8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

25m24.265525522s ago: executing program 32 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0xe4, 0x1000000000, 0x7, 0x0, 0x2, 0x9, 0x0, 0x6, 0xf})
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}, 0x1000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@fallback=r5, r5, 0x0, 0x0, 0x0, @void, @value=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000024e3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="e115511b66e9bdaca597fa6aee005cdd18010000010200000000000000000000870000006dc8000000", @ANYBLOB="8c6739e2d6e05ef16cf130f479019576973dab42f7cd645413f526d838ba2c75809ac0d4101a91a0e369a8b2cbfeb09b8e86ccaa0cebb5317e69cfed0b46441090c932475332ff1d4673bf9768906fe98de38c5d29d9b78df9d034683b63700b9c5de24a4893a8fcdcc948771fb327851ad4d9da10b78dc71c9314e19183639bff3faeec1081a0c9585014091aec8d93a2e5aedaea24fa2a1e4a4d7c7176650b68593b3ecff924a42a9b7873a0b3ece028d629737b32ead8de120cbc92d159f24d89713c30279498b59076a8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

13m31.0905227s ago: executing program 1 (id=2769):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r5, &(0x7f000000e280)={0x2020}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x60, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r5, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, {0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0xffffff0f, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

13m27.373768844s ago: executing program 1 (id=2781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080019004600002108001b"], 0x30}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r2 = memfd_secret(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000610500a60600000800000010a00000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000001000000000000000e00000000000000", @ANYRES32, @ANYBLOB], 0x50)
shutdown(r2, 0x0)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))

13m25.856082912s ago: executing program 1 (id=2784):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0)

13m25.74672821s ago: executing program 1 (id=2785):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open(&(0x7f0000000040)='./file0/../file0\x00', 0x200400, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, 0x0)

13m25.681528314s ago: executing program 1 (id=2786):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1})
io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

13m25.582101421s ago: executing program 1 (id=2787):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6(0xa, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0)

13m25.489298195s ago: executing program 33 (id=2787):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6(0xa, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0)

10m33.730944802s ago: executing program 3 (id=3522):
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150000000000000000000000020000000000000000000800"], 0x1c}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/udp6\x00')
preadv(r1, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00', 0xdfa})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000})
write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

10m33.518222706s ago: executing program 3 (id=3524):
syz_usb_connect(0x5, 0x364, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0)

10m29.374664004s ago: executing program 3 (id=3540):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100))
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
syz_open_dev$MSR(&(0x7f0000000180), 0xeb4, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0)
pipe2$watch_queue(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x2f)
close_range(r5, 0xffffffffffffffff, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
sendto$inet6(r8, 0x0, 0x0, 0x8040, 0x0, 0x0)

10m27.870831316s ago: executing program 3 (id=3546):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x100000000, 0x80000000, 0x0, 0x100000000000800, 0x800400000000200, 0x2004c8, 0x7fffffe, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x20, 0xffff, 0x8000000000096, 0x80000, 0x100000000], 0x5000, 0x40001})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYBLOB="14a54647df6751bcc00de55d02fecb41f76c4a5a0ea3937bf1887d66f2c773be9d8d902b147e56213206acfa8e4d015bd32681e5fc581b24043cffdbd1d8785c80269de26126649c2d75cdd23143a496d9cb9210e843a98cdde66d5ca12e3ed4beb85cce36c4836e5e16899666d77d6a24c825177052c7a18f00d2d52456ae7cced5d4337a596a62e81ed39d846ed2462a5b81eef31aa0767431fa2d2ce8165a5dd7d35cba7d526d1597b87e93e0169e5447cafcc7d4a02bae515e4b6d719fab3272db505161e9", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES32, @ANYRES64=r3, @ANYBLOB="3751ee8d17772282180027d3c78070a795422f3fbd6e95bf25674efa3350743bbc6e1e7b5404916217aeb1b2492fa4b435ab474ffa818e667d09a6a271a52ba08357dc52de8000569570d96c7b09e3b4e40a78f5ccd8ed14c4d88d941b145f7dd9c5c8bdadd33d71a99971bcda51bee138401cbf5d2b9bb74ffcce8028ece5b4d54ea03e805e71114f674b0ba5a62d5ac6cc16f436c2652b96b76cbf72ac27a8bc3d5929ded7510501b41476c4d86be4157507edb77de74f749153731ac94c9b75d531e602c2a9a7289ae1ff90daf7d8f18066e348b92fe52360a6382b0e", @ANYRES64=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x4e33, &(0x7f0000000380)={0x0, 0xfdf1, 0x0, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x0, 0x1)
syz_io_uring_setup(0x111, 0x0, &(0x7f0000000340), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)

10m27.489356028s ago: executing program 3 (id=3554):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f000001f480)={0x34, r6, 0x1, 0x0, 0x25dfdbfd, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (fail_nth: 2)

10m26.518517105s ago: executing program 3 (id=3556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff041, 0x1200000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r0])
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x0, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

10m26.333226009s ago: executing program 34 (id=3556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff041, 0x1200000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r0])
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x0, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

11.778215923s ago: executing program 2 (id=6027):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
lseek(r0, 0xffffffffffff9cff, 0x1)

11.60280119s ago: executing program 2 (id=6029):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2d4e"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00')
pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0)

11.132715157s ago: executing program 2 (id=6035):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000052850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000008000004000000000000000000000009100000080000000000000000000000000000000000000000000000e531bc5d05271d040d4af8"])

8.938135828s ago: executing program 0 (id=6040):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x96, 0x90, 0x34, 0x20, 0x2058, 0x1005, 0xb5f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x51, 0x8e, 0x3f}}, {{0x9, 0x4, 0x62, 0x0, 0x0, 0xd1, 0xd8, 0xa3, 0xff}}]}}]}}, 0x0)
listen(r1, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x1fc3, &(0x7f00000002c0)={0x0, 0x4bb2, 0x8, 0x2, 0x27})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000000ed, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xb, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x82, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(r3, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3fc, 0x2a4, 0x94, 0x1c8, 0x2a4, 0x94, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'gre0\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4b4)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x0, 0x3}, {0x7, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)

8.395018188s ago: executing program 6 (id=6045):
r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x42)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
socket$key(0xf, 0x3, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r5)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000080)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x0, 0x2, 0x20000002})

7.33024247s ago: executing program 2 (id=6046):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0x20001100)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000001200)={{0x1, 0x3, 0x8, 0x1, 0x1}, 0x8, 0xffff})
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x100)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)

7.185963388s ago: executing program 6 (id=6047):
socket(0x2b, 0x80801, 0x1)
r0 = socket(0x2b, 0x1, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

6.973220822s ago: executing program 6 (id=6048):
prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x4, 0x40265}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x4f, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
socket$inet_dccp(0x2, 0x6, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2143, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r3, 0x0, 0x0, 0x4000, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa8\xbeNz\xb4\xb5R\xbfY\xe4b\xc7\x8e\xde\x14\xb0\xfb\x90\xf9\x9d\xbfx\xd2\xd08?TW|\xfeP\xeb\xa2\xde\x9f7)\xf5\xde\x1aD\r\x14\x18Y\xc5\x99\x99\xa4R\x7f\xba=\x887i\xf9\xb6Wl`\x8c5\xecrL\xc5du\xd3>\xe6wQ!\xd5\xf4\xfc6n\xec\xa0\xe1\xc0%\xba\\\x02}\xf3\xcb\xe7N\xc2h\xe2r\xa5\xcdu<M< \x9f\xcfA\xc5lI5\xc0\xa1k\xfbR\xdd\xcf\xfa\xde\x92\x98-$m\xf0+\xa0\xb5I\xdf\xad@G\xdc\xe8\xc6\x8f\xc0r\xcf\xcdp\xb7T\xc5\xc1!\xbc\xc58@\xb4\x1c\xae\xef\x0f\x14I\xd1\xa1\xfe\r5eP\xa4\x1c\xed<\xbe\x13\xa8\f\x1e\xb5\xae\xcdFuzC\x9c\xbf\xd0NA\xcd\xe5\x1a\x05NJ\x88\xb3\xb3BD\x8a\xbc\x141H\xfb\xb4\xf1\x9a\xcckU\xd1\xb4D', 0x1)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f00000005c0)={{0x6, @rose, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x40000})
fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1})
r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x111800)
connect$netrom(r5, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$BLKPG(r7, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x4, 0x7, 0x1}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
clock_getres(0xb, &(0x7f0000000000))
clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x8000000000000000, 0x1}, &(0x7f0000000080))
clock_settime(0x0, &(0x7f0000000200)={0x5, 0x7})

6.330788034s ago: executing program 0 (id=6050):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0x20001100)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000001200)={{0x1, 0x3, 0x8, 0x1, 0x1}, 0x8, 0xffff})
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x100)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)

6.002787038s ago: executing program 2 (id=6052):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x80010, r0, 0x151a7000)
r1 = socket$packet(0x11, 0x3, 0x300)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x25}}, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a3200000000"], 0xc0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, 0x0, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/221, 0xdd}, {&(0x7f0000001800)=""/105, 0x69}], 0x5)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r6, 0x0, 0xffffffff000)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x7db, 0x4)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448c9, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@newqdisc={0x370, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x340, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "8c5e66e34f918b31636c4c6e0120ab7ff803af0238e64dc7a45751a45aa895f292896ba296ae5b6401783055dc51655946ce921d603366dfcdba9da2e42ba32ff6394e62df75fdabb8120c9aa8044690ab372144ef793036667a19289dcfec00003cf4ba029f9f393fe20c979faefe0e1ef06b2b36c22cd12b18db00ef935703f0d4d62ee732c54d604d366a56902071f2c244cbf7d7bb92e50a35940e436d16c1c907dd27016da9cc19f1700079fe63c136cebac977e77d9614899df3f1c096c072f8e549f5cda7e29b1a28f749fbb05dc3cd13a6f5a4c89d8690af69fdb83f8147e850af49ff9d1b16195a96288b61815f803f263a64b847d3a5accb159fef"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa}}, @TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x4, 0x20, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xe}]}}]}, 0x370}}, 0x0)

5.437955797s ago: executing program 6 (id=6053):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd523471259"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
r3 = memfd_create(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4)
lseek(r3, 0x7fff, 0x2)

5.273850622s ago: executing program 7 (id=6054):
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5.034128887s ago: executing program 7 (id=6056):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000052850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000008000004000000000000000000000009100000080000000000000000000000000000000000000000000000e531bc5d05271d040d4af8"])

4.960259891s ago: executing program 0 (id=6057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'})
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@allocspi={0x1dc, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@loopback, 0x0, 0x33}, @in6=@loopback}, 0x0, 0x800}, [@sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x8, 0x4e24, 0x9000, 0x0, 0x80, 0x80, 0xe53fdd0f3919bb87}, {@in6=@remote, 0x4d3, 0x6c}, @in6=@private0, {0x7, 0x4442, 0xc, 0x2, 0x81, 0x5, 0x3, 0x23bd}, {0x0, 0xffffffff, 0xfffffffffffffff7, 0x10}, {0x7, 0x6c2a, 0x4d}, 0x70bd25, 0x0, 0xbc5c2d13af9e37b2, 0x1, 0x9, 0x43}}]}, 0x1dc}}, 0x0)
write$qrtrtun(r1, &(0x7f0000000280)="ca1c808bb35bdabb49f35c09d456591f0c15a08769bc", 0x16)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4)
write$qrtrtun(r1, &(0x7f0000000c00)="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", 0x1a2)
write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/16, &(0x7f0000000100)=0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32=r0], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad040000000000000002000000"], 0x24}}, 0x0)

4.95783489s ago: executing program 5 (id=6058):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
dup(r0)
syz_open_procfs(0x0, &(0x7f00000000c0)='attr/keycreate\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00004b7084fe17b2921800"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

3.857919091s ago: executing program 5 (id=6059):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0x20001100)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000001200)={{0x1, 0x3, 0x8, 0x1, 0x1}, 0x8, 0xffff})
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x100)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)

3.294322014s ago: executing program 5 (id=6060):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}]})
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0xee00, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094)

2.348002292s ago: executing program 7 (id=6061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008d3736f1d2ce99860000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000400000900010073797a30000000000900020073797a3200000000140000001100010012000000000000000000000a3f7586af5e6ad0d1ab63666fb42d77cc0f24f7844d040c8de26f4c8740c1f4431621a93534437e84"], 0x68}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYRES8=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r1}, 0x10)
r3 = gettid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300a9ffa57b3e54739ac54ab98ba5cc870fb1769cd31f6e6e5c10e5031fe34e7bfadff2d5e4984dd19d61f920114f7b2c4d508a30d3e6fa1ccc157964204c9a192d64e95dfba1358088c824fcdeb8ca1e165052e4b612e1d9685421101bb601d120d3a9a4a92fe105ad4433670db6b2224efc56684fda9fc3ea93765a000f8dfc8ecb4dbd0e3d7d6970e06c0f12783a54a2a9c92e84", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11)
socket$netlink(0x10, 0x3, 0xc)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000700))
write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f00000004c0))
syz_emit_ethernet(0x100e, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x48040900)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r8 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0)
landlock_restrict_self(r8, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)

1.933161824s ago: executing program 5 (id=6062):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r2=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="c9015ffc076b"}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x4, @remote}, 0x10)

1.774820809s ago: executing program 7 (id=6063):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000000000000034d564b000000"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.527408846s ago: executing program 0 (id=6064):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000200))
syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010100009c1100fc020000000000000000000000000000ff02000000000000000000000000000100000e22009c90"], 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$nci(r3, &(0x7f00000003c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x0, "455ba11c95528e719f106611e1408d4e72172b078df2a50d8edb554d764de00f667765929d3d814d695aa40f151d3a38e2bf05cffa1a94c3510c06fcb9f80b4a7bcc0f717be31ee3a089acbe34bc928fd5cd3e"}, 0x56)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)="fd72c91726872af17284cbbecb2360cff1988314f6cc09c4c07f0b44d9c16a610f294283b780b506b765d798ca8ab5adc7424057689ee5685dc17105c83aa4ed88bbfc7fef38b630105a17b9c6febfaef81e3242f4b460a05490dce8fd165641538fff4d4f46f9e24217a754881ce31e40b204d9126e3103f7aedd9c3194c82a62744ab6"}, {&(0x7f00000000c0)="6eafae9268cbdef2c4610d53e85605490ed6ed506c0b5fbe97b851b9277a5dac0ab88672b8ac5b883cff936f9216ae43f0061ee6421eade3910dc65d94f385486c94"}], 0x100000000000000b, &(0x7f0000000040), 0x4c4dbc2f6118216a}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, 0x0, 0x0, 0x0, 0xd0}, 0x480c4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000440), 0x1, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x1000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}}, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x40000, 0x4)

1.444972588s ago: executing program 5 (id=6065):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x7ff]}, 0x6)

1.346703634s ago: executing program 6 (id=6066):
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.308745983s ago: executing program 5 (id=6067):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000140)='m', 0x1)
syz_io_uring_setup(0x7c31, &(0x7f0000000440)={0x0, 0xead9, 0x40, 0x2, 0x291, 0x0, r2}, &(0x7f00000003c0)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x8000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc)
close(r9)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000400000bce)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)

1.258345788s ago: executing program 0 (id=6068):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'batadv_slave_1\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0601, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, 0x0)

1.142495887s ago: executing program 7 (id=6069):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = io_uring_setup(0x6282, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0xf, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x1c, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x2a82)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000007, 0x8000)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000880)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x202, 0x0, 0x2, 0x20003, 0x90dcee9397caba8d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c683dda1af1ea80000000033000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54a0ec11d875397bd7561ac000000000000000000000063000804000000000000000001000000000000000800", "90be555a55f9640000000000000000070000000000e7ff000000a3d402008000", [0xffffffffffffbf00, 0x9]}})
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000200)={0x2, @sliced={0x4, [0x0, 0xb95, 0x6, 0x0, 0x3, 0x6d3, 0xf, 0x6, 0x4, 0x80, 0x7fff, 0x9, 0x1, 0x1000, 0x4, 0x7, 0x2, 0xad, 0xfff, 0x7, 0x8, 0xfffc, 0x5, 0x8000, 0x800, 0x6, 0x2e53, 0x975f, 0x4, 0x1, 0x9, 0x8001, 0xa, 0x1, 0x7, 0x2, 0x9, 0x6, 0x7e70, 0x0, 0x47, 0x5, 0xff, 0xfff9, 0xd06, 0x2, 0x1, 0xbb7], 0x3ff}})
unshare(0x20000400)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

1.141047623s ago: executing program 6 (id=6070):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x67, 0xd0, 0xff, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0xf8, {0x9, 0x21, 0x10, 0xc, 0x1, {0x22, 0xabf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x9, 0x81}}}}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x6, 0xe, 0x6, 0x50, 0xa}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0x0, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0xf, 0xfffd}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xbc, 0x4, 0x9, 0xf, 0x4, [0x3f30, 0xff00c0, 0xfd8c680ad37ff6cf, 0xc03f]}]}, 0x3, [{0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="0c03d6fba92b69c8949a4b69"]}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x42c}}, {0x7a, &(0x7f0000001340)=@string={0x7a, 0x3, "0e874e868d6836af2038bd5bf650601a0153947508e9bece1a6fa3fcf7525ca3b5e6da9dfb560e02a4f8000f780f6aa6f1173f891e6bb64705b7b159786ce696b061fb7604ee882459a40ff46b85850f50fc9122a80bf20d8bebf948c433f08805fd9db49e0432bf91355104f32bc7661cf76f2e42f9121e"}}]}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_disconnect(r3) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$char_usb(r4, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000440)='smb3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a3\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1br\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\xd6\xcb\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9&\xe6\xd5\\\xb5\xec\x99@\xd2\t\n\xb1o\xc1\xfc\x85\xf5.\xa2\x17\xdd^-\xe4\xa7d`\xae\x0e\xe7\x14v\x00>7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) (async)
r6 = accept4(r1, 0x0, 0x0, 0x0) (async)
r7 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x142}) (async)
r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$nbd(r10, 0x0, 0x10) (async)
write$UHID_DESTROY(r10, &(0x7f0000000040), 0x4) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f00000000c0)) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007740)={0x14, 0x38, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0xc000) (async)
io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r12, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) (async)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r13, 0x541b, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x8})

646.883151ms ago: executing program 0 (id=6071):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x158)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x2000000, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0)
r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r4, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004d9f8208c007121522300000000109021b0001000000010904100001faf40d0009058203", @ANYRESDEC], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

43.759445ms ago: executing program 2 (id=6072):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
close_range(r0, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_gpio_in\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000ffffffff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

0s ago: executing program 7 (id=6073):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8)
setsockopt(r2, 0x0, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10)
msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
mremap(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x2000, 0x4, &(0x7f0000002000/0x2000)=nil)
sendmsg(r5, &(0x7f0000000440)={&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000540)="3d9d4f9a3bf8b759098b3c55090380075487ff2de2070f62db19ae8bcc996b29676a61ca57156fe79d3fbabb1dbeea3cad48d89635e2a97235b905db3c555b571418db8f531b0c2eb35c5c6c6f69daabfaa4b382de054ce811f757c9039d640d911028bcd0ad2adb8f706e990302c63eb1461e996182a9a3d15233dc5df587a0591195c84948b30ba4017f03c02fb81c46ca7eb74a52190abe58aae03e9a387989bac49b44f4af43a6051d7d155be6895aa2f360c1d37c65522e0a6dc85cce850261668464cdd97d4364a795dff361e2a7e6b6d0d77f2dd19c1190035c5d0578", 0xe0}, {&(0x7f0000000140)="6bb463c920fadb9ebb3da91a1fac19dcf1a55797eeafb0b214fb7034a3781d6f780b5614abbc42a8aa1559dbb947", 0x2e}], 0x2, &(0x7f00000011c0)=[{0x58, 0xff, 0x3, "a721e4eda6fbfaa7f709444678ff32b024d312093bc07ec750c4b779847e661f4e6708592deb3cffdb041c8da502b65346810cb4b7c6850f773862d5792c7608989d9fa48bf0e5"}, {0x30, 0x128, 0x8, "9b0de2da491697d7e7a7978fcd6ba5b955a0735a4934996e47"}, {0x1010, 0x3a, 0x3, "fe0a13079c0ef5243c24004889264c070751d2c9a60e25c72a37999fe85105cbeabe263c9550a58d6e0f2e7cec41b1d95352cdca599b498ca32510fedbfc7c46d7aa7209449cd8dc5231528b48ffe7abaf9076cb532cd89d875507663bb518eafbc64a3daeb2883d273ca67e806a689172591c29b91845f671f082fc9f9a206173c62de4f962b54f7db5ad851eca1846f3db8d809feea2dc641b1c929490bbb0d1ff688c66088bcabab643f59803aa021a95e8322bc0bb1434841e5c4ef2be3d6881c49f2b832ff610ec249fd26ef8f5635cf57504bb1157135d7c6289c691506f5806cdb621a69c1f842ae26c4f7db6550f031c73133c02efa4e647340c71ada20ea69106deb0907db99cd4e8b1c350c310016bd09fab5a31cd34280559d377e396c24063aa10eb05dc7eb8394ad4af6fbb115919f3462c2ec720c445368a65e5f7544dce1acb01a9e9ef8fb6264e965195031dea82361155dcec17278df396ee559594486987be26e1f7fac7fc8894504ef455ab760f56c2299d0d02e537410eb6bdc4bf990ba7d918d638cc771a4e3310d8bde755c0bac86a88dcf0d22ee267edb62b3bdd98bdfc1035f9833ae7529f80b01ba16279c06e33d3b36da359beadd6d791dd401996cd7c3a9da81f51640738d53d163dcbd618f4dacb9acc15efffa7a26d74366c362b2567b723078de11527d18b4c1c40f40327dd57cda94f58ba719da81e2a678384fb589e0dba1be9e505e420bd7ce6492d1d5d27c4ceb1442d8a88f0e2bc88a16c328ca3a5e7e28e3df691c528158de7cd0fb29853472caef98652e840c08bd5f99a6dda1ae5a9e5af1991c29485ec89facb4fc14cba014da0659d9f2bdfa672355625763d7494fae7c11f3ca36d30b1f6c081e04ccdc87253768b8aa550047d66f1a68a4eb4be8b94dc81175f0825aecde916b13548bdf1f8a6191c59c03213ec1bf6d1dcd77dde72ddb80a57147a1f12037770ae9b25e318eabe5fce299fa0fc14b1541ed634cc18c90091aa23378a874f78d938c881c42b341ccea0cb8c498cc67af895b31208cb8c28425c1712d05148b7fc48deb85ee17eb43893d8e7fbab471d765a77ab69eda3a4c869da3e9c07a358a690cbf8836aa9a40fa3ed73f73552bd2f96bcc414a022008cabf4149bffe995156a363851e744c447e7ceb1ad6cf7f11fe7d0fe81bdfca2c6fc7cc37a7ae0e1a2e68c934cf355ab97a045156a42969f3873100bc45da1d06d3ed739d8406a7f2ad010eb7891aa0183e6b358368d7578bb2a207c382d64d0a47eeb7c334487b5ebc0d81aa482e82950322b0ace98bc79cdd884de0f87fbc3039e90d287efd9321d5ecf6d6c3408720073ded3a1010afe3e6d373075320d3f69d6dd8061ca9921b43a55174283d68ec02ab5ca10a35d8844505216b5d403f20424618655b315a36acbc3967af682b8631ff5d50ee087413b36303158df9299569a0d98552e7efa8b19b4365840c535810983700b18414100c6e230ffbb3fe7bb4c6fc48bec101d57fcabacc3bc439075c2172a40c166a1b81df8184e79b9cf116428c3b5d54a4ebec83629b9f35aa5c0f064004776d27eee5d01757851d8756813878e4387a0be64072454384fe591b32ac779a60bcc0e2412b29f296e22702a98749b2545400dcb0357cf75be804c10640ac176cdb261d0d16abdc9bd13abbed51eb5049ae87ec687d9d17e74249aefe3450308de144f6f92f3ca552d5445156ea490c96182ea4a0c35a984ecbd98e5bada5ae75270237069f9e0ac1e05ededc94f6497faba0fbe8d0e430f5bee204cc556747270a9e77f4248a10858ae8c10789a15e71157f7f0d75c1349429df1677f39ad946ae0d318614d804e224156dfa4400ef85b901a79c947a75c33d80d8887d9b851516608b30a0fb47750e486ed8dd5e77c887962e997d657f9cc2df263e94b236efcf2c0a83674a0175d97230e9a2f0007ebcf790fba5585df21f6e71956867fc49645d05521cb39f55b50723ca73e62788fa0e1785a4b04876d336a57f94921081c375ff49c01d98d726047498d28853b57af54475c64b6b11e69ab4b03eb89f79b3921f1d6939d2e204591d9c71d1e43725d3f20807e6b5cff2fd72cc9c7da1e3eda3e156b886ed7e8bd6217d1360e9e6e085ce449839d639448552019d41efd547387e8426b1ecb0a1ef2bfdd97de634ca2c7454fb0b5d511caaf00ee4b3b16f21096642708d245578207c744009b782e8c950e6e79900424b00280956f51b156e4d46bcce0fd7c6026dc32e90d2f6b66f5d1d377a089aafa0948a5e262e4c703cab59919c82e368b65848d7082a152edf77ed95c6ccde1dc92192c910b3a18482ccf3ff1ea54401e09b134881a126bd4b49ccc00ce8ff539ebc53554d27f24df3059ff7072997d413d44ce7fbdfef7526bf6272bc5bbcce7182138ad8d6ffc0ed59db149d1dd088994d1bfd3922f11985a9e28162bcbed14b1f8bba040c4290f808251d220a8da7e6f5a6fa064ed205e4ba6416c3bfe2d5835cdc72193addc50d0d92e4e064c5b773f062a3eced8b8e6d23a0fc114ea92efa50ed605e09fbc779c1159381a06e32957e01ea47f159d99dd5aa29ad08dbe03ef67c1a29ee7eee852fcfe074f25af09129eccd0f9074b6b65a2627910ef586b8072a1885d809f144e75141c18a9e1598619c03ff74af61ffaba8df52c1171d47dcd04c71e170b32c10fe027ddbbef233371bd6da00396a863a69887984788192c91390e406b64d2dd67a7dbb446e0dabfd8530a3b4e079e421af0d6c76c65ab34a12e1aa32cfbea13132d9cccdc18640b26bc67ad955bcb87e45806ceb1fffe70ad27455256c55668afc0f45021273d87eea0fa03b953caf1f8dd9dd7a7160ee9c754b8c26d0a57be40434346c8718d9f7e5befa7cf048ba517359305b86bc4228b0916c8c574f207c410a25f430ad8807fd5f32324111ab7bc92d8a47605120183a9e57e9d5377d7f2c62a09a8757b660738f8b03d55f645374582a5b3baf75f32b7a0eff75bbff24de5ce97dbfa775d3f4f3966c0cc41db93c4c4d2eebbac0887070b7b0d3d06b55fe196c87269f3dc44110462964597c8cf7e5ab7e2e0a026b4062dbe51597b7dce72798415a7aef55e7a463dabd259a3b1de48645e40e92265bbb6ee0351d253db33b805fef8cb2fc111b0bcf51af268ec709a69adb9aa7d38b8c7a2c5dd879bc6d6435b0fd008b0a5354258be2b79f334b08f84465a1303bc42727928998423f1694f3654e95352b84611b6babf754ee66c08fe12b089afd82be95fa3ddda29566107700d42ff96e15f9b45d95ecf9130db3c6e4c58bcd03c2016b74d34929d098fb2807ff5756c70240ed29efc9f1e195f01293601ab492e29cba68d8e25d073854ccf002afafd89718578a8dd2ef9020ffab82acaa085344530d92338685335ccdecab518128c272b872118a71a6157fab2238776585a9de6b0ec517f9894c7d7cd8066ebf23ff28500340abdbf1ddf488268dd80272197e7d7c7dcbf20ceb8cdf7f246b7c702e2a4b200e4234c8ce0d160ca76d27598338930c7c728db0249144e5558d1ec1c3ba558cb386d412d344e6f8ae328fc99e9b375adbc9008e09b1065d5652019ec56c77ec181c6db9e13c831bc9b001df480d3ea3db1a4d2897b8238e51777bbb06b3fd87eba6e64bf815d30b96f0cb3acbd27b1f20a2fc67f52252b5d9589dfab703624d00b17268b7aa6665a968dde3cc128e77bdcf6bbe0615ca5c99bc4a029a51dd09aaa18333d06078a053ac44c8506a0394bed9ae5f30aa46e3ec3024b1f5b286854eb3ef025e50d7155d0c71996360caa2574907e0c2782035a9803dd60939697ed4247c4cfd9497c803a5e4a25f79274f890cab00d03addf5e6354de6770d14e98941d9bb4937c9fe6aef2c04e0aee20c03eebd8ac6e769ad33369aeb9a938ecc60d5ff0ab80a3cc3036f9f7a1236963aa25b3eb109fadd28431921e5b1330f021801634b9bfe375c3164f437ea70cb682135319b7d2cccd2fb46730df06318fdf57a40dbffa15ebe69fc1f5f36833e19e5c420a2b95c4b83f8977bd58e200806f1d8423fb2fe1aa72b7a88c9bede3af4c69903b17f4cadcbb43e9df9783d2dfa13b5145a14c6a5ab87a247379558f7d737884428a9f0d779847395b2ee5a2e512a9bc2c16ce4613ba9680d3874072dfb5897ddbf9b4988df04a453489ba44df492214ae986c29ac395b444d0b895f3c247b6818385526187cab355bd4967c0b1cd5bfc3b21dfe660a2803da12aca1aa71d1fd71d081724754fec17fe77a92103867584c30a6209921498bc44ca059243d46a6f3b7824e23331c2839e926249d6e67e5d1ca582215af0458b3b542eaf8cce1a1e5ec87b6d6bb7bdd522623590d9ba55fe0fa88329643022aff646837f9570833a656d4486b44b78bde3098c1fe1a0c9e6f3e79054e9c678610a70b58ae3c002665be0c94b70f93d194e3636ca43112442e4fdf268678bb61de606a6d1091450ddbc0238550712f35d4deb82e0e38e2dd44c3e7cfc7e7a4fae619569695f042703c7e3bfaa4a944752b44bd6442ebcdaf08559f1af2237d2982f5b2a2bfbb40ddf510f411f347fefc6df22959fae73dafa61e40df2b5341f8bb6274cfc8f8b7bbb2ce578b3c2a0d7323353a15f695b0c12256ddf2c7171c1857b5f424b785c9e66573b3aa7b322426ec58e2374766850a75cd01fecf5e91674d307b9a1c2e3817f3d57738817804e3c0248690838cea7c557869279c84ad3c2c5c1543194b867e0c4e712305c9adb1e3a99c54fe06b6f9de26f9a079a13dae2d0299fc6c24cef7ae0feb4c89802e86e124d8fc792e5334e024a28158cd5ed6503cef19efb7842cfb011bad553bdfec41e592f94d683552cdd5d60e6bef3324293d119acc6a7aed08d988a00f505f6153c819d606b274656c6b5fe56c5b51d11119276db1ab7b08c7fd1f7cd5360d5dc006c89143fb0d857e417a4fca6d6b7175c281a6cd726c7f39452cb778738d9d26a0045ae272b5e3d181156a45d2aae0fb63a81acb7f128bbad6ee6ae2115d51a211f9d36ed999787ed19d5fe4d776713275b71f5cc3ce9d43caf41a7b7a93ec3be4ac86b7f2edfcca10d4de42a97cdef56dc5310254895b4dd7eab07c9b462c24a6ee257c80a4d2aeb26e0b444f5572fd8303c09144aca9b161751dd495ca77975326376ad409a0c1063201fb8ed9e23b240fd0c95bd0382167db783cd4aab0fc7395fdb4941765278433b1f05765df50a91d8b50569cdba9a21d4152227b1255c2ff10b5d808ea2b82ded73d77d670095e21c71307d9da24790017f4ff2de6b47485cb9ec4f0aa57a623a6f59198ecbe2a74d8238908e845a1c7cbc1f9a340502ef18fdfb050b0432114f39f1c6e73b67d37994a25e3f1620c7bb9138a48d524b8c7ea05982e1be15af0e18e603ae04755b3b98faeb68e8872e391a6e2d4e4645bceb206997274bb83aa1f6dbd734e4eb0b4757f6eaea0ca219b10084f1d9f142f83bbc6b215acb22ac9b2c899b49de218cba6aa45660946625dea3d697641cbe0bb4a27164f2277b260447b66fc18a712ed4366a3ecfc76393eb37900729906c2b5925db4d726b08a8f77fdea10d60d11b7ae483a1323b398a7397b9e094889edfe1b92074f7a02a24396e390d0a814efbe6b3583cfb7fa16ce68576bfdb894e15b9af6663cb9ffc6fa58e453d57d22a38e758323f0ecac725479e1d47dd9d25024c24158dcd6bd1cb032baf41ecc"}, {0x110, 0x10d, 0xebdb, "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"}, {0x18, 0x0, 0x6, "44c8db"}, {0xa8, 0x112, 0x9, "6645269aafc85dd9e7e7424c0fcf7417c43d862cf99c3ca7cc57af887c255be80a80bd8479d697ce83a7a152a4789876e14c75225ccdcedadb3f016e101725ed55bcca26b48c9c989e6b2c8754d1caa74fe769f51f2a7382230cff0631ac63957be836d24658be74682396983f03853506b1806a6f16978b3a9a325da2e9b0c91813e4f36ad7a85b1fd07b95f2978a87ba6afc93c24f"}, {0xa8, 0x118, 0x2, "f65224330ce155ff12dce788d8d5a7ae6128b33cbc3b7d29c5ae7be97f8dcd2c3b9acafce091ca69ca54fb92360fd9cdec4ee7b0523d213e6511e3a867e97d1dbd3cb018199fe3d98f3ebb810a6e7c68573728bb72419425de1c644de8a80266bb3fdfaad1fa6b98d203697bf88dcd81df9976c3b6bd3bbdbf6eb35de99ae82d72d86bf1b589a1d5895acd4a1d29635c94429687ca89"}], 0x1310}, 0xc4)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000800fbdbfe25440000000800030858a072c64c4be4833c84b3cb399a46ca4ca8bfd72a119528f56cc7b2118e3f041f083f4c90acf00848436315e6a1eb87bfce61b1c312a28f23a0f0a8b2cf510f45465ea50a1641c0ea674537c51141a97a8bda2d7485785087f5f4b3acb0c32e57f546ab6f587da06c320cd480f50bda9f75d07bf74cc655d0788e1d5fdd3be7ba21d82644a42e5b8efe007341b607030663faf0851c44716d766f9be11714c9b4e91cd590141f6313a5e9", @ANYRES32=r6, @ANYBLOB="0c0023800500130001000000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
inotify_init1(0x0) (async)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x250003a3)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_GET_XCRS(r10, 0x8188aea6, &(0x7f0000000040)={0x0, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) (async)
r12 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r12, 0x4147, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000006c0)="66b8090000000f23d00f21f86635200000000f23f866b9800000c00f326635000800000f30f01100670f01dfba2100ec36260fc777d166b8ea4e00000f23c80f21f86635080090000f23f80f01c8b86f058ed0f08020cb"}], 0x4f, 0x40, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x1) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)

kernel console output (not intermixed with test programs):

dv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.366384][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1493.383238][T25420] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1493.394981][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.406481][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.419814][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.442940][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.472977][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.484406][T17370] Bluetooth: hci0: command tx timeout
[ 1493.491844][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.502227][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.513135][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.523414][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.535271][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.546240][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.557565][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.573972][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.594944][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.604845][T25420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.625035][T25420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.643360][T25420] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1493.754119][T25420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.778214][T25420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.917547][T25420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.035403][T25420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.040655][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1494.724050][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1494.732108][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1494.774320][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1494.941454][T25551] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1495.242008][T17370] Bluetooth: hci4: command 0x0406 tx timeout
[ 1495.284704][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1495.303402][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1495.355233][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1495.371229][   T29] audit: type=1400 audit(1743147567.238:2518): avc:  denied  { mounton } for  pid=25420 comm="syz-executor" path="/root/syzkaller.GBev2A/syz-tmp" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1495.430494][   T29] audit: type=1400 audit(1743147567.238:2519): avc:  denied  { mounton } for  pid=25420 comm="syz-executor" path="/root/syzkaller.GBev2A/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1495.519613][   T29] audit: type=1400 audit(1743147567.238:2520): avc:  denied  { mounton } for  pid=25420 comm="syz-executor" path="/root/syzkaller.GBev2A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=89595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1495.695432][   T29] audit: type=1400 audit(1743147567.322:2521): avc:  denied  { mounton } for  pid=25420 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1495.803303][   T29] audit: type=1400 audit(1743147567.322:2522): avc:  denied  { mount } for  pid=25420 comm="syz-executor" name="/" dev="gadgetfs" ino=6798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1495.845451][T25559] fuse: Unknown parameter 'use00000000000000000000'
[ 1495.883380][   T29] audit: type=1400 audit(1743147567.500:2523): avc:  denied  { mounton } for  pid=25420 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1495.988874][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1496.949128][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1496.988125][T25576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1497.250699][   T29] audit: type=1400 audit(1743147568.987:2524): avc:  denied  { shutdown } for  pid=25579 comm="syz.6.5466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1497.269670][T25580] overlayfs: failed to decode file handle (len=6, type=32659, flags=0, err=-22)
[ 1497.803151][T25586] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1498.456533][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1498.581718][T25581] kAFS: unable to lookup cell '
[ 1498.581718][T25581] >.��?](<�'
[ 1498.581718][T25581] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1498.936240][   T29] audit: type=1400 audit(1743147570.568:2525): avc:  denied  { write } for  pid=25589 comm="syz.7.5469" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1499.194886][   T61] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1499.491325][T25602] fuse: Unknown parameter 'use00000000000000000000'
[ 1499.785018][T17370] Bluetooth: hci5: command 0x0406 tx timeout
[ 1499.813688][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1500.139468][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1500.153699][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1500.165660][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1500.173913][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1500.184793][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1500.192634][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1500.494733][   T61] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1500.527657][T25244] syz_tun (unregistering): left promiscuous mode
[ 1500.738920][T25623] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1501.078588][T25624] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1501.263988][T25611] vcan0 speed is unknown, defaulting to 1000
[ 1501.298570][   T29] audit: type=1400 audit(1743147572.776:2526): avc:  denied  { bind } for  pid=25610 comm="syz.7.5477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1501.621636][T25611] lo speed is unknown, defaulting to 1000
[ 1501.687874][   T29] audit: type=1400 audit(1743147573.131:2527): avc:  denied  { getopt } for  pid=25633 comm="syz.6.5482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1501.750706][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1502.439402][ T5130] Bluetooth: hci3: command tx timeout
[ 1502.787482][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1502.974348][T25611] chnl_net:caif_netlink_parms(): no params data found
[ 1503.100539][T25611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1503.141920][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1503.157152][   T29] audit: type=1800 audit(1743147574.516:2528): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.5486" name="/newroot/382/file0" dev="tmpfs" ino=2072 res=0 errno=0
[ 1503.181487][T25611] bridge_slave_0: entered allmulticast mode
[ 1503.218001][T25611] bridge_slave_0: entered promiscuous mode
[ 1503.226406][T25611] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1503.260103][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1503.281045][T25611] bridge_slave_1: entered allmulticast mode
[ 1503.299046][T25611] bridge_slave_1: entered promiscuous mode
[ 1503.363691][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1503.391899][T25611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1503.424259][T25611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1503.580900][T25666] kAFS: unable to lookup cell '
[ 1503.580900][T25666] >.��?](<�'
[ 1503.580900][T25666] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1503.840774][T25611] team0: Port device team_slave_0 added
[ 1504.243149][T25611] team0: Port device team_slave_1 added
[ 1504.257257][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1504.312095][T25611] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1504.338989][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1504.400092][T25611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1504.483202][T25611] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1504.491071][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1504.537040][T25611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1504.670421][ T5130] Bluetooth: hci3: command tx timeout
[ 1504.748213][T25673] can0: slcan on ttyS3.
[ 1504.751141][T25611] hsr_slave_0: entered promiscuous mode
[ 1504.761416][T25611] hsr_slave_1: entered promiscuous mode
[ 1504.768186][T25611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1504.775971][T25611] Cannot create hsr debugfs directory
[ 1504.940605][T25682] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1505.298332][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1505.334252][T25674] can0 (unregistered): slcan off ttyS3.
[ 1505.687133][ T5130] Bluetooth: hci0: command tx timeout
[ 1505.814457][T23758] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1505.876163][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1505.976397][T23758] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1505.986112][T23758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.996579][T23758] usb 7-1: config 0 descriptor??
[ 1506.233741][T25611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1506.326196][T25611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1506.378446][T25611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1506.450875][T25611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1506.459696][T25695] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1506.495642][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1506.595786][T23758] usb 7-1: Cannot set autoneg
[ 1506.650570][T23758] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1506.825772][T23758] usb 7-1: USB disconnect, device number 7
[ 1506.892543][ T5130] Bluetooth: hci3: command tx timeout
[ 1507.165822][T25611] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1507.217438][   T61] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1507.597733][T25611] 8021q: adding VLAN 0 to HW filter on device team0
[ 1507.684367][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1507.691515][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1507.901025][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1507.908173][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1508.092330][T25707] could not allocate digest TFM handle cmac-aes-neon
[ 1508.128889][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1508.466423][T25727] kAFS: unable to lookup cell '
[ 1508.466423][T25727] >.��?](<�'
[ 1508.466423][T25727] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1508.569774][T25731] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1509.075676][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1509.107549][ T5130] Bluetooth: hci3: command tx timeout
[ 1509.146087][T25611] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1509.161677][T25736] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5503'.
[ 1509.243601][T25736] input: syz0 as /devices/virtual/input/input44
[ 1509.400921][T25611] veth0_vlan: entered promiscuous mode
[ 1509.499318][T25611] veth1_vlan: entered promiscuous mode
[ 1510.009246][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1510.058867][T25611] veth0_macvtap: entered promiscuous mode
[ 1510.097242][T25611] veth1_macvtap: entered promiscuous mode
[ 1510.147181][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.169325][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.229536][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.240081][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.261562][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.272056][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.307226][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.326109][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.336017][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.379793][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.389705][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.411887][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.421766][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.465223][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.486344][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.518189][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.528156][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1510.567193][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.567193][ T5130] Bluetooth: hci4: command 0x0406 tx timeout
[ 1510.605812][T25611] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1510.688915][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1510.742925][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1510.773425][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.797684][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1510.828346][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.843455][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1510.856791][T25756] netlink: 'syz.2.5505': attribute type 39 has an invalid length.
[ 1510.893024][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.949060][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1510.981623][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.029779][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1511.121444][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.250456][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1511.369747][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.464042][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1511.474991][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.479228][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1511.485033][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1511.485051][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.485083][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1511.485095][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1511.486554][T25611] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1512.114349][T25611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.133983][T25769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12113 sclass=netlink_route_socket pid=25769 comm=syz.6.5509
[ 1512.138873][T25611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.165045][T25611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.173435][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1512.192189][T25611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.535734][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1512.549549][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1512.621757][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1512.712948][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1513.700591][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1514.722603][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1515.762479][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1515.817522][T25805] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[ 1515.824099][T25805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1515.963490][T25805] vhci_hcd vhci_hcd.0: Device attached
[ 1516.008797][T25808] vhci_hcd: connection closed
[ 1516.011927][   T29] audit: type=1400 audit(1743147586.533:2529): avc:  denied  { watch_sb watch_reads } for  pid=25803 comm="syz.2.5517" path="/503/file0" dev="tmpfs" ino=2729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1516.046784][ T3612] vhci_hcd: stop threads
[ 1516.051082][ T3612] vhci_hcd: release socket
[ 1516.073291][ T3612] vhci_hcd: disconnect device
[ 1517.105823][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1517.416353][   T29] audit: type=1804 audit(1743147587.843:2530): pid=25826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.5522" name="file0" dev="tmpfs" ino=2741 res=1 errno=0
[ 1517.437784][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1518.077098][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1518.251954][T25831] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1519.219005][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1520.278060][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1520.343531][T21396] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1520.503551][T21396] usb 1-1: Using ep0 maxpacket: 16
[ 1520.516493][T21396] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[ 1520.533017][T21396] usb 1-1: config 0 has no interface number 0
[ 1520.545318][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5533'.
[ 1520.563798][T21396] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1520.629028][T21396] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1520.662599][T21396] usb 1-1: config 0 interface 41 has no altsetting 0
[ 1520.709721][T21396] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1520.724247][T21396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.734978][T21396] usb 1-1: Product: syz
[ 1520.762848][T21396] usb 1-1: Manufacturer: syz
[ 1520.772833][T21396] usb 1-1: SerialNumber: syz
[ 1521.397279][T21396] usb 1-1: config 0 descriptor??
[ 1521.403533][T25844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1521.410906][T25844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1521.491648][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1521.525192][T25860] ceph: No mds server is up or the cluster is laggy
[ 1521.535694][T18942] libceph: connect (1)[c::]:6789 error -101
[ 1521.552167][T18942] libceph: mon0 (1)[c::]:6789 connect error
[ 1521.736165][T25870] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5533'.
[ 1521.740750][T25844] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5528'.
[ 1521.839980][T18942] libceph: connect (1)[c::]:6789 error -101
[ 1522.024106][T18942] libceph: mon0 (1)[c::]:6789 connect error
[ 1522.045977][T25877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1522.082404][T25877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1522.181121][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1522.394328][T25844] overlayfs: missing 'lowerdir'
[ 1522.909181][T25890] kAFS: unable to lookup cell '
[ 1522.909181][T25890] >.��?](<�'
[ 1522.909181][T25890] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1522.943998][T25892] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1523.251039][T21396] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[ 1523.264815][T21396] usb 1-1: USB disconnect, device number 62
[ 1523.332349][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1523.614600][T23758] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1524.009788][T23758] usb 7-1: Using ep0 maxpacket: 32
[ 1524.032866][T23758] usb 7-1: config 1 has an invalid interface number: 182 but max is 0
[ 1524.041127][T23758] usb 7-1: config 1 has an invalid descriptor of length 13, skipping remainder of the config
[ 1524.058994][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1524.063885][   T29] audit: type=1400 audit(1743147594.073:2531): avc:  denied  { read } for  pid=25899 comm="syz.2.5543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1524.103567][T23758] usb 7-1: config 1 has no interface number 0
[ 1524.129649][T23758] usb 7-1: config 1 interface 182 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1524.147982][T23758] usb 7-1: config 1 interface 182 has no altsetting 0
[ 1524.167171][T23758] usb 7-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.40
[ 1524.176495][T23758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.184730][T23758] usb 7-1: Product: syz
[ 1524.189062][T23758] usb 7-1: Manufacturer: syz
[ 1524.193827][T23758] usb 7-1: SerialNumber: syz
[ 1524.405349][T21396] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1524.475499][T23758] usb 7-1: USB disconnect, device number 8
[ 1524.585892][T21396] usb 1-1: unable to get BOS descriptor set
[ 1524.592431][ T5130] Bluetooth: hci4: command 0x0406 tx timeout
[ 1524.613462][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1524.629439][T21396] usb 1-1: config 3 has an invalid interface number: 50 but max is 0
[ 1524.638253][T21396] usb 1-1: config 3 has no interface number 0
[ 1524.652355][T21396] usb 1-1: config 3 interface 50 has no altsetting 0
[ 1524.668854][T21396] usb 1-1: New USB device found, idVendor=19d2, idProduct=1008, bcdDevice=9b.33
[ 1524.684945][T21396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.693181][T21396] usb 1-1: Product: syz
[ 1524.698844][T21396] usb 1-1: Manufacturer: syz
[ 1524.703573][T21396] usb 1-1: SerialNumber: syz
[ 1524.770926][ T5130] Bluetooth: hci2: unexpected event for opcode 0x2011
[ 1524.890238][T25915] syz_tun: entered allmulticast mode
[ 1524.905885][T25914] syz_tun: left allmulticast mode
[ 1524.942026][T21396] option 1-1:3.50: GSM modem (1-port) converter detected
[ 1524.970182][T21396] usb 1-1: USB disconnect, device number 63
[ 1525.018278][T21396] option 1-1:3.50: device disconnected
[ 1525.082400][T25919] fuse: Bad value for 'fd'
[ 1525.197909][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1526.106029][T25939] FAULT_INJECTION: forcing a failure.
[ 1526.106029][T25939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1526.124228][T25939] CPU: 0 UID: 0 PID: 25939 Comm: syz.7.5557 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1526.124251][T25939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1526.124262][T25939] Call Trace:
[ 1526.124268][T25939]  <TASK>
[ 1526.124274][T25939]  dump_stack_lvl+0x16c/0x1f0
[ 1526.124311][T25939]  should_fail_ex+0x50a/0x650
[ 1526.124345][T25939]  _copy_from_user+0x2e/0xd0
[ 1526.124365][T25939]  copy_msghdr_from_user+0x99/0x160
[ 1526.124393][T25939]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1526.124422][T25939]  ? __pfx___lock_acquire+0x10/0x10
[ 1526.124455][T25939]  ___sys_recvmsg+0xdc/0x1a0
[ 1526.124477][T25939]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1526.124498][T25939]  ? find_held_lock+0x2d/0x110
[ 1526.124528][T25939]  ? __pfx___might_resched+0x10/0x10
[ 1526.124556][T25939]  ? __might_fault+0xe3/0x190
[ 1526.124584][T25939]  do_recvmmsg+0x2f8/0x740
[ 1526.124610][T25939]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1526.124630][T25939]  ? vfs_write+0x306/0x1150
[ 1526.124659][T25939]  ? __mutex_unlock_slowpath+0x164/0x6a0
[ 1526.124683][T25939]  ? __fget_files+0x206/0x3a0
[ 1526.124702][T25939]  __x64_sys_recvmmsg+0x239/0x290
[ 1526.124722][T25939]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1526.124747][T25939]  do_syscall_64+0xcd/0x250
[ 1526.124768][T25939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.124794][T25939] RIP: 0033:0x7f25b5f8cde9
[ 1526.124810][T25939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1526.124828][T25939] RSP: 002b:00007f25b6d07038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1526.124847][T25939] RAX: ffffffffffffffda RBX: 00007f25b61a6080 RCX: 00007f25b5f8cde9
[ 1526.124858][T25939] RDX: 04000000000001dc RSI: 0000400000001980 RDI: 0000000000000005
[ 1526.124868][T25939] RBP: 00007f25b6d07090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.124878][T25939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1526.124888][T25939] R13: 0000000000000000 R14: 00007f25b61a6080 R15: 00007ffcc7f84ad8
[ 1526.124910][T25939]  </TASK>
[ 1526.551599][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1526.816740][T25949] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5561'.
[ 1527.053352][T25963] fuse: Bad value for 'fd'
[ 1527.257800][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1528.699492][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1528.713715][T25970] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5568'.
[ 1529.120497][ T5130] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1529.132419][ T5130] Bluetooth: hci2: Injecting HCI hardware error event
[ 1529.145672][T17370] Bluetooth: hci2: hardware error 0x00
[ 1529.244230][T25974] sctp: [Deprecated]: syz.0.5567 (pid 25974) Use of int in max_burst socket option.
[ 1529.244230][T25974] Use struct sctp_assoc_value instead
[ 1529.332383][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1529.818616][ T5130] Bluetooth: hci4: unexpected event for opcode 0x2011
[ 1530.025060][ T5970] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1530.657031][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1530.942365][T26007] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 26007 comm: syz.7.5578)
[ 1530.954083][   T29] audit: type=1400 audit(1743147600.508:2532): avc:  denied  { read } for  pid=26006 comm="syz.7.5578" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1530.954140][   T29] audit: type=1400 audit(1743147600.508:2533): avc:  denied  { open } for  pid=26006 comm="syz.7.5578" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1530.954173][   T29] audit: type=1400 audit(1743147600.508:2534): avc:  denied  { ioctl } for  pid=26006 comm="syz.7.5578" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1531.013956][ T5970] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1531.038371][T26009] No control pipe specified
[ 1531.059960][   T29] audit: type=1800 audit(1743147600.620:2535): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5578" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=92074 res=0 errno=0
[ 1531.097138][ T5970] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1531.107748][ T5970] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1531.128064][ T5970] usb 7-1: config 1 has no interface number 1
[ 1531.134367][ T5970] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1531.159584][ T5970] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1531.182230][ T5970] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1531.201296][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1531.216604][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.224743][ T5970] usb 7-1: Product: syz
[ 1531.225144][T26014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26014 comm=syz.2.5581
[ 1531.229491][ T5970] usb 7-1: Manufacturer: syz
[ 1531.229557][ T5970] usb 7-1: SerialNumber: syz
[ 1531.258524][ T5130] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1531.270369][ T5130] Bluetooth: hci3: Injecting HCI hardware error event
[ 1531.281311][ T5130] Bluetooth: hci3: hardware error 0x00
[ 1531.343875][T17370] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1531.724120][ T5970] usb 7-1: No endpoint at altset 1, falling back to MIDI 1.0
[ 1531.745891][ T5970] usb 7-1: MIDIStreaming interface descriptor not found
[ 1532.012149][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1532.031405][ T5970] usb 7-1: USB disconnect, device number 9
[ 1532.095875][   T29] audit: type=1400 audit(1743147601.593:2536): avc:  denied  { getopt } for  pid=26028 comm="syz.2.5586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1532.199979][T26031] syz_tun: entered allmulticast mode
[ 1532.211817][T26028] syz_tun: left allmulticast mode
[ 1532.296006][T26033] udevd[26033]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1532.498137][   T29] audit: type=1400 audit(1743147601.939:2537): avc:  denied  { read } for  pid=26041 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1532.548813][   T29] audit: type=1400 audit(1743147601.939:2538): avc:  denied  { open } for  pid=26041 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1532.661452][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1533.423570][   T29] audit: type=1400 audit(1743147601.939:2539): avc:  denied  { getattr } for  pid=26041 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1533.513918][ T5130] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1534.126988][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1534.167509][ T5130] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1534.256173][ T5130] Bluetooth: hci4: Injecting HCI hardware error event
[ 1534.273147][ T5130] Bluetooth: hci4: hardware error 0x00
[ 1534.816394][   T29] audit: type=1400 audit(1743147604.128:2540): avc:  denied  { write } for  pid=26036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1534.816454][   T29] audit: type=1400 audit(1743147604.128:2541): avc:  denied  { add_name } for  pid=26036 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1535.030161][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.085391][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.092801][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.135430][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.138653][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1535.143691][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.165164][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.173499][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.182985][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.190517][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.206106][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.552753][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.561244][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.590143][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.625240][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.647792][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.666900][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.685223][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.706415][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.727030][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.740048][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.903326][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.911457][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.919362][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.926785][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.934329][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.942732][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.945652][T26091] xt_hashlimit: size too large, truncated to 1048576
[ 1535.951588][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.983606][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1535.994677][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.002179][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.018933][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.026534][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.034047][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.041584][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.067858][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.093871][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.115884][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.133217][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.162570][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.210265][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1536.224930][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.224961][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.275217][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.310971][T21396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1536.329748][T21396] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1536.565732][T26110] program syz.5.5602 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1536.790607][   T29] kauditd_printk_skb: 7 callbacks suppressed
[ 1536.790626][   T29] audit: type=1400 audit(1743147605.980:2549): avc:  denied  { shutdown } for  pid=26117 comm="syz.0.5604" lport=47887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1536.796491][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1537.341250][ T5130] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1537.466264][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1538.606564][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1539.370729][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1539.949166][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1539.987798][   T29] audit: type=1400 audit(1743147608.973:2550): avc:  denied  { getopt } for  pid=26142 comm="syz.5.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1540.544955][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1540.839593][T26165] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5620'.
[ 1540.982975][T26166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5620'.
[ 1541.250297][T26173] siw: device registration error -23
[ 1541.338705][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1541.963060][T26183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5627'.
[ 1542.316385][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1542.946390][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1543.624850][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1543.998900][T26217] netlink: 'syz.7.5637': attribute type 4 has an invalid length.
[ 1544.232873][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1544.855177][T26235] vcan0 speed is unknown, defaulting to 1000
[ 1544.873292][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1544.888902][   T29] audit: type=1400 audit(1743147613.538:2551): avc:  denied  { append } for  pid=26230 comm="syz.0.5641" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1545.270674][T26243] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5645'.
[ 1545.285450][T26235] lo speed is unknown, defaulting to 1000
[ 1545.476796][T26247] input: syz0 as /devices/virtual/input/input45
[ 1545.735562][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1546.047299][T26235] geneve0: entered promiscuous mode
[ 1546.062989][T26235] geneve0: entered allmulticast mode
[ 1546.347605][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1547.869362][T26249] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1548.486879][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1549.168459][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1549.201881][   T29] audit: type=1400 audit(1743147617.588:2552): avc:  denied  { ioctl } for  pid=26279 comm="syz.6.5655" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1549.884228][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1550.976063][T26304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26304 comm=syz.6.5658
[ 1551.009709][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5658'.
[ 1551.328376][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1552.372962][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1552.420487][T26319] loop6: detected capacity change from 0 to 524287999
[ 1552.495013][    C1] blk_print_req_error: 156 callbacks suppressed
[ 1552.495038][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1552.510516][    C1] buffer_io_error: 124 callbacks suppressed
[ 1552.510527][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1552.532977][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1552.542272][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1552.607651][T26323] loop6: detected capacity change from 524287999 to 524288000
[ 1552.682454][   T29] audit: type=1326 audit(1743147620.844:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26325 comm="syz.7.5664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b5f8cde9 code=0x0
[ 1552.710074][T26328] netlink: 'syz.5.5663': attribute type 4 has an invalid length.
[ 1552.940934][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1553.014513][T26319]  loop6: unable to read partition table
[ 1553.090408][T26319] loop_reread_partitions: partition scan of loop6 (�����ǴW�C@'O�Q��ҥ�) failed (rc=-5)
[ 1553.131123][T21399] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1553.189067][T26304] team0 (unregistering): Port device team_slave_0 removed
[ 1553.224439][T26304] team0 (unregistering): Port device team_slave_1 removed
[ 1553.296340][T21399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1553.308973][T21399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1553.324295][T21399] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1553.333721][T21399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1553.342359][T21399] usb 1-1: Product: syz
[ 1553.395199][T21399] usb 1-1: Manufacturer: syz
[ 1553.437494][T21399] usb 1-1: SerialNumber: syz
[ 1553.497566][T21399] usb 1-1: config 0 descriptor??
[ 1553.545885][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1553.600678][   T29] audit: type=1326 audit(1743147621.704:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1553.612932][T26338] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5667'.
[ 1553.756934][   T29] audit: type=1326 audit(1743147621.704:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1553.763451][T26329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1553.781565][   T29] audit: type=1326 audit(1743147621.704:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1553.812926][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1553.837142][T26329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1554.450123][   T29] audit: type=1326 audit(1743147621.704:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1554.477234][   T29] audit: type=1326 audit(1743147621.704:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1554.593720][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1554.623969][T26338] input: syz0 as /devices/virtual/input/input46
[ 1554.626576][   T29] audit: type=1326 audit(1743147621.704:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1554.761241][   T29] audit: type=1326 audit(1743147621.704:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1554.856924][   T29] audit: type=1326 audit(1743147621.704:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1554.921482][   T29] audit: type=1326 audit(1743147621.704:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f2ae818cde9 code=0x7ffc0000
[ 1555.218061][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1555.535571][T21399] usb 1-1: USB disconnect, device number 64
[ 1555.873878][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5670'.
[ 1555.943561][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1556.067369][T25693] udevd[25693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1556.498713][T18957] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[ 1556.537006][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1556.663837][T18957] usb 1-1: device descriptor read/64, error -71
[ 1556.958288][T18957] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[ 1557.087730][T26350] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1557.115886][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1557.140984][T18957] usb 1-1: device descriptor read/64, error -71
[ 1557.269112][T18957] usb usb1-port1: attempt power cycle
[ 1557.281871][T26372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26372 comm=syz.2.5677
[ 1557.580130][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[ 1557.653424][T18957] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[ 1557.684091][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1557.711045][T18957] usb 1-1: device descriptor read/8, error -71
[ 1557.984724][T18957] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[ 1558.023838][T18957] usb 1-1: device descriptor read/8, error -71
[ 1558.158332][T18957] usb usb1-port1: unable to enumerate USB device
[ 1558.241409][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1558.809017][   T29] kauditd_printk_skb: 12 callbacks suppressed
[ 1558.809036][   T29] audit: type=1400 audit(1743147626.578:2575): avc:  denied  { unmount } for  pid=25420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1558.812006][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1559.408917][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1560.724032][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1561.096025][   T29] audit: type=1400 audit(1743147628.710:2576): avc:  denied  { append } for  pid=26414 comm="syz.6.5692" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1561.199466][   T29] audit: type=1400 audit(1743147628.748:2577): avc:  denied  { mounton } for  pid=26411 comm="syz.7.5691" path="/368/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[ 1561.293935][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1561.363821][T26424] overlayfs: failed to clone upperpath
[ 1561.922144][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1562.641925][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1563.856213][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1563.907080][T21400] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1564.162077][   T29] audit: type=1400 audit(1743147631.582:2578): avc:  denied  { listen } for  pid=26465 comm="syz.7.5707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1564.221851][T26466] vcan0 speed is unknown, defaulting to 1000
[ 1564.228252][T21400] usb 7-1: Using ep0 maxpacket: 32
[ 1564.240156][T21400] usb 7-1: config 129 has an invalid interface number: 172 but max is 0
[ 1564.248587][T21400] usb 7-1: config 129 has no interface number 0
[ 1564.281435][   T29] audit: type=1400 audit(1743147631.676:2579): avc:  denied  { accept } for  pid=26465 comm="syz.7.5707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1564.319795][T26470] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5707'.
[ 1564.335810][T21400] usb 7-1: config 129 interface 172 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB
[ 1564.374254][T21400] usb 7-1: config 129 interface 172 altsetting 0 endpoint 0x4 has an invalid bInterval 72, changing to 10
[ 1564.445300][T21400] usb 7-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice=1c.bd
[ 1564.454779][T21400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.630475][T26466] lo speed is unknown, defaulting to 1000
[ 1564.665470][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1564.926317][T21400] usb 7-1: Product: syz
[ 1564.930571][T21400] usb 7-1: Manufacturer: syz
[ 1564.936906][T21400] usb 7-1: SerialNumber: syz
[ 1565.171890][T18958] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1565.213370][T21400] appletouch 7-1:129.172: Could not find int-in endpoint
[ 1565.220464][T21400] appletouch 7-1:129.172: probe with driver appletouch failed with error -5
[ 1565.244253][T21400] usbhid 7-1:129.172: couldn't find an input interrupt endpoint
[ 1565.282011][T21400] usb 7-1: USB disconnect, device number 10
[ 1565.352037][T18958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1565.368361][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1565.390275][T18958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1565.416394][T18958] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1565.491145][T18958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.521614][T18958] usb 1-1: Product: syz
[ 1565.528331][T18958] usb 1-1: Manufacturer: syz
[ 1565.547513][T18958] usb 1-1: SerialNumber: syz
[ 1565.570563][T18958] usb 1-1: config 0 descriptor??
[ 1565.830272][T26472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1565.906770][T26472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1565.974203][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1566.532021][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1567.478687][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1567.521851][T26516] vcan0 speed is unknown, defaulting to 1000
[ 1567.585064][T18958] usb 1-1: USB disconnect, device number 69
[ 1567.728415][   T29] audit: type=1400 audit(1743147634.912:2580): avc:  denied  { bind } for  pid=26520 comm="syz.0.5722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1567.777995][   T29] audit: type=1400 audit(1743147634.950:2581): avc:  denied  { listen } for  pid=26520 comm="syz.0.5722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1567.829379][T25693] udevd[25693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1567.862154][T26516] lo speed is unknown, defaulting to 1000
[ 1568.051594][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1568.728894][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1569.371436][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1569.472739][   T29] audit: type=1400 audit(1743147636.549:2582): avc:  denied  { bind } for  pid=26548 comm="syz.7.5729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1569.639127][T26551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26551 comm=syz.0.5730
[ 1570.218396][T26564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5735'.
[ 1570.260980][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1570.355457][T26566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5734'.
[ 1570.440968][   T29] audit: type=1400 audit(1743147637.419:2583): avc:  denied  { map } for  pid=26563 comm="syz.7.5735" path="socket:[94263]" dev="sockfs" ino=94263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1570.715607][   T29] audit: type=1400 audit(1743147637.709:2584): avc:  denied  { accept } for  pid=26569 comm="syz.6.5736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1570.779924][T26574] netlink: 'syz.0.5737': attribute type 32 has an invalid length.
[ 1570.831471][T26574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5737'.
[ 1570.922367][   T29] audit: type=1400 audit(1743147637.915:2585): avc:  denied  { connect } for  pid=26571 comm="syz.7.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1570.953171][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1571.044717][   T29] audit: type=1400 audit(1743147638.018:2586): avc:  denied  { create } for  pid=26583 comm="syz.5.5740" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1571.045142][   T29] audit: type=1400 audit(1743147638.018:2587): avc:  denied  { associate } for  pid=26583 comm="syz.5.5740" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1571.346766][   T29] audit: type=1400 audit(1743147638.018:2588): avc:  denied  { mounton } for  pid=26583 comm="syz.5.5740" path="/429/file0/bus" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1571.508588][   T29] audit: type=1400 audit(1743147638.027:2589): avc:  denied  { write } for  pid=26583 comm="syz.5.5740" name="bus" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1571.635224][T25624] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1571.769703][   T29] audit: type=1400 audit(1743147638.027:2590): avc:  denied  { add_name } for  pid=26583 comm="syz.5.5740" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1571.770038][   T29] audit: type=1400 audit(1743147638.027:2591): avc:  denied  { setattr } for  pid=26583 comm="syz.5.5740" name="work" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1572.300153][T18957] IPVS: starting estimator thread 0...
[ 1572.402951][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1572.492161][   T29] audit: type=1400 audit(1743147638.027:2592): avc:  denied  { write open } for  pid=26583 comm="syz.5.5740" path=2F202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1572.557516][T26604] IPVS: using max 46 ests per chain, 110400 per kthread
[ 1572.864715][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5747'.
[ 1573.234753][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1573.806696][T26628] mac80211_hwsim hwsim48 ������: renamed from wlan1
[ 1574.323148][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1574.374967][T26630] kAFS: unable to lookup cell '
[ 1574.374967][T26630] >.��?](<�'
[ 1574.374967][T26630] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1575.246067][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1575.896771][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1575.945158][T26666] netlink: 'syz.5.5760': attribute type 32 has an invalid length.
[ 1575.953169][T26666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5760'.
[ 1576.183232][T21396] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1576.231560][T21399] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1576.577086][T21399] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1576.586672][T21399] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 6.00
[ 1576.592450][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1576.595720][T21399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.640715][T21399] usb 1-1: config 0 descriptor??
[ 1576.654919][T21396] usb 7-1: Using ep0 maxpacket: 8
[ 1576.666691][T21396] usb 7-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d
[ 1576.676963][T21396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.689260][T21396] usb 7-1: Product: syz
[ 1576.699674][T21396] usb 7-1: Manufacturer: syz
[ 1576.715903][T21396] usb 7-1: SerialNumber: syz
[ 1576.741259][T21396] usb 7-1: config 0 descriptor??
[ 1576.753987][T21396] gspca_main: sonixj-2.14.0 probing 0c45:613b
[ 1577.198386][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1577.873855][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5759'.
[ 1577.915363][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1578.320015][T26663] team0: entered promiscuous mode
[ 1578.325831][T26663] 8021q: adding VLAN 0 to HW filter on device team0
[ 1578.338852][T18957] usb 7-1: USB disconnect, device number 11
[ 1578.471648][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1579.508442][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1579.542862][T18957] usb 1-1: USB disconnect, device number 70
[ 1579.637751][T26703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5773'.
[ 1579.663976][T26703] input: syz0 as /devices/virtual/input/input49
[ 1580.062244][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1580.559626][T26719] vcan0 speed is unknown, defaulting to 1000
[ 1580.621580][T26723] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1
[ 1580.806441][T26723] PKCS7: Only support pkcs7_signedData type
[ 1581.253627][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1581.367703][T26719] lo speed is unknown, defaulting to 1000
[ 1582.099417][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1582.236671][T26713] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1582.776896][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1583.613135][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1584.925405][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1586.248349][   T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1586.454826][T26787] fuse: Unknown parameter 'grouq_id'
[ 1586.810819][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1588.032230][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1588.869504][T26831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26831 comm=syz.0.5808
[ 1588.910994][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1589.667973][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1590.558273][T26858] lo speed is unknown, defaulting to 1000
[ 1590.563845][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1590.564215][T26858] lo speed is unknown, defaulting to 1000
[ 1590.584980][T26858] lo speed is unknown, defaulting to 1000
[ 1590.596279][T26858] infiniband sy�2: RDMA CMA: cma_listen_on_dev, error -98
[ 1590.686423][T26858] lo speed is unknown, defaulting to 1000
[ 1590.692849][T26858] lo speed is unknown, defaulting to 1000
[ 1590.699210][T26858] lo speed is unknown, defaulting to 1000
[ 1590.707246][T26858] lo speed is unknown, defaulting to 1000
[ 1590.713839][T26858] lo speed is unknown, defaulting to 1000
[ 1590.720393][T26858] lo speed is unknown, defaulting to 1000
[ 1590.726934][T26858] lo speed is unknown, defaulting to 1000
[ 1590.733476][T26858] lo speed is unknown, defaulting to 1000
[ 1590.740064][T26858] lo speed is unknown, defaulting to 1000
[ 1590.746792][T26858] lo speed is unknown, defaulting to 1000
[ 1590.753973][T26858] lo speed is unknown, defaulting to 1000
[ 1590.760322][T26858] lo speed is unknown, defaulting to 1000
[ 1591.623925][   T29] kauditd_printk_skb: 8 callbacks suppressed
[ 1591.623943][   T29] audit: type=1400 audit(1743147657.268:2601): avc:  denied  { connect } for  pid=26864 comm="syz.2.5818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1591.635648][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1592.254246][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1592.281035][T26874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26874 comm=syz.6.5821
[ 1592.889377][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1592.936394][ T5130] Bluetooth: hci5: unexpected event for opcode 0x2011
[ 1593.813780][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1594.111660][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'.
[ 1594.719301][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1594.910405][   T29] audit: type=1400 audit(1743147660.215:2602): avc:  denied  { create } for  pid=26887 comm="syz.6.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1595.321036][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1595.466754][   T29] audit: type=1400 audit(1743147660.869:2603): avc:  denied  { unmount } for  pid=25611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1596.358376][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1596.454996][T26923] overlayfs: missing 'lowerdir'
[ 1596.653320][T26921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26921 comm=syz.0.5835
[ 1596.839035][ T5970] IPVS: starting estimator thread 0...
[ 1596.889730][T26937] overlayfs: missing 'lowerdir'
[ 1596.941526][T26935] IPVS: using max 60 ests per chain, 144000 per kthread
[ 1596.981827][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1597.328823][ T5130] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1597.329128][ T5130] Bluetooth: hci5: Injecting HCI hardware error event
[ 1597.335846][ T5130] Bluetooth: hci5: hardware error 0x00
[ 1597.874908][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1598.808558][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1599.875742][T26966] veth1: entered promiscuous mode
[ 1599.997144][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1600.032105][T26972] overlayfs: missing 'lowerdir'
[ 1600.416607][ T5130] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1601.061365][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1601.811871][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1601.842463][T26984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=26984 comm=syz.6.5853
[ 1602.446386][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1602.672713][T27010] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1602.684099][T27010] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1602.732639][T27010] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1603.125488][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1603.260013][T27029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1603.269249][T27029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1603.456726][   T29] audit: type=1400 audit(1743147668.343:2604): avc:  denied  { relabelfrom } for  pid=27000 comm="syz.0.5858" name="ALG" dev="sockfs" ino=95728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1604.056443][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1604.292217][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5868'.
[ 1604.932123][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1605.782564][T27052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=27052 comm=syz.6.5872
[ 1605.825924][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1606.427097][T27073] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1606.459859][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1606.478081][T27073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1606.646901][   T29] audit: type=1400 audit(1743147671.318:2605): avc:  denied  { setopt } for  pid=27078 comm="syz.7.5879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1606.896567][T27088] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5873'.
[ 1607.502648][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1607.809451][T17370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1607.823284][T17370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1607.833913][T17370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1607.841773][T17370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1607.867224][T17370] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1607.874583][T17370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1608.077548][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1608.216707][T27099] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5883'.
[ 1608.263140][T27095] vcan0 speed is unknown, defaulting to 1000
[ 1608.271461][T27099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1608.347444][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5886'.
[ 1608.355491][T27095] lo speed is unknown, defaulting to 1000
[ 1608.400420][T27099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1608.586610][T27095] lo speed is unknown, defaulting to 1000
[ 1608.733188][T27095] chnl_net:caif_netlink_parms(): no params data found
[ 1608.759117][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1608.830799][T27095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.837944][T27095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.867496][T27095] bridge_slave_0: entered allmulticast mode
[ 1608.883848][T27095] bridge_slave_0: entered promiscuous mode
[ 1608.914165][T27095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1608.934065][T27095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1608.946195][T27095] bridge_slave_1: entered allmulticast mode
[ 1608.965461][T27095] bridge_slave_1: entered promiscuous mode
[ 1609.023896][T27123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1609.048776][T27123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1609.062621][T27095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1609.086607][T27095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1609.285057][T27095] team0: Port device team_slave_0 added
[ 1609.321581][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1609.325441][T27095] team0: Port device team_slave_1 added
[ 1609.343458][   T29] audit: type=1400 audit(1743147673.853:2606): avc:  denied  { create } for  pid=27133 comm="syz.7.5893" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1609.405153][   T29] audit: type=1400 audit(1743147673.872:2607): avc:  denied  { write } for  pid=27133 comm="syz.7.5893" name="file0" dev="tmpfs" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1609.427717][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1609.448888][   T29] audit: type=1400 audit(1743147673.872:2608): avc:  denied  { open } for  pid=27133 comm="syz.7.5893" path="/405/bus/file0" dev="overlay" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1609.551811][T27143] Cannot find del_set index 0 as target
[ 1609.564224][T27095] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1609.577927][T27095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.603841][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1609.684472][T27095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1609.737977][   T29] audit: type=1400 audit(1743147674.199:2609): avc:  denied  { map } for  pid=27146 comm="syz.0.5898" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1609.776543][T27095] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1609.812992][T27095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.838925][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1609.858919][T27095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1609.902494][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1610.105380][T27095] hsr_slave_0: entered promiscuous mode
[ 1610.111678][T27095] hsr_slave_1: entered promiscuous mode
[ 1610.122673][T17370] Bluetooth: hci1: command tx timeout
[ 1610.655709][T27095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1610.665240][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1610.677330][T27095] Cannot create hsr debugfs directory
[ 1610.805093][T27095] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1610.816019][T27095] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.949853][T27095] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1610.987129][T27095] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.067611][T27095] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1611.099643][T27095] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.223999][T27095] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1611.263143][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1611.266870][T27095] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.398598][T27171] delete_channel: no stack
[ 1611.586677][T27095] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1611.598521][T21396] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1611.611413][T27095] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1611.636219][T27180] trusted_key: encrypted_key: hex blob is missing
[ 1611.655528][T27095] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1611.678937][T27095] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1611.833935][T21396] usb 7-1: Using ep0 maxpacket: 16
[ 1611.840960][T21396] usb 7-1: config 2 has an invalid interface number: 1 but max is -1
[ 1611.854336][T21396] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1611.889260][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1611.908484][T21396] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 0
[ 1611.928041][T27095] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1611.936831][T21396] usb 7-1: config 2 has no interface number 0
[ 1611.950975][T21396] usb 7-1: config 2 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1611.994039][T21396] usb 7-1: config 2 interface 1 has no altsetting 0
[ 1611.998962][T27095] 8021q: adding VLAN 0 to HW filter on device team0
[ 1612.010489][T21396] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[ 1612.029152][T21396] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[ 1612.059812][T15941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1612.067005][T15941] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1612.097068][T21396] usb 7-1: Product: syz
[ 1612.107755][T21396] usb 7-1: Manufacturer: syz
[ 1612.114243][T15941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1612.121339][T15941] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1612.129672][T21396] usb 7-1: SerialNumber: syz
[ 1612.309515][T27186] ufs: You didn't specify the type of your ufs filesystem
[ 1612.309515][T27186] 
[ 1612.309515][T27186] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1612.309515][T27186] 
[ 1612.309515][T27186] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1612.346212][T27186] ufs: ufstype=old is supported read-only
[ 1612.367042][T27186] syz.0.5910: attempt to access beyond end of device
[ 1612.367042][T27186] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[ 1612.489508][   T29] audit: type=1326 audit(1743147676.771:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27174 comm="syz.6.5906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93a2b8cde9 code=0x0
[ 1612.753468][   T29] audit: type=1400 audit(1743147676.818:2611): avc:  denied  { ioctl } for  pid=27184 comm="syz.0.5910" path="socket:[96687]" dev="sockfs" ino=96687 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1612.790625][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1612.889750][T17370] Bluetooth: hci1: command tx timeout
[ 1613.732752][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1614.176348][T27095] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1614.336822][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1614.371860][T27095] veth0_vlan: entered promiscuous mode
[ 1614.393782][T27095] veth1_vlan: entered promiscuous mode
[ 1614.477091][T27095] veth0_macvtap: entered promiscuous mode
[ 1614.512428][T27095] veth1_macvtap: entered promiscuous mode
[ 1614.587438][T21396] cdc_mbim 7-1:2.1: probe with driver cdc_mbim failed with error -71
[ 1614.606901][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.622028][T21396] usb 7-1: USB disconnect, device number 12
[ 1614.636535][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.679232][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.712991][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.728522][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.740217][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.751050][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.763480][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.774157][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.787299][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.797959][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.812272][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.823407][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.834549][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.846923][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.858412][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.912172][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.931807][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.942863][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1614.943153][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1614.968263][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1614.983653][T27095] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1615.009732][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.021693][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.042022][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.053078][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.063980][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.075845][T17370] Bluetooth: hci1: command tx timeout
[ 1615.085996][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.097284][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.108384][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.118488][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.129586][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.139765][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.150689][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.160958][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.171604][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.181604][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.192589][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.203462][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.214026][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.224337][T27095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1615.235214][T27095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1615.266493][T27095] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1615.282398][T27095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.332151][T27095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.372422][T27095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.381290][T27095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.571072][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1616.578277][   T29] audit: type=1400 audit(1743147680.036:2612): avc:  denied  { ioctl } for  pid=27222 comm="syz.0.5922" path="socket:[97382]" dev="sockfs" ino=97382 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1616.800488][T15941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1616.957590][T21397] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1617.028871][T15941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1617.068230][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1617.191787][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1617.216951][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1617.231951][T21397] usb 7-1: Using ep0 maxpacket: 16
[ 1617.244578][T21397] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[ 1617.252801][T21397] usb 7-1: config 0 has no interface number 0
[ 1617.266954][T21397] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1617.277106][T21397] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1617.290050][T21397] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1617.302315][T17370] Bluetooth: hci1: command tx timeout
[ 1617.317702][T21397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.325842][T21397] usb 7-1: Product: syz
[ 1617.331133][T21397] usb 7-1: Manufacturer: syz
[ 1617.335768][T21397] usb 7-1: SerialNumber: syz
[ 1617.650413][T21397] usb 7-1: config 0 descriptor??
[ 1617.680090][T27225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1617.707438][T27225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1617.812495][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1618.126101][T27225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1618.174572][T27225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1618.418075][T27248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5925'.
[ 1618.534157][T21397] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1618.549575][T21397] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[ 1618.650736][T21397] asix 7-1:0.251: probe with driver asix failed with error -5
[ 1618.652724][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1619.111605][T27263] random: crng reseeded on system resumption
[ 1619.365643][   T29] audit: type=1400 audit(1743147682.982:2613): avc:  denied  { write } for  pid=27261 comm="syz.5.5930" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1619.409731][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1619.449707][T27267] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1619.988501][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1620.013152][T27273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5933'.
[ 1620.128623][T27280] overlayfs: missing 'workdir'
[ 1620.233925][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'.
[ 1620.252008][T21398] usb 7-1: USB disconnect, device number 13
[ 1620.291187][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'.
[ 1620.428631][ T5970] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1620.735482][ T5970] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1620.828647][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1620.848573][ T5970] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1620.867362][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1620.871097][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1620.911099][ T5970] usb 3-1: Product: syz
[ 1620.915897][ T5970] usb 3-1: Manufacturer: syz
[ 1620.924484][ T5970] usb 3-1: SerialNumber: syz
[ 1621.019139][ T5970] usb 3-1: config 0 descriptor??
[ 1621.255886][ T5970] usb 3-1: selecting invalid altsetting 0
[ 1621.377571][   T29] audit: type=1326 audit(1743147685.106:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27271 comm="syz.2.5934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f605738cde9 code=0x0
[ 1621.508525][ T5970] usb 3-1: USB disconnect, device number 84
[ 1621.582615][T27296] overlayfs: missing 'workdir'
[ 1621.745004][T18942] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[ 1622.327073][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1622.384909][T18942] usb 1-1: device descriptor read/64, error -71
[ 1623.147898][T27314] overlayfs: missing 'workdir'
[ 1623.176111][T18942] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 1623.465246][T18942] usb 1-1: device descriptor read/64, error -71
[ 1623.595885][T18942] usb usb1-port1: attempt power cycle
[ 1623.659284][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1624.010059][T18942] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[ 1624.089910][T18942] usb 1-1: device descriptor read/8, error -71
[ 1624.321534][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1624.405462][T18942] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[ 1624.451517][T18942] usb 1-1: device descriptor read/8, error -71
[ 1624.599195][T18942] usb usb1-port1: unable to enumerate USB device
[ 1624.868443][T27333] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[ 1624.935786][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1625.517398][T21398] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[ 1625.591451][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1625.688470][T21398] usb 1-1: device descriptor read/64, error -71
[ 1625.899950][T27358] overlayfs: missing 'workdir'
[ 1625.967728][T21398] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[ 1626.111669][T21398] usb 1-1: device descriptor read/64, error -71
[ 1626.422126][T21398] usb usb1-port1: attempt power cycle
[ 1626.553884][T15938] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1626.595493][T27367] netlink: 'syz.5.5964': attribute type 21 has an invalid length.
[ 1626.604671][T27367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1626.668578][T27371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1626.790502][T21398] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[ 1626.822454][T21398] usb 1-1: device descriptor read/8, error -71
[ 1626.848223][T27367] netlink: 'syz.5.5964': attribute type 21 has an invalid length.
[ 1626.894936][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5965'.
[ 1626.967797][   T29] audit: type=1400 audit(1743147690.335:2615): avc:  denied  { mount } for  pid=27377 comm="syz.5.5966" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 1627.101424][T21398] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[ 1627.141338][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1627.174976][T21398] usb 1-1: device descriptor read/8, error -71
[ 1627.307324][T21398] usb usb1-port1: unable to enumerate USB device
[ 1627.980830][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1628.582112][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1628.851853][T27397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27397 comm=syz.0.5972
[ 1629.159121][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1630.169307][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1630.809081][T21398] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1630.838198][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1631.184249][T27336] IPVS: starting estimator thread 0...
[ 1631.194963][T21398] usb 1-1: Using ep0 maxpacket: 16
[ 1631.262811][T21398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1631.284844][T21398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1631.316509][T21398] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1631.358105][T21398] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1631.376001][T27429] IPVS: using max 46 ests per chain, 110400 per kthread
[ 1631.380206][T21398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1631.433006][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1631.456290][T21398] usb 1-1: config 0 descriptor??
[ 1631.556771][   T29] audit: type=1400 audit(1743147694.619:2616): avc:  denied  { write } for  pid=27438 comm="syz.2.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1631.814223][   T29] audit: type=1326 audit(1743147694.787:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1631.899589][   T29] audit: type=1326 audit(1743147694.787:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1631.933648][   T29] audit: type=1326 audit(1743147694.787:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1631.963047][T27443] kAFS: unable to lookup cell '
[ 1631.963047][T27443] >.��?](<�'
[ 1631.963047][T27443] ء��P!�0�^O��[��Z��vMT�l�A���/H=9.��b>9�F9��*��m�TS��'
[ 1631.963215][   T29] audit: type=1326 audit(1743147694.787:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1632.043663][   T29] audit: type=1326 audit(1743147694.787:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1632.087762][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1632.164137][T21398] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.000F/input/input51
[ 1632.177759][   T29] audit: type=1326 audit(1743147694.787:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1632.212130][T21398] uclogic 0003:28BD:0909.000F: input,hidraw0: USB HID vff.fe Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0
[ 1632.227463][   T29] audit: type=1326 audit(1743147694.787:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1632.251512][   T29] audit: type=1326 audit(1743147694.787:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27415 comm="syz.0.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb118cde9 code=0x7ffc0000
[ 1632.787679][T23758] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1632.917706][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1633.062981][T23758] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1633.090525][T23758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.121344][T23758] usb 3-1: Product: syz
[ 1633.125577][T23758] usb 3-1: Manufacturer: syz
[ 1633.135495][T23758] usb 3-1: SerialNumber: syz
[ 1633.158565][T23758] usb 3-1: config 0 descriptor??
[ 1634.009962][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1634.026011][T21397] usb 1-1: USB disconnect, device number 79
[ 1634.435803][T23758] usb 3-1: non-Atmel transceiver xxxxc976
[ 1634.639503][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1634.654509][T23758] usb 3-1: Firmware version (0.0) predates our first public release.
[ 1634.679189][T23758] usb 3-1: Please update to version 0.2 or newer
[ 1634.908958][T23758] usb 3-1: atusb_probe: initialization failed, error = -19
[ 1634.930142][T23758] usb 3-1: USB disconnect, device number 85
[ 1635.584384][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1635.839620][T27505] autofs: Unknown parameter '0x0000000000000000'
[ 1635.852681][T27507] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6004'.
[ 1635.881803][T27507] input: syz0 as /devices/virtual/input/input52
[ 1636.297233][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1636.396372][T27516] overlayfs: failed to resolve './file1': -2
[ 1636.919717][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1637.238181][T27522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1637.516144][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1637.539315][T18957] libceph: connect (1)[c::]:6789 error -101
[ 1637.560338][T18957] libceph: mon0 (1)[c::]:6789 connect error
[ 1637.609997][T27525] ceph: No mds server is up or the cluster is laggy
[ 1638.570065][T27515] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1638.592490][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1639.282857][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1639.634707][   T29] audit: type=1400 audit(1743147702.167:2625): avc:  denied  { mounton } for  pid=27553 comm="syz.0.6017" path="/90/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1639.703891][   T29] audit: type=1400 audit(1743147702.214:2626): avc:  denied  { setattr } for  pid=27553 comm="syz.0.6017" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1639.918802][T21397] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1640.451891][T21397] usb 1-1: Using ep0 maxpacket: 16
[ 1640.612678][T21397] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1640.620739][T21397] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[ 1640.665280][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1640.682706][T21397] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[ 1640.691784][T21397] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1640.711882][T21397] usb 1-1: config 0 has no interface number 0
[ 1640.744357][T21397] usb 1-1: config 0 has no interface number 1
[ 1640.761468][T21397] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1640.776162][T27565] FAULT_INJECTION: forcing a failure.
[ 1640.776162][T27565] name failslab, interval 1, probability 0, space 0, times 0
[ 1640.804677][T21397] usb 1-1: too many endpoints for config 0 interface 3 altsetting 7: 74, using maximum allowed: 30
[ 1640.867279][T21397] usb 1-1: config 0 interface 3 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 74
[ 1640.880583][T27565] CPU: 1 UID: 0 PID: 27565 Comm: syz.2.6021 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1640.880619][T27565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1640.880629][T27565] Call Trace:
[ 1640.880636][T27565]  <TASK>
[ 1640.880644][T27565]  dump_stack_lvl+0x16c/0x1f0
[ 1640.880680][T27565]  should_fail_ex+0x50a/0x650
[ 1640.880712][T27565]  ? fs_reclaim_acquire+0xae/0x150
[ 1640.880744][T27565]  should_failslab+0xc2/0x120
[ 1640.880765][T27565]  kmem_cache_alloc_noprof+0x6e/0x3d0
[ 1640.880784][T27565]  ? __mutex_unlock_slowpath+0x164/0x6a0
[ 1640.880804][T27565]  ? getname_flags.part.0+0x4c/0x550
[ 1640.880832][T27565]  getname_flags.part.0+0x4c/0x550
[ 1640.880855][T27565]  getname_flags+0x93/0xf0
[ 1640.880880][T27565]  user_path_at+0x24/0x60
[ 1640.880903][T27565]  do_fchownat+0xfa/0x200
[ 1640.880923][T27565]  ? __pfx_do_fchownat+0x10/0x10
[ 1640.880937][T27565]  ? ksys_write+0x1ba/0x250
[ 1640.880959][T27565]  ? __pfx_ksys_write+0x10/0x10
[ 1640.880983][T27565]  __x64_sys_lchown+0x7e/0xc0
[ 1640.880998][T27565]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1640.881014][T27565]  do_syscall_64+0xcd/0x250
[ 1640.881033][T27565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1640.881057][T27565] RIP: 0033:0x7f605738cde9
[ 1640.881073][T27565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1640.881087][T27565] RSP: 002b:00007f605827f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[ 1640.881104][T27565] RAX: ffffffffffffffda RBX: 00007f60575a5fa0 RCX: 00007f605738cde9
[ 1640.881115][T27565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000
[ 1640.881123][T27565] RBP: 00007f605827f090 R08: 0000000000000000 R09: 0000000000000000
[ 1640.881132][T27565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1640.881141][T27565] R13: 0000000000000000 R14: 00007f60575a5fa0 R15: 00007fff1a8af558
[ 1640.881160][T27565]  </TASK>
[ 1641.335981][T21397] usb 1-1: config 0 interface 3 has no altsetting 0
[ 1641.337171][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1641.346901][T27577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1641.393237][T21397] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=35.81
[ 1641.402695][T21397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.432607][T21397] usb 1-1: Product: syz
[ 1641.443360][T21397] usb 1-1: Manufacturer: syz
[ 1641.456806][T21397] usb 1-1: SerialNumber: syz
[ 1641.474868][T21397] usb 1-1: config 0 descriptor??
[ 1641.555244][T27578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27578 comm=syz.6.6024
[ 1642.030184][T21397] hub 1-1:0.3: bad descriptor, ignoring hub
[ 1642.059606][T21397] hub 1-1:0.3: probe with driver hub failed with error -5
[ 1642.121468][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1642.142964][T21397] usb 1-1: USB disconnect, device number 80
[ 1642.398876][T25184] udevd[25184]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1642.656804][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6032'.
[ 1642.735839][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1643.946433][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1644.895683][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1645.348592][T23758] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1645.508566][T23758] usb 1-1: Using ep0 maxpacket: 32
[ 1645.510244][T23758] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[ 1645.510278][T23758] usb 1-1: config 0 has an invalid interface number: 98 but max is 1
[ 1645.510299][T23758] usb 1-1: config 0 has no interface number 0
[ 1645.510318][T23758] usb 1-1: config 0 has no interface number 1
[ 1645.512088][T23758] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[ 1645.512118][T23758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.512143][T23758] usb 1-1: Product: syz
[ 1645.512160][T23758] usb 1-1: Manufacturer: syz
[ 1645.512176][T23758] usb 1-1: SerialNumber: syz
[ 1645.514080][T23758] usb 1-1: config 0 descriptor??
[ 1645.603183][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1645.705675][T23758] viperboard 1-1:0.61: version 0.00 found at bus 001 address 081
[ 1645.719304][T23758] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[ 1645.719327][T23758] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 1645.724594][T23758] viperboard 1-1:0.98: version 0.00 found at bus 001 address 081
[ 1645.727327][T23758] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[ 1645.727356][T23758] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[ 1645.744091][   T29] audit: type=1400 audit(1743147707.892:2627): avc:  denied  { listen } for  pid=27629 comm="syz.0.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1646.351367][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1646.675799][T23758] usb 1-1: USB disconnect, device number 81
[ 1646.902897][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1647.463816][T21407] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1647.554942][   T29] audit: type=1400 audit(1743147709.594:2628): avc:  denied  { connect } for  pid=27654 comm="syz.6.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1648.367650][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1648.635352][T27672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6052'.
[ 1648.740303][T27673] input: syz0 as /devices/virtual/input/input53
[ 1648.972318][T15955] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1649.930118][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1650.501700][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'.
[ 1650.582939][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1651.347639][T27685] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1651.475668][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1651.586467][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6061'.
[ 1651.644143][T27702] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6061'.
[ 1652.193400][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1652.792961][   T29] audit: type=1400 audit(1743147714.487:2629): avc:  denied  { append } for  pid=27721 comm="syz.0.6068" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1653.521593][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1653.836696][T23758] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1653.924839][T27735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6073'.
[ 1653.935171][T27731] 
[ 1653.937509][T27731] ======================================================
[ 1653.944532][T27731] WARNING: possible circular locking dependency detected
[ 1653.951527][T27731] 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 Not tainted
[ 1653.958620][T27731] ------------------------------------------------------
[ 1653.965619][T27731] syz.0.6071/27731 is trying to acquire lock:
[ 1653.971656][T27731] ffff888144bd6110 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x99/0x2a0
[ 1653.980520][T27731] 
[ 1653.980520][T27731] but task is already holding lock:
[ 1653.987876][T27731] ffff888025f5cf58 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x4a7/0x1360
[ 1653.998074][T27731] 
[ 1653.998074][T27731] which lock already depends on the new lock.
[ 1653.998074][T27731] 
[ 1654.008500][T27731] 
[ 1654.008500][T27731] the existing dependency chain (in reverse order) is:
[ 1654.017557][T27731] 
[ 1654.017557][T27731] -> #6 (&q->sysfs_lock){+.+.}-{4:4}:
[ 1654.025156][T27731]        __mutex_lock+0x19b/0xb10
[ 1654.030199][T27731]        blk_mq_update_nr_hw_queues+0x4a7/0x1360
[ 1654.036551][T27731]        nbd_start_device+0x172/0xcd0
[ 1654.041949][T27731]        nbd_ioctl+0x21a/0xd60
[ 1654.046721][T27731]        blkdev_ioctl+0x276/0x6d0
[ 1654.051784][T27731]        __x64_sys_ioctl+0x190/0x200
[ 1654.057105][T27731]        do_syscall_64+0xcd/0x250
[ 1654.062160][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.068581][T27731] 
[ 1654.068581][T27731] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[ 1654.077187][T27731]        blk_mq_submit_bio+0x20db/0x25f0
[ 1654.082817][T27731]        __submit_bio+0x3d1/0x690
[ 1654.087823][T27731]        submit_bio_noacct_nocheck+0x698/0xd70
[ 1654.093957][T27731]        submit_bio_noacct+0x50d/0x1ec0
[ 1654.099481][T27731]        mpage_readahead+0x41d/0x590
[ 1654.104756][T27731]        read_pages+0x1a7/0xc60
[ 1654.109630][T27731]        page_cache_ra_unbounded+0x426/0x7d0
[ 1654.115663][T27731]        force_page_cache_ra+0x24b/0x340
[ 1654.121320][T27731]        page_cache_sync_ra+0x158/0xa30
[ 1654.127508][T27731]        filemap_get_pages+0xb62/0x1c30
[ 1654.133129][T27731]        filemap_read+0x3c5/0xe70
[ 1654.138179][T27731]        blkdev_read_iter+0x187/0x4b0
[ 1654.143561][T27731]        vfs_read+0x886/0xbf0
[ 1654.148246][T27731]        ksys_read+0x12b/0x250
[ 1654.153022][T27731]        do_syscall_64+0xcd/0x250
[ 1654.158066][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.164500][T27731] 
[ 1654.164500][T27731] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}:
[ 1654.173204][T27731]        down_read+0x9a/0x330
[ 1654.178418][T27731]        page_cache_ra_unbounded+0x173/0x7d0
[ 1654.184418][T27731]        page_cache_ra_order+0x9cd/0xd00
[ 1654.190075][T27731]        filemap_fault+0x16d2/0x2ca0
[ 1654.195358][T27731]        __do_fault+0x10a/0x490
[ 1654.200482][T27731]        do_pte_missing+0xecf/0x3e10
[ 1654.205851][T27731]        __handle_mm_fault+0x1166/0x2c60
[ 1654.211484][T27731]        handle_mm_fault+0x3fa/0xaa0
[ 1654.216793][T27731]        do_user_addr_fault+0x7a3/0x13f0
[ 1654.222610][T27731]        exc_page_fault+0x5c/0xc0
[ 1654.227644][T27731]        asm_exc_page_fault+0x26/0x30
[ 1654.233023][T27731]        rep_movs_alternative+0x4a/0x70
[ 1654.238565][T27731]        _copy_from_iter+0x385/0x1560
[ 1654.243959][T27731]        mptcp_sendmsg+0x1010/0x1f50
[ 1654.249254][T27731]        inet_sendmsg+0x119/0x140
[ 1654.254292][T27731]        __sys_sendto+0x42a/0x4f0
[ 1654.259338][T27731]        __x64_sys_sendto+0xe0/0x1c0
[ 1654.264642][T27731]        do_syscall_64+0xcd/0x250
[ 1654.269668][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.276082][T27731] 
[ 1654.276082][T27731] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}:
[ 1654.283917][T27731]        lock_sock_nested+0x3a/0xf0
[ 1654.289121][T27731]        inet_shutdown+0x67/0x440
[ 1654.294132][T27731]        nbd_mark_nsock_dead+0xae/0x5d0
[ 1654.299664][T27731]        sock_shutdown+0x17c/0x280
[ 1654.304755][T27731]        nbd_ioctl+0xb21/0xd60
[ 1654.309518][T27731]        blkdev_ioctl+0x276/0x6d0
[ 1654.314576][T27731]        __x64_sys_ioctl+0x190/0x200
[ 1654.319883][T27731]        do_syscall_64+0xcd/0x250
[ 1654.324904][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.331348][T27731] 
[ 1654.331348][T27731] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1654.338982][T27731]        __mutex_lock+0x19b/0xb10
[ 1654.344017][T27731]        nbd_queue_rq+0x424/0x1220
[ 1654.349198][T27731]        blk_mq_dispatch_rq_list+0x443/0x1dc0
[ 1654.355253][T27731]        __blk_mq_sched_dispatch_requests+0xcdf/0x1620
[ 1654.362084][T27731]        blk_mq_sched_dispatch_requests+0xd8/0x1b0
[ 1654.368565][T27731]        blk_mq_run_hw_queue+0x239/0x670
[ 1654.374186][T27731]        blk_mq_flush_plug_list+0x673/0x1c60
[ 1654.380145][T27731]        __blk_flush_plug+0x2c5/0x4b0
[ 1654.385494][T27731]        __submit_bio+0x547/0x690
[ 1654.390501][T27731]        submit_bio_noacct_nocheck+0x698/0xd70
[ 1654.396640][T27731]        submit_bio_noacct+0x50d/0x1ec0
[ 1654.402252][T27731]        __bread_gfp+0x189/0x340
[ 1654.407169][T27731]        udf_load_vrs+0x8cb/0x1050
[ 1654.412263][T27731]        udf_fill_super+0x79b/0x1e00
[ 1654.417525][T27731]        get_tree_bdev_flags+0x38b/0x620
[ 1654.423143][T27731]        vfs_get_tree+0x8b/0x340
[ 1654.428061][T27731]        path_mount+0x14e6/0x1f10
[ 1654.433064][T27731]        __x64_sys_mount+0x28f/0x310
[ 1654.438420][T27731]        do_syscall_64+0xcd/0x250
[ 1654.443429][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.449826][T27731] 
[ 1654.449826][T27731] -> #1 (&cmd->lock){+.+.}-{4:4}:
[ 1654.457013][T27731]        __mutex_lock+0x19b/0xb10
[ 1654.462016][T27731]        nbd_queue_rq+0xbe/0x1220
[ 1654.467017][T27731]        blk_mq_dispatch_rq_list+0x443/0x1dc0
[ 1654.473061][T27731]        __blk_mq_sched_dispatch_requests+0xcdf/0x1620
[ 1654.479896][T27731]        blk_mq_sched_dispatch_requests+0xd8/0x1b0
[ 1654.486381][T27731]        blk_mq_run_hw_queue+0x239/0x670
[ 1654.492002][T27731]        blk_mq_flush_plug_list+0x673/0x1c60
[ 1654.497956][T27731]        __blk_flush_plug+0x2c5/0x4b0
[ 1654.503310][T27731]        __submit_bio+0x547/0x690
[ 1654.508312][T27731]        submit_bio_noacct_nocheck+0x698/0xd70
[ 1654.514444][T27731]        submit_bio_noacct+0x50d/0x1ec0
[ 1654.519965][T27731]        __bread_gfp+0x189/0x340
[ 1654.524880][T27731]        udf_load_vrs+0x8cb/0x1050
[ 1654.529970][T27731]        udf_fill_super+0x79b/0x1e00
[ 1654.535241][T27731]        get_tree_bdev_flags+0x38b/0x620
[ 1654.540861][T27731]        vfs_get_tree+0x8b/0x340
[ 1654.545782][T27731]        path_mount+0x14e6/0x1f10
[ 1654.550781][T27731]        __x64_sys_mount+0x28f/0x310
[ 1654.556044][T27731]        do_syscall_64+0xcd/0x250
[ 1654.561047][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.567444][T27731] 
[ 1654.567444][T27731] -> #0 (set->srcu){.+.+}-{0:0}:
[ 1654.574555][T27731]        __lock_acquire+0x249e/0x3c40
[ 1654.579921][T27731]        lock_sync+0xf5/0x190
[ 1654.584587][T27731]        __synchronize_srcu+0xa9/0x2a0
[ 1654.590028][T27731]        blk_mq_quiesce_queue+0x149/0x1b0
[ 1654.595732][T27731]        elevator_disable+0xe9/0x570
[ 1654.600993][T27731]        blk_mq_update_nr_hw_queues+0x41c/0x1360
[ 1654.607297][T27731]        nbd_start_device+0x172/0xcd0
[ 1654.612650][T27731]        nbd_ioctl+0x21a/0xd60
[ 1654.617390][T27731]        blkdev_ioctl+0x276/0x6d0
[ 1654.622396][T27731]        __x64_sys_ioctl+0x190/0x200
[ 1654.627665][T27731]        do_syscall_64+0xcd/0x250
[ 1654.632669][T27731]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.639068][T27731] 
[ 1654.639068][T27731] other info that might help us debug this:
[ 1654.639068][T27731] 
[ 1654.650054][T27731] Chain exists of:
[ 1654.650054][T27731]   set->srcu --> &q->q_usage_counter(io)#50 --> &q->sysfs_lock
[ 1654.650054][T27731] 
[ 1654.663430][T27731]  Possible unsafe locking scenario:
[ 1654.663430][T27731] 
[ 1654.670854][T27731]        CPU0                    CPU1
[ 1654.676192][T27731]        ----                    ----
[ 1654.681550][T27731]   lock(&q->sysfs_lock);
[ 1654.685865][T27731]                                lock(&q->q_usage_counter(io)#50);
[ 1654.693740][T27731]                                lock(&q->sysfs_lock);
[ 1654.700567][T27731]   sync(set->srcu);
[ 1654.704441][T27731] 
[ 1654.704441][T27731]  *** DEADLOCK ***
[ 1654.704441][T27731] 
[ 1654.712597][T27731] 5 locks held by syz.0.6071/27731:
[ 1654.717770][T27731]  #0: ffff888026014198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60
[ 1654.727122][T27731]  #1: ffff8880260140d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x8f/0x1360
[ 1654.738276][T27731]  #2: ffff888025f5ca28 (&q->q_usage_counter(io)#49){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x264/0x1360
[ 1654.750030][T27731]  #3: ffff888025f5ca60 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x264/0x1360
[ 1654.761963][T27731]  #4: ffff888025f5cf58 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x4a7/0x1360
[ 1654.772557][T27731] 
[ 1654.772557][T27731] stack backtrace:
[ 1654.778429][T27731] CPU: 0 UID: 0 PID: 27731 Comm: syz.0.6071 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1654.778447][T27731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1654.778457][T27731] Call Trace:
[ 1654.778469][T27731]  <TASK>
[ 1654.778479][T27731]  dump_stack_lvl+0x116/0x1f0
[ 1654.778504][T27731]  print_circular_bug+0x490/0x760
[ 1654.778530][T27731]  check_noncircular+0x31a/0x400
[ 1654.778548][T27731]  ? __pfx_check_noncircular+0x10/0x10
[ 1654.778566][T27731]  ? lockdep_lock+0xc6/0x200
[ 1654.778582][T27731]  ? __pfx_lockdep_lock+0x10/0x10
[ 1654.778597][T27731]  __lock_acquire+0x249e/0x3c40
[ 1654.778617][T27731]  ? __pfx___lock_acquire+0x10/0x10
[ 1654.778634][T27731]  ? hlock_class+0x4e/0x130
[ 1654.778647][T27731]  ? mark_lock+0xb5/0xc60
[ 1654.778663][T27731]  ? __pfx___lock_acquire+0x10/0x10
[ 1654.778680][T27731]  ? hlock_class+0x4e/0x130
[ 1654.778693][T27731]  ? __synchronize_srcu+0x99/0x2a0
[ 1654.778718][T27731]  lock_sync+0xf5/0x190
[ 1654.778735][T27731]  ? __synchronize_srcu+0x99/0x2a0
[ 1654.778755][T27731]  __synchronize_srcu+0xa9/0x2a0
[ 1654.778774][T27731]  ? __pfx___synchronize_srcu+0x10/0x10
[ 1654.778794][T27731]  ? synchronize_srcu+0xa2/0x270
[ 1654.778815][T27731]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1654.778842][T27731]  blk_mq_quiesce_queue+0x149/0x1b0
[ 1654.778865][T27731]  elevator_disable+0xe9/0x570
[ 1654.778882][T27731]  blk_mq_update_nr_hw_queues+0x41c/0x1360
[ 1654.778898][T27731]  ? __mutex_lock+0x101/0xb10
[ 1654.778913][T27731]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1654.778928][T27731]  ? rcu_is_watching+0x12/0xc0
[ 1654.778950][T27731]  nbd_start_device+0x172/0xcd0
[ 1654.778970][T27731]  ? bpf_lsm_capable+0x9/0x10
[ 1654.778993][T27731]  nbd_ioctl+0x21a/0xd60
[ 1654.779004][T27731]  ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450
[ 1654.779029][T27731]  ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450
[ 1654.779052][T27731]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1654.779063][T27731]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1654.779085][T27731]  ? __pfx_lock_release+0x10/0x10
[ 1654.779103][T27731]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1654.779114][T27731]  blkdev_ioctl+0x276/0x6d0
[ 1654.779137][T27731]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1654.779156][T27731]  ? selinux_file_ioctl+0x180/0x270
[ 1654.779175][T27731]  ? selinux_file_ioctl+0xb4/0x270
[ 1654.779193][T27731]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1654.779213][T27731]  __x64_sys_ioctl+0x190/0x200
[ 1654.779239][T27731]  do_syscall_64+0xcd/0x250
[ 1654.779258][T27731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.779285][T27731] RIP: 0033:0x7f0fb118cde9
[ 1654.779303][T27731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1654.779317][T27731] RSP: 002b:00007f0fb1f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1654.779331][T27731] RAX: ffffffffffffffda RBX: 00007f0fb13a5fa0 RCX: 00007f0fb118cde9
[ 1654.779340][T27731] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
[ 1654.779349][T27731] RBP: 00007f0fb120e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1654.779358][T27731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1654.779366][T27731] R13: 0000000000000000 R14: 00007f0fb13a5fa0 R15: 00007fff00ff8ae8
[ 1654.779378][T27731]  </TASK>
[ 1654.785269][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1655.118009][T23758] usb 7-1: Using ep0 maxpacket: 8
[ 1655.126916][   T29] audit: type=1400 audit(1743147716.554:2630): avc:  denied  { write } for  pid=27734 comm="syz.7.6073" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1655.153936][T23758] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1655.163239][T23758] usb 7-1: config 179 has no interface number 0
[ 1655.170634][T23758] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1655.213107][T23758] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1655.225585][ T5970] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1655.238572][T23758] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1655.250306][T23758] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1655.397749][ T5970] usb 1-1: Using ep0 maxpacket: 8
[ 1655.538846][T23758] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1655.553092][T23758] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1655.563088][T23758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.571814][ T5970] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[ 1655.580722][ T5970] usb 1-1: config 0 has no interface number 0
[ 1655.586858][ T5970] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 9
[ 1655.616599][T27729] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1655.624052][ T5970] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 8241, setting to 1024
[ 1655.635902][ T5970] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1655.654258][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.664271][ T5970] usb 1-1: config 0 descriptor??
[ 1655.684665][ T5970] iowarrior 1-1:0.16: IOWarrior product=0x1512, serial= interface=16 now attached to iowarrior0
[ 1655.700187][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1655.861986][T27729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1655.862835][ T5970] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input55
[ 1655.901807][T27729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1655.943070][T18957] usb 1-1: USB disconnect, device number 82
[ 1655.950523][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1655.950523][T27336] usb 7-1: USB disconnect, device number 14
[ 1655.950558][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1655.986112][T17370] block nbd0: Receive control failed (result -32)
[ 1655.992669][ T5130] block nbd0: Receive control failed (result -32)
[ 1656.000926][T27731] block nbd0: shutting down sockets
[ 1656.025547][T27336] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1656.257829][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1656.810233][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1657.364535][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1657.922248][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1658.477122][T15941] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1659.044170][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1659.598822][T11508] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1660.155236][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1660.710692][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1661.266554][ T3612] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1661.824222][ T7520] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1662.390056][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1662.945022][   T35] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02
[ 1663.501034][ T6034] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:02